Skip to content
CMNTY
Privacy

Privacy policy

CMNTY XYZ AB (corporate ID 559053-6354, Regeringsgatan 65, 111 56 Stockholm, Sweden) is the data controller for personal data collected via cmnty.xyz and the signed-in services on the same domain. Below is what we collect, why, and the rights you have.

  • Sign-in session (Supabase) is stored locally in your browser to keep you signed in. Legal basis: contract.
  • Language preference is stored locally so we remember whether you prefer Swedish or English. Legal basis: legitimate interest.
  • If you click "Accept" on the cookie notice, we send usage data to PostHog (EU-hosted) and Google Analytics (Google; may be transferred to the US under the EU–US Data Privacy Framework) so we can understand what works on the site. Nothing is used for advertising. Legal basis: consent. You can withdraw consent at any time from the footer.
  • When you join as a member or book a Day Pass, we process the information you provide (name, email, payment details) to handle the membership or booking. Legal basis: contract. Payment details are handled by Stripe; we never store card numbers.
  • Service providers that process your data on our behalf: Supabase (authentication, database, EU-hosted), Stripe (payments), PostHog and Google Analytics (analytics, if consent is given), Vercel (hosting, and cookieless anonymous visit statistics without consent: no cookies, no personal data, never for signed-in members), Resend (transactional email), Google (if you sign in with Google).
  • Retention: member data is kept for as long as your account is active and is deleted within 30 days of account closure, except where law (e.g. Swedish bookkeeping law) requires longer retention of receipts for up to 7 years.
  • Your rights under GDPR: access, correction, erasure, data portability, objection, restriction. You also have the right to lodge a complaint with the Swedish data protection authority (IMY).
  • No advertising cookies, no marketing pixels, no tracking after sign-in. We do not sell personal data to third parties.

Questions about how we handle data, or a GDPR request (access, correction, erasure): email fam@cmnty.xyz.

Last updated: 25 September 2026.