Privacy
What we collect, why, and how to get it deleted.
Who we are
mam.al is run by [COMPANY NAME], NIPT [NUMBER], [ADDRESS], Albania. We decide how your personal data is used, which makes us its "controller". Write to [email protected] about anything on this page.
What we collect, and why
- Parents who create a pool: the names and due date you enter, the questions and colour you choose, and the email you save the pool with. After the birth, only the details you choose to enter. We need these to run the pool you asked for and to let you sign back in (GDPR Art. 6(1)(b)).
- Guests: your name, email, guesses, and any message or photo you add. We use them to record your guess, send you a receipt with a link to change it, and send you your result if the parents share the results (Art. 6(1)(b)).
- People who give Plus as a gift: your name, email and optional note.
- Security: your IP address and browser type are stored with a guess to stop spam and abuse (Art. 6(1)(f), our legitimate interest in keeping the service safe).
- Email delivery: whether an email was delivered, bounced or marked as spam, so we stop writing to addresses that do not work (Art. 6(1)(f)).
- Marketing email: only if you opt in (Art. 6(1)(a)). You can withdraw at any time.
A due date reveals a pregnancy. We use it only to run the pool, never for advertising, and the parents decide what to share.
We do not add you to a mailing list because you guessed. Photos are stripped of location data before they are stored.
Who can see what
- Anyone with the pool link sees the parents' names, the due date and how many people have guessed.
- The parents see guests' names and guesses: the first five on the free plan, all of them with Plus.
- Once results are published, the leaderboard (names and scores) can be seen by anyone with the link.
- People who give Plus as a gift do not see the guest list.
- Pool pages are kept out of search engines.
Who processes data for us
- Paddle.com Market Ltd (UK) sells Plus as the merchant of record and handles payments, receipts and refunds under its own privacy notice. We never see your card details.
- The company that delivers our emails.
- The company that hosts our servers, database and files.
- Cloudflare, Inc. (USA), for the spam check on the guess form.
When data leaves Albania or the EEA we rely on adequacy decisions or the European Commission's Standard Contractual Clauses. We do not sell data and we use no advertising or analytics trackers.
Cookies
Only the cookies the site needs: a session cookie, a security cookie, and a cookie that remembers a pool you created before saving it (up to a year). Paddle's checkout, which only loads when you pay, sets its own cookies.
How long we keep it
- A pool that is never saved and has no guesses is deleted after 30 days.
- Pools, guesses, messages and photos are kept while the pool is in use. A pool's owner can ask us to delete it at any time.
- Details you delete yourself are removed straight away, and leave our backups as they are replaced.
- Purchase records are kept for as long as tax law requires.
Your rights
You can ask to see, correct, delete or take a copy of your data, to restrict or object to how we use it, and to withdraw consent. Every email about a pool you guessed in has a link that deletes your details and your guesses. For anything else, write to [email protected] and we will reply within a month.
You can also complain to Albania's Information and Data Protection Commissioner (idp.al), or to the data protection authority where you live.
Children
mam.al is not meant for children under 16. Only upload a photo of a child if the child's parents agree.