What we collect and why.

TL;DR

Whatchlive collects only what the app needs: your Keycloak account, your bars and votes in our database, your location coordinates only when you explicitly share them, and cookieless anonymous usage statistics via self-hosted Umami. No cookies, no third-party trackers, no advertising pixels.

Controller

The data controller is the operator per the imprint. For privacy questions or to exercise your rights (GDPR Art. 15–20), reach us by email.

What we collect

When you use Whatchlive, the following data ends up in our systems:

• Account data. First name, last name, email, verification status — managed in our self-hosted Keycloak instance. You can view, change or delete this data at any time under 'My account'.
• Activity data. Your bars (if you're a bar owner), match suggestions (votes), favourites, interested matches. Tied to your Keycloak sub-ID, not to your email.
• Location coordinates. Only when you explicitly share location via the header pin or the 'Bars near you' section. We hold latitude/longitude in the browser session (memory), not in our database. 'Stop sharing' drops the coordinates immediately. When you ask for a route, we send your location, rounded to about 100 m, and the bar to openrouteservice (HeiGIT, Germany) to calculate the walking route. The rounded position stays in our server's memory for up to an hour so the same route is not calculated twice; it is not stored.
• Browser + usage stats. Cookieless analytics via Umami: visited page, locale, browser/OS from the User-Agent header, hashed IP for coarse country attribution. Plus named events (geo_shared, bar_created, vote_submitted). Never personal content, never form input.
• Email delivery status. For confirmation and notification mails (e.g. vote confirmation to bar owners, account-deletion confirmation) we log delivery status via Brevo. Mail bodies are composed at send time and not retained in our database.
• Operational logs. Service logs on our Kubernetes servers (request timestamp, HTTP status, anonymised after 7 days). They never leave our infrastructure.
• Match reminders (only with your consent). If you switch on match reminders under “My account”, we store your consent with its time and language and email you via Brevo before matches one of your favourite bars is showing (Art. 6(1)(a) GDPR). You can withdraw it at any time — in your account or with the unsubscribe link in every reminder; withdrawal takes effect immediately. Deleting your account deletes the consent as well.
• Broadcast requests. If you request a broadcast, we store the match, the centre and radius of your area (a town, a postcode or – if you choose it – your location, rounded to about 1 km), the optional number of people and your language, linked to your Keycloak sub ID. Bars located within the radius only see the match and the number of requests and people – never your name, your email or your location. If a bar says yes, we send you an email via Brevo (Art. 6(1)(b) GDPR, because you asked to be notified). You can withdraw the request under “My account” at any time; it is deleted automatically 30 days after kick-off.

What we don't collect: cookies, third-party trackers, advertising pixels, cross-site identifiers, fingerprints. No data ever goes to Google, Meta or any ad partner.

Subprocessors

The following services process data on our behalf:

• Keycloak. Self-hosted on Whatchlive's own platform in the Infomaniak Public Cloud (Switzerland). Stores accounts, password hashes and sessions. No external sign-in service.
• Umami Analytics. Self-hosted on Whatchlive's own platform in the Infomaniak Public Cloud (Switzerland). Cookieless, anonymised session aggregates. Maximum retention 90 days.
• Sanity CMS. SaaS headless CMS hosted in EU/US for editorial content (footer copy, hero images). Stores no user or activity data.
• Brevo. SaaS transactional-email provider, EU-based. Receives only the minimum needed for each send (recipient email + template variables) and returns delivery status.
• Infomaniak Public Cloud. Swiss cloud provider (Infomaniak Network SA, Geneva) — runs the servers of our platform with Keycloak, Umami and the MongoDB database, plus the object storage for bar photos and backups. Servers in Switzerland.
• openrouteservice (HeiGIT gGmbH). Routing service in Germany. Receives only a starting point rounded to about 100 m and the bar's coordinates, when you choose 'Get directions'. No account, no identifier.

How long we keep it

Account data stays until you delete your account. Activity data (votes, favourites) gets anonymised or deleted on account deletion per the treatment matrix in our internal DSGVO doc. Analytics get aggregated automatically after 90 days. Operational logs are anonymised after 7 days.

Your rights

You have the right to access (GDPR Art. 15), rectification (Art. 16), erasure (Art. 17) and data portability (Art. 20) at any time. Under 'My account' you can export your data yourself ('Download my data'), edit it, or delete your account entirely — the deletion cascade removes or anonymises all linked data across both services automatically.

Privacy contact

Email info@whatchlive.com — privacy requests are typically answered within 30 days.