Privacy
Last updated: 13 November 2026
Who is responsible
Opusmura is operated by Tomáš Klubica, a private individual based in Slovakia (the “controller” under the GDPR). Contact for anything about your data: hello@opusmura.com.
What we collect and why
- Account: email address and password (stored only as a secure hash by our authentication provider). Needed to give you an account (contract).
- Profile: name, handle, motto, profile image and, if you choose them, your interests. These are public on your profile.
- What you publish: works, images and tags. Public once published. Image metadata such as location is removed on upload.
- Activity: whom you follow, what you save and which works you resonate with. Follows and saves are private. A creator sees how many Resonances their own work received, never who sent them.
- Views: to count views without tracking people we store a one-day hash of the work, your IP address and browser. Hashes are deleted after one day; counts are not shown publicly.
- Messages: direct messages you exchange with another member. They are private between the two of you. Our team does not read them, with one exception: a message that its recipient reports is shown to our moderators, on its own, so they can decide about it. Blocking someone is not disclosed to them. Messages are deleted with your account.
- Visits: to know how many people come and from which website, we count each visitor once a day using the same kind of one-day hash (IP address and browser) and the host name of the site that linked to us. We keep only the daily number per site. No cookies, no profile of you, no third parties.
- Reports and moderation: reports you send and moderation decisions, to keep the community safe and to meet legal duties (legitimate interest, legal obligation).
- Age: whether you confirmed you are 18 or older (you choose at sign-up and can change it in your profile). Only you can see it; we use it to decide whether works marked as artistic nudity are shown blurred. Needed to protect minors (legal obligation) and to give you the service (contract).
- Security: an anti-bot check (Cloudflare Turnstile) at sign-up and sign-in, and technical logs, to prevent abuse (legitimate interest).
No advertising, no ad tracking, no selling of data. We use only the cookies needed to keep you signed in, so there is no cookie banner.
Who processes data for us
- Supabase — database and accounts, hosted in the EU (Frankfurt).
- Cloudflare — hosting, image storage, backups, email delivery and the anti-bot check.
Both act on our instructions under data processing terms. Where data may leave the EU, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
Account and profile data while your account exists. Published works until you or moderation remove them. Backups are kept for 14 days. View and visit hashes for one day; daily visit numbers without any personal data.
Your rights
You can ask for access, correction, deletion, a copy of your data (portability), and you can object to or restrict processing. Write to hello@opusmura.com; we answer within one month. You can also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk).
Age
Opusmura is for people aged 16 and over.
Changes
If this policy changes in a meaningful way, we will tell members by email.