Privacy Notice — Dumpbox

The data controller for personal data collected through dumpbox.ai is Domenico Zitiello, trading as Dumpbox as an individual resident in Italy. Privacy contact email: privacy@dumpbox.ai.

This notice covers registered users, people who upload content anonymously via QR or contribution link, guests who respond to an RSVP, people depicted in photos and videos uploaded by others, and visitors to the site.

Account data: email, UID, name, profile photo, username, creation date, plan.

Session cookie: dumpbox_session, httpOnly, 14 days, technical and does not require consent.

Uploaded content: photos/videos, date taken (EXIF) and, only if present and only as a suggestion you confirm, location rounded to ~1 km — never the exact point.

Anonymous QR contributions: the uploaded file and the technical metadata above; the name you sign your photos with, only if you write one (it's optional, the organiser sees it and it may appear next to approved photos); a random device identifier, stored in your browser, used only to count your uploads against the limit set by the organiser and never shown to anyone. No other personal data required.

Event RSVPs: name and attendance status, even without an account.

People depicted in photos: whoever uploads content guarantees they have the right to; a depicted person can request removal at privacy@dumpbox.ai.

Face search in events (only if the organiser switches it on): in an event where the organiser has switched on "Find me in the photos", from photos uploaded after activation only, we compute for each face a sequence of numbers (biometric data) used solely to let participants find their own photos with a selfie, only within that event. It is not linked to anyone's name, not used for anything else and not shared with third parties. The selfie of the person searching is not stored. The controller of this processing is the event organiser; Dumpbox acts on their behalf as processor. Details, including how to say no, in the notice shown on the event page and on the QR link.

Analytics (consent-based only): PostHog EU Cloud (cookieless), Microsoft Clarity (includes session replay), Google Analytics 4 — none activates without your explicit choice in the banner.

Anonymous counting (if you refuse): if you choose "Ignore", what stays on is the Google tag alone, in a denied state across all four Consent Mode signals. No cookie written or read, no measurement identifier, ads not personalised, and only the bare name of each event goes out — never the properties, so never your username. What remains is your IP address, which every web request carries: Google uses it to derive an approximate location and does not retain it in the reports. Legal basis: legitimate interest (Art. 6(1)(f)). Until you choose, nothing goes out. Details and how to object in the Cookie Policy.

Advertising (consent-based only): Google Ads (same gtag.js as Analytics, _gcl_au cookie) and Meta Pixel. Beyond measuring which ads lead to a sign-up, with your consent they let Google and Meta personalise the ads you see, including outside Dumpbox, and build remarketing audiences. If you withdraw consent, the withdrawal is signalled to Google (Consent Mode v2) and to Meta.

In-app browsers (no data collected): if you open dumpbox.ai from an app's built-in browser — Instagram, Facebook — we offer, at sign-in, to continue in your usual browser, because a session created inside an app does not exist outside that app. To do so we read only the string your browser already sends with every request (the user agent) and rebuild the address of the page you are on, campaign parameters included. We write and read nothing on your device, create no identifier and contact no third-party service: that is why the offer appears even before any cookie choice.

Push notifications: if enabled, a technical device token via Firebase Cloud Messaging.

Beta programme application: name, email, phone number and, if you write them, notes on what you do. We use them only to get back to you about the beta programme, on the basis of the consent you tick in the form; we delete them on request at privacy@dumpbox.ai.

Account and content management: performance of a contract. Security and legal obligations: legal obligation/legitimate interest. Analytics and advertising (campaign measurement and ad personalisation): consent, always revocable. Face search in events: explicit consent (Art. 9(2)(a)) of the people depicted, collected by the event organiser as controller, and of the person searching, given when taking the selfie; revocable at any time, with immediate deletion of the face data. Weekly email «This week on Dumpbox» (news about the service and what happened in your shared galleries, on Sundays): legitimate interest in keeping account holders informed about a service they already use (Art. 6(1)(f) GDPR). You can object at any time, with no effect on your account, through the one-click link at the bottom of every email or in Settings.

Google Firebase (authentication, database, hosting), Cloudflare R2 (media storage), Resend (sending emails: sign-in, notices and the weekly email), PostHog EU, Microsoft Clarity, Google Analytics 4, Google Ads, Meta (Pixel) — all as data processors. For face search in events, Google Cloud Run in a European Union region, with open-source models run by us: no third-party provider receives photos or faces. We do not sell your data to third parties.

Some providers (Google, Microsoft) may process data in the United States, under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

We retain data for as long as necessary to provide the service and, after an account or content is deleted, for the technical time needed to complete it. Biometric data from face search in events is deleted when the photo is deleted, when the organiser switches the feature off, when the person revokes, and in any case 90 days after the event ends; the search log after 90 days.

If you don't sign in to your account for one year, we delete the photos and videos in the Dumps you own, including photos uploaded by guests. First we email you three times (30, 7 and 1 day before), then we keep the Dumps hidden for 30 days: if you sign in during that time they become visible again, otherwise they are permanently deleted. Your account data (email, name, username) is kept until you delete your account. The full rules are in the Terms of Service, Section 11.

You have the right to access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. You can delete your account and all your data yourself from Settings, or lodge a complaint with the Autoriteit Persoonsgegevens (Netherlands) or, if you're in Italy, the Italian Garante Privacy. Write to privacy@dumpbox.ai to exercise these rights. In face search in events you can remove your face from an event directly from the feature ("Find me in the photos" → "Remove my face"), or by writing to us with the event link; the exclusion also covers future photos of that event.

You must be at least 16 years old to create an account, with no exceptions: under this age you cannot create an account, not even with the consent of a parent or guardian. If we learn that an account belongs to someone under 16, we will delete the account and the data collected.

Minors may appear in uploaded photos and videos. Whoever creates the Dump or event, or uploads the Content, is responsible for it and must have the right to share it: for a minor, with the consent of the person with parental responsibility where the law requires it (Terms of Service, Section 5).

We adopt appropriate technical and organizational measures: server-side access control, httpOnly cookies, encrypted HTTPS transmission.

We may update this notice; in case of substantial changes we will notify you via the site or by email/in-app notification.

privacy@dumpbox.ai