Privacy Policy

Effimera is designed to leave very few traces. This policy explains, plainly, what data we handle and why, under EU Regulation 2016/679 (GDPR).

Data controller

The controller is [Effimera / Legal Entity], based at [address]. For any privacy matter you can write to [contact email — e.g. privacy@effimera.app].

What data we handle and why

Location (approximate or precise). Used to place your marks on the map and show you nearby ones. It is the heart of the Service: without location a mark cannot exist. Lawful basis: performance of the service you request (Art. 6.1.b) and, where your device requires it, your system-level consent, which you can withdraw in your settings.

Device identifier / anonymous session. We use a technical identifier or an anonymous session to run the app, temporarily link marks to a device, and prevent abuse. Lawful basis: legitimate interest in providing and protecting the Service (Art. 6.1.f).

User content. The emoji, and any short text or photos you post. Lawful basis: performance of the service (Art. 6.1.b).

We do not ask for your name, email or phone number to use the map.

How we use location

Location is used to place and show marks. We do not build movement profiles and we do not sell location data. You can choose an approximate location in your device settings.

Anonymity

Effimera is designed to be mostly anonymous: no permanent profiles are needed. We identify you only through a technical identifier or a session, not through your real identity.

Ephemerality and retention

Marks are ephemeral: they fade from the map after about two hours. After that, the content is no longer visible to other users. We delete or anonymise expired content within reasonable technical timeframes. Some data may remain briefly in backups or technical logs (for security and recovery) before being overwritten or deleted. We keep data longer only where the law requires it or to handle an abuse report.

We do not sell your data

We do not sell your personal data and do not share it with third parties for marketing.

Providers and third parties

We rely on providers that process data on our behalf as processors, for example [hosting / cloud provider — placeholder] for infrastructure. They are contractually bound to process data only on our instructions.

Cookies

The website uses a single functional cookie, to remember your preferred language. We do not use profiling or advertising cookies.

International transfers

If some data is processed outside the European Economic Area, we do so only with adequate safeguards under the GDPR (for example the Standard Contractual Clauses). Details: [transfer details — placeholder].

Minimum age

The Service is intended for people aged 16 or over. We do not knowingly collect data from anyone under 16.

Your rights

Under the GDPR you have the right to: access your data, ask for its rectification or erasure, ask for restriction or object to processing, and to data portability. Given the anonymous nature of the Service, in some cases we may not be able to link the data to you as a person; if so, we may ask you for information that helps identify the data.

To exercise these rights, write to [contact email — e.g. privacy@effimera.app]. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Changes to this policy

We may update this policy. We will post the updated version with a new date and, for significant changes, we will let you know in the app.