Privacy Notice

This notice explains how MateRico handles personal data when you browse the website or use the mobile app, create or use an account, change settings, publish community content, send feedback, upload files, scan a barcode, or join the newsletter.

The data controller for MateRico is Dominik Mędrala, conducting business as Milton Corp (Polish NIP/tax id 5521622830, REGON 384725932), operating MateRico. For privacy requests, contact [email protected] or use the contact form linked in the site.

It covers the public website, native mobile app, catalog, account, and community experience. If a future feature has a separate flow with additional terms, we will link to it directly there.

MateRico-controlled production storage for the database, uploaded files, application logs, and backups runs on an OVHcloud VPS in Roubaix, France (EU). External services such as Google and Apple sign-in, Google Analytics, MailerLite, and user-initiated YouTube playback are described below because they may process data under their own service terms and data-processing safeguards.

We keep the data needed to run the site and answer you. Depending on what you do, this can include cookie choices, language preference, contact details you submit, uploaded images or notes, and basic technical records tied to security and troubleshooting.

We use data to operate the website and app, provide account and community features, respond to submissions, protect the service, and improve catalog quality. Google or Apple sign-in is used for account access and is not treated as marketing consent. Google Analytics is not loaded until analytics consent is granted. MateRico always runs bounded first-party visitor measurement and aggregate counters for public-page entries, path-to-path transitions, 30-minute sessions, and predefined feature names to understand and operate the catalog. These counters do not include submitted content or an account id, and they do not retain a complete browsing history for an individual visitor. MateRico does not currently use marketing cookies.

We rely on the legal basis that matches the specific feature. Account sessions, saved lists, and profile settings are processed to provide requested account functionality. Reviews, community posts, reactions, and reports are processed to provide the community feature under the Terms and Community Policy. Contact, feedback, and catalog-correction messages are processed to respond to the request and improve the catalog. Newsletter sending and optional analytics use consent. Security logs, abuse prevention, bounded first-party visitor measurement, aggregate page-journey and predefined-feature counters, and essential session storage rely on operating and protecting the service. Some records may also be kept when needed for legal obligations or claims.

MateRico is not directed to children. Account, feedback, and newsletter features are intended for adults.

MateRico-controlled account, community, feedback, upload, log, and backup storage stays on the OVHcloud VPS in Roubaix, France (EU). The application database, user uploads, application logs, and local backups are controlled there by MateRico. Local backups are retained as 30 daily and 4 weekly recovery points, and no MateRico-controlled backup is intentionally transferred outside the EU.

Data may also be processed by infrastructure providers, Google or Apple as account sign-in providers, Google Analytics after analytics consent, MailerLite for newsletter delivery, or YouTube after you choose to play an embedded video. Video thumbnails are proxied by MateRico so opening a page does not itself contact YouTube. We do not sell personal data.

If a provider processes data outside the European Economic Area, the production owner must keep the provider contract, data-processing terms, adequacy decision, or standard contractual clauses aligned with the live configuration before relying on that provider.

Feedback submissions and attachments are kept until the matter is closed and then for no longer than 12 months unless a documented legal or security reason requires more time. Security event and request metadata is normally kept for up to 90 days unless an incident, troubleshooting need, legal obligation, or claim requires longer retention. Account deletion requests are kept reversible for 30 days before the account and cascading account-bound lists, social data, and community content are removed by scheduled cleanup. Users can also delete their own community posts or withdraw reviews earlier. Newsletter records are kept until unsubscribe, withdrawal, or a valid deletion request, while consent and community-policy acceptance evidence is kept only as long as needed for legal obligations or claims.

You can reopen cookie preferences from the footer at any time. If you have a MateRico account, you can change your display name and profile image setting, manage newsletter and notification preferences, delete your community posts, withdraw reviews, request account deletion, and restore the account during the 30-day grace period. Newsletter emails should always include an unsubscribe path.

You can ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent for information you submitted through MateRico by using the active contact channel shown in the site. You may also complain to the competent data protection authority.

If we materially change this notice, we will update the date on this page and publish the revised version here.