Privacy Policy

Who is responsible

Tomáš Spáčil, Edmunda Husserla 1213/3, 779 00 Olomouc, Czech Republic, business ID 22511334, is the controller of personal data processed through this site. Contact: hello@flexlist.net.

The short version

Everything you put on your profile is public on purpose. Your email address is not, and is used for exactly one thing: telling you when somebody outflexes you.

What we collect

• Profile content you submit — display name, description, link, country, category, avatar. This is published. That is the point of the Service.
• Your email address — optional, never displayed publicly, never sold. Used to confirm your payment and to notify you when someone outranks you. If you leave it blank we store nothing: the payment provider asks for an address of its own to send you a receipt, and does not pass it to us.
• Payment records — the amount, the time, and an identifier from the payment provider. We do not receive or store your card number, name on card, or billing address; those stay with the payment provider.
• Click counts — when someone clicks a profile's outbound link, we increase a counter. We do not store who clicked.
• Server logs — standard technical records kept briefly by our hosting provider for security and diagnostics.
• Anonymous visit statistics — which pages are opened and roughly where visitors come from. No cookies are set and nothing is stored on your device. Visitors are counted using a value derived from the request, which is discarded the same day and cannot be traced back to you or linked to your activity on any other site.

What we do not do

• No advertising cookies and no advertising networks.
• No selling or renting of email addresses or any other data.
• No marketing emails. The only emails are about your own rank.
• No tracking of individual visitors across other websites.

Why we are allowed to process it

• Performance of a contract — publishing your profile and processing your payment is what you paid for.
• Legitimate interest — notifying you when you are outflexed, keeping click counts, preventing fraud and abuse, and keeping the site working.
• Legal obligation — keeping accounting records of payments for the period required by law.

How long we keep it

Profiles and their payment history remain public for as long as the Service exists — the permanence of the record is part of what makes the board meaningful. Payment records are kept for the period required by accounting and tax law even after a listing is removed. Ask us to erase your profile and the name, description, link, country, avatar and email address on it are wiped — the payment record stays, but it is no longer attached to a name.

Who else sees the data

• The payment provider, which acts as merchant of record and processes your payment and card details under its own privacy policy.
• Our hosting and database providers, which store the data on our behalf within the European Union.
• Our email provider, which sends the outflex notifications.
• Our analytics provider (Umami), which counts visits without cookies and without profiling.
• Everyone, for the parts of your profile that are public by design.

Where a provider processes data outside the European Economic Area, it does so under standard contractual clauses or an equivalent safeguard.

Your rights

If the GDPR applies to you, you have the right to access your data, to correct it, to have it erased, to restrict or object to its processing, and to receive it in a portable format. You can also complain to a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

Erasure has a limit worth knowing before you pay: we can remove your name, description, link and avatar, and we will. We cannot erase the record that a payment of a given amount happened at a given time, because we are legally required to keep accounting records — but that record can be detached from your identity.

To exercise any of these rights, write to hello@flexlist.net. We answer within 30 days.

Cookies

This site sets no cookies of its own at all — not for advertising, not for tracking, not even for counting visits. That is why you see no cookie banner: there is nothing to ask you about. The payment provider sets its own cookies on its own checkout pages, under its own policy.

Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a minor has submitted a listing, write to us and we will remove it.

Changes

If this policy changes, the date at the top of the page changes with it. Substantial changes affecting existing users will also be sent by email.