Privacy
This Privacy Policy explains how Canabasser OÜ (“we”, “us”, “our”) collects, uses, and protects your personal data through the canabasser.com website, “Canabasser” mobile app, and related services.
Table of Contents
- Data We Collect
- How We Use the Data
- Legal Basis
- User Rights
- Cookies and Tracking
- Analytics and Advertising Partners
- Data Retention
- Data Storage and Transfers
- Security
- Children’s Privacy
- Changes to This Policy
- Contacting Us
Data We Collect
We collect and process the following categories of personal data when you use our Services:
Identification data: first name, middle name, last name, nickname, and email address. These may be required for account verification, communication, or future payment and billing purposes.
Profile data: photo, biological sex, sexual preferences, age, birthdate, country, and personal description (bio).
App data: posts, responses, likes, matches, messages, impressions, and AI-generated summaries or recommendations.
Location data: your selected or detected location, city, or region, including GPS-based coordinates when provided by your device.
Technical data: device type, operating system, browser, IP address, and session identifiers.
Cookies and local storage used for authentication, login persistence, and onboarding recovery.
Analytics and diagnostics data (only when you consent) as described in our Cookie Policy.
We do not sell personal data.
Certain information—such as biological sex, sexual preferences, and location—may be considered sensitive under the GDPR.
We process this only for matching and compatibility purposes, based on your explicit consent.
How We Use the Data
We process your data to:
- Create and manage user accounts.
- Enable matching and AI-assisted features.
- Personalize your experience and suggestions.
- Prevent abuse, fraud, or harm.
- Comply with legal obligations.
Users can delete all personal data at any time through My Account.
Legal Basis
We process your data under:
- Consent – when you agree to use our Services or tracking cookies.
- Contract necessity – to provide and maintain the app experience.
- Legitimate interests – to secure, improve, and operate our systems.
- Legal obligation – to maintain transaction or consent records.
User Rights
Under the EU General Data Protection Regulation (GDPR) and similar privacy laws, you have the right to:
- Access, correct, or delete your personal data.
- Withdraw consent at any time.
- Export or request a copy of your data.
- Restrict or object to processing (EU users).
- Request data portability (EU users).
- Request details of data collection, disclosure, or sale (US users, per CCPA).
- Complain to the Estonian Data Protection Inspectorate (AKI) if you believe your rights have been violated — see the official AKI website.
You can exercise these rights by contacting us at support@canabasser.com or using the in-app options under My Account.
We respond to all valid requests within 30 days as required by the GDPR.
Cookies and Tracking
We use cookies for authentication, preferences, and analytics to understand how people discover and use Canabasser. No data is shared for advertising or profiling. See our Cookie Policy for details and management options.
Analytics and Advertising Partners
When you consent to analytics or marketing cookies, limited data may be shared with trusted third-party processors to measure usage and campaign performance:
Google Analytics 4 – usage statistics and performance metrics
Provider: Google Ireland Ltd.
Data: page interactions, session duration, country, device type.
Retention: up to 2 years.Meta Pixel / Meta Conversions API – campaign measurement and attribution
Provider: Meta Platforms Ireland Ltd.
Data: page views, events, browser metadata.
Retention: up to 90 days.TikTok Pixel – ad performance and conversion tracking
Provider: TikTok Technology Ltd.
Data: page views, conversions, device data.
Retention: up to 13 months.X Ads Pixel (formerly Twitter Pixel) – ad and campaign performance
Provider: X Corp.
Data: page views, browser metadata, referral sources.
Retention: up to 90 days.Hotjar – anonymous session recordings and heatmaps
Provider: Hotjar Ltd.
Data: mouse movements, scrolls, clicks, and anonymised session data.
Retention: up to 365 days.
These integrations help us improve usability and measure the effectiveness of campaigns.
They do not enable personalised advertising or cross-site tracking.
Processing occurs only after user consent in accordance with Art. 6(1)(a) GDPR.
Data Retention
Personal data is kept only as long as necessary for service operation or legal compliance. Deleted accounts are fully removed from active systems and anonymized in logs where required by law.
Data Storage and Transfers
Your data is stored securely on DigitalOcean servers located in the United States.
- For users outside the EU, data may be transferred to servers in the US or other countries with appropriate safeguards such as EU Standard Contractual Clauses (SCCs).
- Transfers are performed in compliance with the GDPR for EU users and equivalent privacy laws for other regions.
Security
We implement industry-standard technical and organizational measures to protect your data, including encryption, access controls, and continuous monitoring.
Despite our safeguards, no system can be completely secure. Users are encouraged to keep their passwords and login credentials confidential.
Children’s Privacy
Canabasser is intended for adults 18 years or older. We do not knowingly collect personal data from anyone under 18. If we discover that a user under 18 has created an account, we will delete their data promptly.
Changes to This Policy
We may update this Privacy Policy periodically. Substantial changes affecting how personal data is handled will be communicated via email or **in-app notifications ** before they take effect.
Users are encouraged to review this Policy regularly.
Contacting Us
For questions, concerns, or requests regarding your data, contact:
Canabasser OÜ Marta 14-11A, Tallinn, 13112, Estonia Email: support@canabasser.com
EU users may also contact the Estonian Data Protection Inspectorate (AKI) for unresolved issues.
Last updated: November 11, 2025
See also our: