Privacy Policy

SpringsAtlas (“we”, “our”, “the Site”) is operated by Adventure Consultancy Solutions. This policy explains what data we collect when you visit springsatlas.com, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and the Philippine Data Privacy Act of 2012 (Republic Act 10173).

1. Data we collect

• Account data — when you sign in with Google OAuth, we store your name, email address, and profile picture to identify your account and enable features such as saving bookmarks.
• Newsletter subscriptions — if you subscribe, we store your email address and the date of subscription.
• Usage analytics — Vercel Analytics collects aggregated, privacy-preserving page-view data (no cookies, no fingerprinting, no personal identifiers).
• Advertising — when Google AdSense is active, Google may set cookies on your device to serve personalised ads. See Google's privacy policy.
• Server logs — standard web server logs (IP address, browser, referring URL) retained for up to 30 days for security and debugging.

2. How we use your data

• To provide and improve the Site, including personalised features.
• To send newsletter updates (only if you opted in; unsubscribe at any time).
• To detect abuse, fraud, and security incidents.
• To comply with legal obligations.

We do not sell, rent, or trade your personal data to third parties.

3. Cookies

We use cookies strictly necessary for authentication (session cookie) and optionally for advertising personalisation through Google AdSense. You can disable non-essential cookies through your browser settings at any time.

4. Third-party services

• Google OAuth — sign-in provider (Google LLC, USA)
• Cloudinary — image hosting (Cloudinary Ltd, Israel / USA)
• Vercel — hosting and analytics (Vercel Inc, USA)
• Neon — database (Neon Inc, USA)
• Resend — transactional email (Resend Inc, USA)
• Upstash — caching (Upstash Inc, USA)

Where these providers are based outside the EU/EEA, transfers are covered by Standard Contractual Clauses or equivalent safeguards.

5. Your rights

Under GDPR and the Philippine Data Privacy Act you have the right to:

• Access — request a copy of data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your account and associated data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing for marketing purposes.
• Withdraw consent — unsubscribe from newsletters at any time.

To exercise any of these rights, email privacy@springsatlas.com. We will respond within 30 days.

6. Data retention

• Account data is retained while your account is active. Deletion requests are processed within 7 days.
• Newsletter emails are removed within 24 hours of unsubscription.
• Server logs are purged after 30 days.

7. Security

All data is transmitted over TLS. Database credentials are stored as environment secrets and never committed to source code. We conduct regular dependency audits and apply security patches promptly.

8. Children

SpringsAtlas is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us for immediate removal.

9. Changes to this policy

We may update this policy periodically. Significant changes will be announced via a site notice. The “Last updated” date at the top of this page always reflects the current version.