Privacy Policy

Who we are

Mætkort (“we”, “us”) is a food-discovery app and website for Copenhagen and surrounding areas, operated by MætStudio — a sole proprietorship (enkeltmandsvirksomhed) registered in Denmark, which is the data controller for your personal data.

• Company — MætStudio (CVR-nr. 43565877)
• Address — c/o Thomas Mose Mortensen, Hvidovrevej 128F, 2. th, 2650 Hvidovre, Denmark
• Contact — privacy@maetkort.dk

What we collect

• Account data — email, name, and login provider when you sign in.
• Location — your device location (with permission) or a city you set manually, to show nearby places.
• Activity — places you save, follow, mark as tried, and lists you create.
• Offer activity — offers you claim and redeem.
• Usage analytics — optional first-party events such as venue views, offer activity, saves, and feature usage to improve the product.

How we use it

To provide discovery and personalisation, to operate offers and redemption, to keep the service secure, and to improve recommendations. We do not sell your personal data.

Mætkort may provide venues with aggregated insights about activity for their own venue, such as profile views, saves, offer claims, and redemptions. We do not provide venues with raw analytics events, consumer identities, stable session identifiers, or individual behavioral profiles.

Legal basis (GDPR)

We process data to perform our contract with you (providing the service), on the basis of your consent (location, optional analytics), and our legitimate interest in operating and improving Mætkort.

Your rights

You can access, correct, export, or delete your data. Account deletion is available in the app (Profile → Delete account) and on request via privacy@maetkort.dk. You may withdraw consent and lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

Data we share

Service providers that host our infrastructure, database, storage, authentication, crash reporting, and email delivery process data on our behalf under data-processing agreements. Venues may receive aggregate insights for their own venue only, not consumer-level data. Our current sub-processors include Supabase (database and authentication), Fly.io (API hosting), Cloudflare R2 (image storage), Resend (email delivery), Sentry (error monitoring), and Vercel (web hosting).

Retention

We keep personal data for as long as your account is active, then delete or anonymise it, except where law requires longer retention (e.g. accounting records for redeemed offers). Concrete periods per data category are set out in our internal retention schedule, available on request via privacy@maetkort.dk.

Cookies & similar storage

We use browser storage (mostly localStorage, not third-party tracking cookies) in three categories:

• Essential — keeps you signed in (your Supabase session) and remembers your cookie/consent choice. Always on; the service doesn’t work without it.
• Preferences — your language, theme, and privacy toggle choices. Always on; these just remember settings you chose.
• Analytics — an anonymous, first-party session identifier used only when you’ve opted in via the cookie banner or Settings → Analytics. Off by default. You can change this anytime.

We don’t use third-party advertising cookies or cross-site tracking.

Children

Mætkort is not directed to children and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact privacy@maetkort.dk and we will delete it.