ScaleModelersHub

Privacy Policy

Last updated: July 18, 2026

1. Controller and contact

The operator of ScaleModelersHub is the controller of personal data processed through this service. Contact the controller at [email protected].

2. Data we process

  • Account data: email address, username, password hash, authentication session, profile details, and account activity.
  • Content: photos, comments, collections, reports, suggestions, and metadata you choose to provide.
  • Optional product analytics: page views and bounded events about search result counts, filters, publication, saves, comments, collections, and completed account actions.
  • Technical diagnostics: errors, stack traces, performance traces, logs, and worker metrics. Optional session replay records masked interactions only after separate consent.

Product analytics do not contain application account identifiers, email addresses, usernames, comment text, descriptions, filenames, user-entered URLs, or raw search queries.

3. Purposes and legal bases

  • Service operation, authentication, publication, and account support: performance of a contract, Article 6(1)(b) GDPR.
  • Security, abuse prevention, error monitoring, and necessary technical diagnostics: legitimate interests in operating a secure and reliable service, Article 6(1)(f) GDPR.
  • Optional Umami product analytics and optional Sentry Session Replay: consent, Article 6(1)(a) GDPR. These purposes are controlled separately.
  • Compliance with applicable legal obligations: Article 6(1)(c) GDPR.

Refusing or withdrawing optional consent does not limit the service. We do not use analytics for automated decision-making or cross-site advertising.

4. EXIF and location data

Uploaded photos may contain EXIF metadata, including GPS coordinates. Processed public variants have EXIF data removed. Originals exist temporarily while image processing completes. Do not upload sensitive location data you do not want processed.

5. Processors, recipients, and locations

We do not sell personal data. Data may be processed by:

  • The hosting, S3-compatible storage, email, backup, and content delivery providers configured for the service.
  • Umami, which is self-hosted with the application and does not receive application account profiles.
  • Sentry Cloud for error monitoring and consented Session Replay. The deployed DSN uses Sentry's EU ingestion endpoint.
  • Grafana Cloud for technical traces, metrics, and logs. The deployment uses its EU ingestion endpoint.

The primary service and Umami run on infrastructure controlled by the operator. A current list of subprocessors and transfer safeguards is available on request.

6. Retention

  • Self-hosted Umami events and sessions are automatically deleted after 90 days.
  • Self-hosted Umami replay and heatmap records, if enabled by the operator, are automatically deleted after 14 days.
  • Sentry Cloud retains errors and Session Replays for 30 or 90 days depending on the active plan; Sentry does not offer a custom shorter retention setting.
  • Account data is retained while the account is active and then as required for security, disputes, or legal obligations. Public catalog contributions may remain subject to the Terms and moderation policy.
  • Technical logs, traces, metrics, and backups expire under the configured provider retention and backup rotation policies.

7. Cookies, local storage, and consent

An HttpOnly, SameSite=Lax cookie is necessary for authentication. Umami is cookieless, but its script is not loaded and no product analytics event is queued or sent until analytics consent is granted. Session Replay stays off until its separate consent is granted. Your choices and Umami opt-out flag are stored in your browser's local storage.

Use Privacy settings in the footer at any time to change or withdraw either choice. Withdrawal takes effect immediately for future collection; previously collected data expires under the retention periods above or may be addressed through a rights request.

8. Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing performed before withdrawal.

Send requests to [email protected]. You may also lodge a complaint with your supervisory authority, including Poland's Personal Data Protection Office (UODO).

9. Changes

Material changes will be reflected on this page with a new update date. Where required, we will request consent again.

Terms of ServiceCopyright / Takedown