Privacy Policy

Who we are

OneStarReport is a community platform that lets real people document and share their experiences with businesses, locations, and services. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that data.

When we say "OneStarReport", "we", "us", or "our", we mean the team operating this website. When we say "you", we mean any person who visits or uses OneStarReport.

Information we collect

We collect information in two ways: information you give us directly, and information collected automatically when you use the site.

Information you provide:

• Account details — username, email address, and password when you register.
• Reports — the place name, written description, photos, and severity rating you submit.
• Comments — any replies you leave on reports.
• Contact messages — your name, email, subject, and message when you reach out to us.

Information collected automatically:

• IP address and approximate location (country/city level)
• Browser type, operating system, and device information
• Pages visited and time spent on the site
• Referring URLs

How we use your information

We use the information we collect strictly to operate and improve Plop. Specifically:

• To create and manage your account
• To publish your reports and comments on the platform
• To respond to your contact messages
• To detect and prevent spam, fraud, and abuse
• To understand how the site is used and fix issues
• To send transactional emails (account confirmation, password resets)

We do not sell your personal data. We do not use your data for advertising targeting. We do not share your data with third parties except as described in §5.

Cookies

OneStarReport uses a small number of strictly necessary cookies:

• Session cookie — keeps you logged in while you browse.
• CSRF token — protects form submissions from cross-site request forgery.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. If you disable cookies entirely, some features (such as staying logged in) will not work.

Third-party services

We use a limited number of external services to operate the platform:

• Hosting provider — our web host stores all site data on servers located in the EU. They are bound by a Data Processing Agreement.
• Transactional email — we use a third-party mail service to deliver account emails. Only your email address and the content of the email are shared with them.
• Place search — we use the Google Places API and/or Foursquare to help you identify business locations when submitting a report. These requests may send your search query to their servers.

We do not embed social media widgets, advertising networks, or third-party analytics scripts.

Data retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal profile information within 30 days. Published reports may be retained in anonymised form to preserve the integrity of the community record — we will not link them to your identity.

Contact messages are retained for up to 12 months and then permanently deleted.

Your rights

Depending on where you live, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate information
• Erasure — request deletion of your account and personal data
• Restriction — ask us to limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to certain processing activities

To exercise any of these rights, contact us using the form below. We will respond within 30 days.

Security

We take reasonable technical and organisational measures to protect your data — including HTTPS encryption in transit, hashed password storage, and restricted admin access. No system is perfectly secure, but we treat your data with care.

If you discover a security vulnerability, please report it to us privately before disclosing it publicly. We appreciate responsible disclosure.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of OneStarReport after changes are posted constitutes acceptance of the revised policy. For significant changes we will make a reasonable effort to notify registered users by email.