Privacy Policy

This Privacy Policy explains how Lostora collects, uses, and protects personal data when you use our website and services.

1. Data Controller

Lostora
Steffen Liebert
Cosimastraße 121
81925 Munich
Germany
Email: info@lostora.com

2. Data We Collect

Account data: email address, password stored securely by our authentication provider, and profile fields such as nickname, first name, last name, country, and region.
Content you submit: lost and found item details, descriptions, photos, approximate location data, and other information you provide.
Messages: communications exchanged between users through the Lostora messaging system.
Location data: approximate locations provided in lost and found reports.
Technical data: server logs such as IP address, browser type, device information, timestamps, and security-related events.

3. How We Use Your Data

To create and manage your account.
To display and process lost and found listings.
To enable contact and messaging between users.
To display locations on maps.
To send transactional emails such as account confirmations.
To maintain platform security and prevent abuse.
To improve the functionality and reliability of Lostora.

4. Legal Bases

Contract necessity: providing the service you request, including accounts, listings, messaging, and platform access.
Legitimate interests: platform security, abuse prevention, service improvement, and fraud prevention.
Consent: where optional cookies, analytics, marketing tools, or similar technologies are used.
Legal obligation: where we are required to retain or process information by law.

5. Cookies & Similar Technologies

Lostora currently uses technically necessary cookies or local storage required for authentication, security, language settings, and basic functionality.

If we add analytics, advertising, or marketing cookies in the future, we will request consent before setting non-essential cookies.

6. Service Providers & Processors

We use trusted service providers to operate Lostora. These may include:

Supabase for database, authentication, storage, and backend services.
Mapbox for maps and location services.
Resend or another email provider for transactional email delivery.
Hosting providers for serving the website and related services.

We do not sell your personal information.

7. Maps & Location Data

Lostora uses map services to display maps and location-based information. When you interact with maps, technical data such as your IP address and map requests may be processed by the map provider.

Lost and found reports may contain approximate location information provided by users. This information is used to help reconnect lost items with their owners.

8. Photos & User Uploads

Users may upload photos and other content related to lost or found items. Uploaded content may be publicly visible to other users.

Users are responsible for ensuring that they have the necessary rights to upload such content.

9. User Messages

Lostora allows registered users to exchange messages regarding lost and found items. Messages are stored and processed to provide the messaging functionality, support platform security, and prevent abuse.

10. Email Communication

Lostora may send transactional emails such as account confirmations, password resets, service messages, and notifications related to lost and found reports.

11. International Transfers

Your data may be processed in countries outside your country of residence. Where required, appropriate safeguards such as Standard Contractual Clauses may be used.

12. Data Retention

We keep personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce our rights.

13. Account Deletion

You may request deletion of your account and personal data at any time by contacting us at info@lostora.com or via the Contactpage.

Certain information may be retained where required by law or for legitimate purposes such as fraud prevention, dispute resolution, or legal compliance.

14. Your Rights

Depending on your location, you may have rights such as access, correction, deletion, objection, restriction of processing, data portability, and withdrawal of consent.

To exercise your rights, contact us at info@lostora.com.

15. Security

We implement reasonable technical and organizational measures to protect personal data. However, no online service can guarantee absolute security.

16. Children

Lostora is not intended for children. If you believe that a child has provided personal data, please contact us.

17. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date indicates the latest version.

Last updated: 2026-05-29