SPACE logoSPACEBack

COOKIE POLICY

Last updated: 2 May 2026

  1. DATA CONTROLLERS Controllers: Simone Copetti, Andrea Citton, Bernardo Andrea Cecchini, Matteo Bertini. Privacy email: privacy@spaceeapp.com

  2. COOKIES AND SIMILAR TECHNOLOGIES As SPACE is primarily a mobile app, we use technologies equivalent to cookies, including: • session tokens; • technical identifiers; • local storage (AsyncStorage) and secure device areas (SecureStore/Keychain); • browser local storage (web version, if available).

  3. TECHNOLOGIES IN USE

Strictly necessary technical tools (legal basis: Art. 6.1.b and 6.1.f GDPR): • Supabase session token: login and backend communication. Duration: until logout/expiry. Provider: Supabase Inc. • Join token (SecureStore): invite management via deep link. Duration: temporary, until used. First party. • Language preference (AsyncStorage): remember selected language. Duration: until data deletion. First party. • Folder/photo cache (AsyncStorage): cached data for performance. Duration: until logout or data deletion. First party.

Functional tools (legal basis: Art. 6.1.a or 6.1.b GDPR): • Theme preference – light/dark (AsyncStorage): remember selected theme. Duration: until data deletion. First party. • Local UX state – e.g. tutorials seen (SecureStore): avoid repeating hints. Duration: until data deletion. First party. • Push notification token (APNs/FCM via Expo): receive push notifications. Duration: active session. Providers: Apple, Google, Expo Inc.

Analytics and profiling: SPACE does not use analytics or profiling cookies. If introduced in the future, prior consent will be requested.

  1. MANAGING PREFERENCES Mobile app: you can limit some technologies via device settings, app permissions, logout or uninstalling. Disabling essential tools may prevent the service from working. Browser (web version): manage or delete cookies/storage from browser settings. Disabling all technical cookies may compromise authentication.

  2. CONSENT Strictly necessary technical tools do not require prior consent. For non-technical tools (if introduced in the future), we will collect prior consent and allow easy withdrawal.

  3. DATA SHARING Technical data may be processed by: authorised staff of the controllers; Supabase Inc. (servers in Ireland, EU); Expo Inc., Apple Inc., Google LLC (push notifications, possible transfers to the USA with GDPR safeguards – Standard Contractual Clauses); competent authorities. For details on personal data processing, see the Privacy Policy.

  4. TRANSFERS OUTSIDE THE EEA Supabase servers are in Ireland (EU). The push notification service (Expo/APNs/FCM) may involve transfers to the USA; GDPR safeguards apply (Standard Contractual Clauses).

  5. UPDATES This Cookie Policy may be updated for regulatory or technical changes. The updated version always shows the date of last update.

  6. CONTACT Email: privacy@spaceeapp.com Controllers: Simone Copetti, Andrea Citton, Bernardo Andrea Cecchini, Matteo Bertini

Back to home