Privacy Policy

This policy explains how Cartographer ApS (Denmark) processes personal data when you use usevizzy.com. We are the data controller. Contact: legal@usevizzy.com.

What we process

• Account data — when you sign in with GitHub we receive your GitHub id, username, display name, email address, and avatar URL.
• Published content — the documents and workspaces you choose to publish, including any personal data you put in them. Published content is public.
• Technical data — server logs (IP address, user agent, request URLs) generated when you or your readers use the site, kept for security and debugging.
• Cookies — we use only strictly necessary cookies (your sign-in session). We don’t use advertising or cross-site tracking cookies, which is why there is no cookie banner.

Why, and on what legal basis

• Operating the Service — hosting and serving your published content, running your account and library (performance of contract, GDPR art. 6(1)(b)).
• Security, abuse prevention, and debugging — logs and rate limiting (legitimate interest, art. 6(1)(f)).
• Legal compliance — responding to valid legal requests and content notices (legal obligation, art. 6(1)(c)).

Who receives data

• Cloudflare, Inc. — our infrastructure (hosting, storage, database, CDN). Data may be processed outside the EU/EEA; transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
• GitHub, Inc. — authentication. GitHub processes your sign-in under its own privacy policy.
• The public — content you publish, and the username it is published under, are publicly visible by design.

We do not sell personal data or use it for advertising.

How long we keep it

• Account data — for as long as your account exists.
• Published content — until you delete it (plus brief edge caching, and up to 30 days in backups).
• Server logs — up to 30 days, unless needed for an ongoing security investigation.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data; ask for a portable copy; and object to or ask us to restrict processing based on legitimate interest. Write to legal@usevizzy.com and we will respond within a month. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or your local supervisory authority.

Personal data inside published content

You decide what your published documents contain. If you publish personal data about other people, you are responsible for having a lawful basis to make it public. If content published by someone else contains your personal data, use our report process and we will assess removal.

Children

The Service is not directed at children under 13, and we don’t knowingly process their data.

Changes

We will update this policy as the Service evolves and note the date above. For material changes we will give reasonable notice.