Privacy Policy

Tandem collects as little as it can and sells nothing. This page says exactly what is stored, why, and how to get rid of it.

What we store

• Account: your name, username, email address and country.
• Profile: anything you choose to add — bio, area, skills, avatar, portfolio photos, and phone or WhatsApp if you enter them. Contact details you add are shown on your public profile; leave them blank to keep everything inside Tandem messaging.
• Listings: their text, skills, area, country and photos.
• Messages: conversations between you and other members, readable only by the two of you.
• Billing: your credit balance and plan. Card details never reach Tandem — Stripe handles payment and we only store the outcome.

Without your permission, the only things kept in your browser are your light/dark theme choice and the sign-in token Firebase needs to keep you logged in. Neither is used to track you and both are necessary for the site to work.

Advertising measurement

We advertise Tandem on Google, and we would like to know which of those adverts actually bring neighbours here — otherwise we are paying for guesses. If you accept the cookie banner, Google's measurement tag records that you signed up, posted a listing, messaged someone or bought credits, and connects that to the advert you clicked.

• Only with your consent. Decline, or ignore the banner, and the tag stores nothing and personalises nothing.
• You can change your mind by clearing this site's data in your browser, which makes the banner ask again.
• We never send Google your name, email, messages or listings — only that an action happened, and what a purchase was worth.

Why we are allowed to store it

• To provide the service (contract): account, listings, messages.
• Consent: the optional profile fields and photos you add, and advert measurement.
• Legal obligation: payment records Stripe and we must retain.
• Legitimate interest: moderation reports, to keep the place usable.

Who else sees it

• Other members — your public profile, listings, and messages you send them. Your email address is never shown to other members.
• Google Firebase — hosting for accounts and the database (EU region).
• Stripe — payments.
• Google Ads — advert measurement, and only if you consented to it.
• Uploaded photos are stored on our own server in Europe.

We do not sell or rent your data to anyone.

How long

For as long as your account exists. Delete your account and your profile, listings, photos and username are removed. Messages you sent remain visible to the person you sent them to, shown as from a deleted member — we cannot rewrite someone else's copy of a conversation. Payment records are kept as long as tax law requires.

Your rights

Under the GDPR you can:

• See your data — download everything we hold from your profile page.
• Correct it — edit your profile at any time.
• Delete it — delete your account from your profile page; it happens immediately.
• Object or restrict — email us and we will act on it.
• Complain — to your national data protection authority.

Security

Traffic is encrypted with TLS. Database access is governed by rules that keep your messages readable only by their participants and your billing fields writable only by our server. Uploaded files are checked before they are stored.

Children

Tandem is for people aged 18 and over.

Note: written plainly for a small community project and not reviewed by a lawyer. Have it checked before relying on it commercially.