Privacy notice

Effective from 8 November 2026

Convenience translation. This English version is provided for information only. It has not yet been reviewed by a lawyer. In case of any difference, the Hungarian text prevails.

This notice covers the personal data processed when you use the NightFinder mobile app (hereinafter: the “App”) and the nightfinder.bardanapp.com website (hereinafter: the “Website”), including the Website’s partner portal (for venues) and the sign-up. Data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).

1. The data controller

Bucsek Barnabás e.v. (sole proprietor)
Registration number: 62807153 · Tax number: 92374821-1-31
Registered office and postal address: 2836 Baj, Sport utca 2.
E-mail: info@bardanapp.com

We are not required to appoint a data protection officer. For data protection questions you can reach us at the e-mail address above.

2. What data we process, for what purpose and on what legal basis

Group voting in the App and on the Website was phased out on 31 October 2026: no new vote can be started, and voting on the Website is no longer possible. We delete the data of earlier votes 30 days after they expire; the voting rows below refer to this earlier data.

Data	Purpose	Legal basis (GDPR Article 6(1))
Date of birth	Checking that you have turned 18. Without an account, we store it only on your phone. With an account, we save it to your account so that you do not have to enter it again.	(f) legitimate interests: protection of minors in a service that presents evening entertainment venues
Account data (only if you open an account): e-mail address and password, or, with Apple sign-in, the identifier and e-mail address provided by Apple (may be an Apple relay address); optional nickname	Creating the account, signing in, password reset. We cannot see your password; Firebase Authentication stores it in encrypted form. We do not ask for your name.	(b) performance of a contract
Saved data (with an account only): favourite places, your own lists, the list of votes you started	So that they stay available on all your phones	(b) performance of a contract
Starting a vote (in the App, until 31 October 2026): the selected places, the date of the evening, the expiry time and your pseudonymous identifier as the starter of the vote	Creating the vote and sharing it with the link. Who can see it: everyone who has the link; besides the vote’s data, they can also read the technical identifier of the starter (your name or e-mail address cannot be derived from it).	(b) performance of a contract: the voting feature, which you initiate
Vote (in the App and on the Website, until 31 October 2026): the nickname you chose (up to 24 characters), your technical identifier (without an account, the anonymous identifier of Firebase Authentication, one per browser or phone; in the App with an account, your account identifier), the place you chose and the time of the vote	Running the vote: the tally, and so that you can change your vote until it expires. Who can see it: the nickname, where you voted and the technical identifier can be seen by everyone who has the link to the vote. Your name or e-mail address cannot be derived from the identifier.	(b) performance of a contract: the voting feature, which you initiate
Star rating (in the App, with an account): the place’s identifier, the number of stars (1–5) and the time, plus a reference, readable only by you, to your pseudonymous identifier, so that you can edit or delete your rating	Aggregating the ratings of places. Once a place has at least 5 ratings, the App shows its average to everyone. Individual ratings carry no identifier: other users cannot tell who gave them.	(b) performance of a contract
Report about a place (incorrect data, “It was closed”, inappropriate content, missing place): the place’s name, address and identifier, your comment, if it concerns an event or a photo, its identifier, which part of the App you sent it from, the pseudonymous identifier, the phone type (iOS/Android) and the App version	Correcting place data	(f) legitimate interests: accurate place data
“This is my place” report: the data in the previous row, and your contact details if you provide them (for example your name, e-mail address or phone number in the comment)	Correcting the place’s data, and so that we can contact you at the contact details you provided	(f) legitimate interests: accurate place data, and contact that you initiated
Quick feedback about a place (e.g. “Cosy”, “Crowded”): the selected tags and the pseudonymous identifier	Improving place descriptions and recommendations	(f) legitimate interests
Partner account (on the Website’s partner portal): e-mail address and password, the fact that the e-mail address has been confirmed	Signing in to the partner portal, password reset, confirming the e-mail address. We cannot see your password; Firebase Authentication stores it in encrypted form.	(b) performance of a contract (partnership)
Partner application: the identifier and name of the selected place, the contact person’s name, e-mail address and phone number, your comment, the time of the application and of the decision, in case of rejection the reason for the decision, your account identifier	Checking (by phone or e-mail) that you are entitled to represent the place, and contact on partnership matters. Who can see it: only you and us.	(b) steps prior to entering into a contract, and performance of the contract
Partner content: the place’s profile (name, introduction, opening hours, the place’s status, for example “Temporarily closed”, phone number, website, Instagram, TikTok and Facebook accounts, accessibility information, the place’s features, accent colour, cover image), photos (not public until we approve them), offering and its photos, photo and description of the entrance, days with different hours, practical information, short announcement, short link, events, and the technical identifier of your account as the owner of the content	Presenting the place in the App and on the Website. Who can see it: public, anyone can see it. The technical identifier of the account can be read from the public data, but your name or e-mail address cannot be derived from it. We do not publish the contact details (name, e-mail, phone); only the phone number you enter on the profile is published.	(b) performance of a contract (partnership). If a recognisable person appears in a photo, the person uploading it is responsible for having that person’s consent.
Linking a social profile (only if you link it as a partner): the identifier, username or name of the Instagram account or Facebook Page, the content, image, text, publication time and link of posts and 24-hour stories, the access token, and the status of the connection	Showing the content approved by the partner on the place’s profile in the App and on the Website. Who can see it: anyone can see the approved items; nobody sees the token except our server-side service. Details in Section 10.	(a) consent (can be withdrawn at any time)
Sign-up (on the Website): e-mail address, the time of sign-up, the fact of consent and the source (“web”)	Notification about the launch or beta test of the App. We do not use it for anything else.	(a) consent. You can withdraw it at any time: write to info@bardanapp.com. Withdrawal does not affect the lawfulness of processing before it.
Usage statistics (in the App): pseudonymous identifier, screens opened, feature use (e.g. saving a favourite, requesting a route, sharing), and which place’s profile you opened and from where (with the place’s identifier and the part of the app you opened it from; for lists, with the identifiers of the places shown). Places only see aggregated numbers from this, refreshed weekly, and we hide values below 5. It contains no name, e-mail address, date of birth or location; we have turned off IP-address-based geolocation.	Improving the App: what works and what does not	(f) legitimate interests. You can turn it off at any time on the App’s Account and settings screen (Privacy → Usage statistics). The next row covers the Website.
Opening of a shared page (on the Website’s place, event and list pages, nightfinder.bardanapp.com/h/…, /e/… and /lista): place or list page, the place’s identifier, the source marker of the link (e.g. “app” or “qr”), the title of the referring page (e.g. messenger.com) and the time. We do not send the name of the list or the places in it.	Measuring how many opens a share or a partner’s QR code brings. On the shared place, event and list pages we count opens anonymously and without cookies (PostHog, EU): there is no cookie, and we do not store any identifier in your browser; every open gets a separate random identifier, so opens cannot be linked to each other or to you. For the request, PostHog technically receives your browser’s IP address; we do not use it for geolocation.	(f) legitimate interests. If “Do Not Track” or the Global Privacy Control signal is turned on in your browser, we do not count the open.
Error diagnostics (in the App): crash report with the location of the error, the phone type and the pseudonymous identifier	Stable operation of the App	(f) legitimate interests

3. What is stored only by your phone or browser

Your location: we ask for it only if you allow it. We use it only on your phone, for the distance of nearby places and for the map. We do not send it to us. The map is displayed on iPhone by Apple Maps and on Android by Google Maps, under their own terms.
Your choices in the App: the mood you chose on the Tonight screen and the places set aside for voting are stored only by your phone.
Without an account, your favourites, your lists and the list of votes you started are also only on your phone.
On the Website there are no cookies and no advertising tracking. On shared place and list pages we count opens anonymously and without cookies (PostHog, EU), as described in Section 2; there is no analytics on the other pages. On the partner portal, Firebase Authentication stores your sign-in in your browser’s IndexedDB storage so that you do not have to sign in again every time; it is deleted when you sign out. If you voted on the Website earlier, the voting page may have left a nickname (localStorage) and an anonymous technical identifier (IndexedDB) in your browser; you can delete these at any time in your browser settings.

4. What we do not do

We do not sell your data or pass it to advertisers.
We do not show personalised advertising, and we do not track you in other apps or on other websites.
We do not list earlier votes or make them searchable.
We do not publish partners’ contact details (name, e-mail, phone) or pass them to anyone.
From a linked social account we only read: we do not post or change anything on the partner’s behalf, and we do not collect data about guests in connection with the feature.
We do not process special-category data (within the meaning of GDPR Article 9), and we do not make automated decisions that have legal effect on you.

5. Processors

Google Ireland Ltd. / Google LLC (Firebase Authentication, Cloud Firestore): accounts and saved data, earlier votes and ballots, ratings, reports, sign-ups, partner accounts, partner applications and partner content (we also store photos in the Firestore database). The Firestore database is in an EU region. Firebase Authentication data may also be processed in the USA; the transfer takes place on the basis of the EU–US Data Privacy Framework and standard contractual clauses.
Google Ireland Ltd. / Google LLC (Firebase Hosting): serving the Website. The Website loads the Firebase library from Google’s gstatic.com hosting, and the shared place and list pages read the place’s current data (opening hours, status) from the Firestore database without signing in. For this, Google technically processes your browser’s IP address.
Google Ireland Ltd. / Google LLC (Firebase, synchronisation of the social link): we store and synchronise the token of the account linked by the partner and the items awaiting approval or displayed; storage is in the European (eur3) region, and the service performing the synchronisation runs in a European region. Details in Section 10.
Meta Platforms Ireland Ltd. (Instagram, Facebook): not our processor but the source of the linked account’s data, with the partner’s own permission. Meta processes the data under its own privacy rules.
PostHog Inc. (usage statistics in the App, and anonymous open counting on the Website’s shared place and list pages): on an EU-region server (Frankfurt).
Functional Software Inc. (Sentry, error diagnostics in the App): on an EU-region (German) server.
Apple: “Sign in with Apple” and, during the test period, TestFlight, under Apple’s own terms.

6. How long we keep it

Account data and saved data: until the account is deleted.
Votes and ballots: automatically deleted 30 days after the vote expires (for technical reasons, deletion may be delayed by a day or two).
Star rating: until you withdraw it in the App, or until you delete your account or, without an account, your data.
Partner account, partner application and partner content (profile, photos, offering, events): for as long as the partnership lasts, and then for at most 30 days. For a rejected application, for at most 30 days after the decision. We may delete expired events even during the partnership.
Social link: the access token until disconnection, and we delete it immediately upon disconnection. The displayed items (image link, text, time, link) are deleted within 24 hours of disconnection at the latest. An item deleted or hidden at the source disappears at the next synchronisation, and we delete expired stories within 24 hours at the latest.
Sign-up: for 30 days after the App launches, or until you withdraw your consent, if that happens earlier.
Reports (including the “This is my place” report) and quick feedback: for at most 12 months after processing.
Usage statistics and opens of shared pages: for at most 12 months.
Error diagnostics: for at most 90 days.
The nickname and technical identifier stored in your browser: until you delete them in your browser.

7. Deleting your data

In the App: Account and settings → Delete account. This deletes your account and the data stored in the cloud (favourites, lists, the votes you started, ratings, quick feedback). With Apple sign-in, we also revoke the Apple access. Without an account: Account and settings → Delete guest data. Your ballot cast in someone else’s vote is deleted automatically by the system 30 days after the vote expires. You can also request deletion by e-mail.

You can request the earlier deletion of a ballot you cast earlier on the Website by e-mail: send us the link of the vote and your nickname. You can withdraw your sign-up by e-mail, and in that case we delete your address.

As a partner, you can delete your photos and events yourself on the partner portal. You can request the termination of the partnership and the deletion of your partner account and all your partner content by e-mail at info@bardanapp.com.

You can disconnect your linked Instagram account or Facebook Page at any time with the Disconnect button on the partner portal, and you can also revoke it from Meta’s side (see the end of Section 10).

8. Your rights

You can request access to your data, rectification, erasure, restriction and data portability. You can object to processing based on legitimate interests. For processing based on consent (sign-up), you can withdraw your consent at any time. We will reply to your request within 30 days.

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH): 1055 Budapest, Falk Miksa utca 9–11., www.naih.hu. You can also go to court.

9. Age

The App is intended only for people over 18; on the Website, too, only people over 18 can sign up, and only an adult can open a partner account. If we learn that we are processing the data of a person under 18, we delete it.

10. Linking a social profile (for partners)

As a partner, you can link your place’s Instagram account (a professional, that is business or creator, account) and Facebook Page (a Page; a personal profile cannot be linked) on the partner portal. Linking is voluntary, and the partnership does not depend on it. From a linked account we only read: we do not post or change anything in your name. We do not link TikTok accounts; there you can only provide a link to the profile.

What data we process: the identifier, username or name of the Instagram account or Facebook Page; the content of posts and 24-hour stories (image, video preview, text), their publication time and link; the access token (a key issued by Meta that we use to read the content); the status of the connection and the time of the last synchronisation.
Where it comes from: from the services of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland), with your own permission, which you give on Meta’s permission screen.
What we use it for: showing the content approved by the partner on the place’s profile in the App and on the Website (“Fresh from the place’s social pages”). By default you approve every item before it appears. If we mark a place’s profile as trusted, stories may appear without approval. If a text contains wording that encourages drinking or promotes drink offers, the system holds it back and it does not appear. We shorten the text of posts to at most 300 characters.
Legal basis: GDPR Article 6(1)(a) consent, which you give when linking, on Meta’s permission screen and on the partner portal. You can withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal. If a post also shows another person, the partner is responsible for having the right to display it (see: partner terms, 11.8).
Who receives it: the services of Google Ireland Ltd. / Google LLC (Firebase: database, the service performing the synchronisation, storage) as processor, as described in Section 5. We do not pass it to anyone else. Approved items can be seen by any visitor to the Website and the App.
Protection: we keep the access token in a separate store that cannot be reached from the browser or the App; only our server-side service reads it, and Google’s storage encryption protects it. The displayed items contain no token, only the image link, the shortened text, the time and the link of the post.
How long we keep it: the token until disconnection, and we delete it immediately upon disconnection. We delete the displayed items within 24 hours of disconnection at the latest. If you delete or hide a post at the source, it disappears from our side at the next synchronisation. Stories remain visible for 24 hours after they appear, and we delete expired ones within 24 hours at the latest.
What this means for guests: in connection with the feature we collect nothing about guests, and we do not track them. The displayed content is the partner’s public content. By clicking on the card, the guest reaches the post on Instagram or Facebook, where the platform’s rules already apply. Images are loaded from Meta’s own content delivery network, so Meta, as with any image load, can technically see the IP address of the loading device; Meta handles this under its own privacy notice, and we do not get access to it.

Withdrawing permission and deleting data

This section is also the “data deletion instructions” page requested by Meta. You can withdraw the permission and request deletion in three ways:

On the partner portal: Social section → Disconnect. We delete the access token immediately and the displayed items within 24 hours at the latest.
From Meta’s side: in your Instagram or Facebook account settings, under Business integrations, Remove next to NightFinder. Meta notifies us of the withdrawal, and we delete the data belonging to the connection in the same way.
By e-mail: write to info@bardanapp.com with the name of the place and the name of the linked account. We carry out the deletion within 30 days at the latest and confirm it.

Your access rights and the option to complain are covered in Section 8. If you have any questions, write to the e-mail address above.

11. Changes

If this notice changes materially, we will indicate it in the App and on the Website. The effective date is always shown at the top of the page.