Privacy Policy
Last updated: 17 September 2026
This policy explains how SDP Studio processes personal data when you use SpawnParty.
1. Controller
The controller is SDP Studio, owner Ivan Kriuchenkov, Joseph-Haas-Str. 15, 76593 Gernsbach, Germany. Email: sdpstudio2025@gmail.com.
2. Data we process
For accounts: name, email and account data processed through Supabase Auth. For companies/jobs: information voluntarily entered by the user, including text, links and images. Employer application contacts are displayed directly on the job page. SpawnParty does not receive or store CVs or internal applications.
3. Purposes and legal bases
We process data to provide accounts, publish and administer jobs, maintain security, prevent abuse and operate the service. Depending on the situation, the legal basis is contract/pre-contractual steps, legal obligations or legitimate interests in a secure service. PostHog analytics is enabled only after consent.
4. Supabase
SpawnParty uses Supabase for Auth, PostgreSQL and Storage. Account, company, job and uploaded-image data are stored there. Access is protected by authentication and RLS policies. No service_role key is exposed in the browser.
5. PostHog
PostHog is used for product and web analytics. We send limited event data such as page views, job views, searches and contact clicks. We do not send passwords, CVs, phone numbers or application contents to PostHog. PostHog is loaded only after analytics consent. Depending on the selected data region, processing may take place in the EU or another jurisdiction shown in the project settings.
6. Cookies and local storage
Necessary browser mechanisms are used for site operation, including authentication sessions and language preference. Analytics is handled separately through consent. See Cookie Policy.
7. Public user content
Jobs, company profiles and images published as part of a listing are intended to be publicly viewable. Do not upload third-party personal data, secrets, documents or material for which you do not have the required rights.
8. Retention
Account and published data are kept for as long as necessary to operate the service and meet contractual or legal obligations. Deleted content may remain for a limited period in backups or technical logs where necessary for security and recovery.
9. Your rights
Where provided by GDPR, you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Contact sdpstudio2025@gmail.com. You also have the right to complain to a competent supervisory authority.
10. Account deletion
You may request deletion by emailing the operator. We will delete or anonymise data that we are no longer legally required to retain, subject to statutory retention periods.
12. Changes
This policy may change when the service, providers or law changes. The current version and update date are published here.