SPACE logoSPACEBack

Cookie Policy

Last updated: 19 May 2026

1. Data Controllers

Controllers: Simone Copetti, Andrea Citton, Bernardo Andrea Cecchini, Matteo Bertini. Privacy email: privacy@spaceeapp.com

2. Cookies and Similar Technologies

As SPACE is primarily a mobile app, we use technologies equivalent to cookies, including:

  • session tokens;
  • technical identifiers;
  • local storage (AsyncStorage) and secure device areas (SecureStore/Keychain);
  • browser local storage (web version, if available).

3. Technologies in Use

Strictly necessary technical tools (legal basis: Art. 6.1.b and 6.1.f GDPR):

  • Supabase session token: login and backend communication. Duration: until logout/expiry. Provider: Supabase Inc.
  • Join token (SecureStore): invite management via deep link. Duration: temporary, until used. First party.
  • Language preference (AsyncStorage): remember selected language. Duration: until data deletion. First party.
  • Folder/photo cache (AsyncStorage): cached data for performance. Duration: until logout or data deletion. First party.

Functional tools (legal basis varies per tool):

  • Theme preference – light/dark (AsyncStorage): remember selected theme. Duration: until data deletion. Legal basis: Art. 6.1.b GDPR. First party.
  • Local UX state – e.g. tutorials seen (SecureStore): avoid repeating hints. Duration: until data deletion. Legal basis: Art. 6.1.b GDPR. First party.
  • Push notification token (APNs/FCM via Expo): receive push notifications. Duration: until logout. Legal basis: Art. 6.1.a GDPR (consent expressed via OS permission). Providers: Apple, Google, Expo Inc.

Analytics and profiling: SPACE does not use analytics or profiling cookies. If introduced in the future, prior consent will be requested.

4. Managing Preferences

Mobile app: you can limit some technologies via device settings, app permissions, logout or uninstalling. Disabling essential tools may prevent the service from working.

Browser (web version): manage or delete cookies/storage from browser settings. Disabling all technical cookies may compromise authentication.

5. Consent

Strictly necessary technical tools do not require prior consent. For non-technical tools (if introduced in the future), we will collect prior consent and allow easy withdrawal.

6. Data Sharing

Technical data may be processed by: authorised staff of the controllers; Supabase Inc. (servers in Ireland, EU); Expo Inc., Apple Inc., Google LLC (push notifications, possible transfers to the USA with GDPR safeguards – Standard Contractual Clauses); competent authorities.

For details on personal data processing, see the Privacy Policy.

7. Transfers Outside the EEA

Supabase servers are in Ireland (EU). The push notification service (Expo/APNs/FCM) may involve transfers to the USA; GDPR safeguards apply (Standard Contractual Clauses).

8. Updates

This Cookie Policy may be updated for regulatory or technical changes. The updated version always shows the date of last update.

9. Contact

  • Email: privacy@spaceeapp.com
  • Controllers: Simone Copetti, Andrea Citton, Bernardo Andrea Cecchini, Matteo Bertini
Back to home