§01

Service Operator

The service operator is:

Later Metric

Contact: support@latermetric.com

§02

Data We Process

We only process data necessary for the service operation:

- Email or login identifier (for user authentication)

- Information whether the user has active Premium

This data is stored securely on our server.

§03

Cookies We Use

We use cookies strictly to ensure proper service functionality.

Types of cookies:

- Authentication (Supabase): Maintains login sessions; retained for the session duration (up to 7 days). Essential.

- CSRF Protection: Prevents cross-site request forgery attacks; retained for the session duration. Essential.

- Session Management: Stores user preferences and Premium status; retained until logout or session expiry. Essential.

§04

Cookie Management

You can manage cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of our service.

Most browsers allow you to:

- View and delete cookies

- Block third-party cookies

- Block cookies from specific sites

- Block all cookies

Note: We do not use any tracking or advertising cookies.

§05

Data We Never Process

Important: We never process the following data:

- We do not store or send any Instagram ZIP files

- We do not store content of messages, photos, videos, reactions, or any personal data from Instagram

- ZIP file is processed exclusively locally on the user's device

§06

Payments

Payments are processed through Stripe.

We do not see or store credit card data or any other financial information.

§07

Purpose of Data Processing

We use data exclusively for:

- User authentication

- Displaying Premium status

- Proper application functionality

§08

Legal Basis Under GDPR

Processing is carried out according to:

- Art. 6 para. 1 letter b) – Contract performance (service provision)

- Art. 6 para. 1 letter f) – Legitimate interest (secure authentication)

§09

Data Retention Period

- Email + Premium status are retained while the account is active

- User can request account deletion at any time

§10

User Rights

User has the right to:

- Access their data

- Correction or deletion

- Restriction of processing

- Data portability

- File a complaint with the Data Protection Authority

Contact for GDPR requests: support@latermetric.com

§11

Security

- Data is transmitted via HTTPS and stored in secure systems

- We do not share it with any third parties except Stripe (payments)

§12

Policy Changes

This Privacy Policy may be updated; changes will be published here.