Legal

Privacy Policy

Last updated: 13 August 2026

1. Controller

Marco Pollmann
Solo Founder, Germany
Email: info@twoclouds.de

Marco Pollmann is the controller for personal data processed on Roast My App, under the GDPR (Art. 4 No. 7).

2. What we collect

Depending on how you use the site, we may process:

  • Name, email, and X handle (jury applications, accounts, submissions)
  • App Store listing data you ask us to pull, plus optional paywall images and strategy text
  • Jury scores and written verdicts
  • Sponsor claim details (name, bio, link, optional logo)
  • Payment references from Stripe (we do not store full card numbers)
  • Technical logs needed to run and secure the site (IP address, timestamps, error data)

3. Why we process it

To operate the leaderboard, verify ownership, review jury applications, publish roasts, sell and display sponsor slots, and keep the service secure. Legal bases are Art. 6(1)(b) GDPR (contract / requested service), Art. 6(1)(c) (legal duties, e.g. invoicing), and Art. 6(1)(f) (legitimate interest in running and protecting a public site).

4. Processors

We use infrastructure providers to host the site, database, auth, file storage, and payments (including Supabase and Stripe). They process data only on our instructions. Stripe is an independent controller for the payment itself.

5. Cookies and accounts

If you sign in, we use session cookies or similar storage so you stay logged in. We do not use advertising cookies.

6. How long we keep data

Account, submission, roast, and sponsor records are kept while the service needs them (for example while an app is listed or a sponsor slot is live) and as long as tax or legal rules require. You can ask us to delete data that we are not required to keep.

7. Your rights

You may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. You may also lodge a complaint with a supervisory authority — in Germany, typically the data protection authority of your federal state, or the BfDI.

Write to info@twoclouds.de to exercise these rights.

8. Public pages

Published apps, jury names/handles, scores, verdicts, and approved sponsor cards are meant to be public. Do not submit information you do not want shown on the internet.