What we collect.

Christchurch Web Solutions Ltd, UK, is the data controller for BTYV. Contact: hello@christchurchwebsolutions.co.uk.

• Account: email, display name, bcrypt-hashed password, optional social handles.
• Activity: your projects, beta requests, applications, feedback submissions, ratings, NDA acknowledgements.
• Session cookies:a single HttpOnly cookie carrying a JWT — we don't use third-party analytics or advertising cookies.
• Optional metadata you provide in feedback (browser, OS, screen width). We auto-detect these client-side; you can edit or blank them before submitting.

• No ad-network tracking.
• No third-party analytics that share a user fingerprint with other sites.
• No access to your testing activity inside the products you test — the maker controls that.

Account info lets you sign in. Activity records are how the marketplace works. NDA snapshots exist so we (and the maker and you) can prove what was agreed if a dispute arises. We do not sell your data or share it with advertisers.

All data lives in a self-hosted Postgres database on a Hetzner server in Falkenstein, Germany (EU). Transport is TLS. Passwords are bcrypt-hashed (cost 12). Per-user data is protected by Postgres row-level security policies.

We send transactional emails (application accepted, feedback submitted, revisions requested, rating received, etc.) via Postal, self-hosted on our infrastructure. We don't send marketing emails. You'll receive notifications for events tied to your own activity.

Under UK/EU data protection law you have the right to access, correct, or delete your personal data, and to object to processing. Email us and we'll action requests within 30 days. You can delete your own account at any time; when you do, your account data and NDA acknowledgement records are retained only as long as needed to handle active obligations (e.g. a still-open dispute).

We set one cookie, btyv_session, that keeps you signed in. It's HttpOnly, strict on sameSite, and Secure in production. No third-party cookies are set.

BTYV is not for anyone under 18. If you suspect a child has created an account, tell us and we'll remove it.

Updates to this policy will be posted here and — for material changes — emailed to active users.