Privacy policy
Version of 17 September 2026
Who we are
droid.monster is run by [COMPANY LEGAL NAME] ([REGISTRATION NUMBER]), [REGISTERED ADDRESS]. We decide what personal data this site collects and why, which makes us the controller under the GDPR. Questions, requests and complaints go to [privacy@droid.monster].
The short version
- Robot specifications are about machines, not people. Everything below is about accounts.
- You sign in with Google. We never see or store a password.
- Consultant profiles and projects are published only because you create and submit them.
- We never add people to the directory from other sources, and we don’t sell data.
- You can download everything we hold about you, and delete it, from your account, without having to ask.
What we hold, and why
| What | Why | Legal basis |
|---|---|---|
| Your account: name, email address, whether Google verified it, profile picture address, country if you give it | To sign you in, and to show your name on what you publish | Contract (providing the service you signed up for) |
| A consultant profile: headline, description, company, links, experience, what you have worked with, rates, availability, location, languages, credentials | To publish it in the directory, which is why you created it | Contract, and your choice to publish it |
| Project briefs: what you want done, budget band, timeline, location, and your company if you choose to show it | To publish the project and pass responses to you | Contract |
| Messages: enquiries to consultants and sellers, and responses to projects, with the sender’s name and email address | So the person you contact can reply to you. The form tells you this before you send. | Contract |
| Which versions of these terms you accepted, and when | To show what you agreed to | Legal obligation and legitimate interest |
| A one-way hash of your IP address, stored with messages and new posts | To limit spam. It can’t be turned back into an address, and it isn’t used to locate you. | Legitimate interest (keeping the site usable) |
| A record of changes to profiles, listings and accounts | To answer “why was this published or removed?” It is erased along with your account. | Legitimate interest |
| Google Analytics, only if you allow it in the cookie banner | To count visits by page and country | Consent, which you can withdraw under “Cookie settings” in the footer |
Who else processes it
- Google Firebase handles sign-in, and Google hosts the web pages (Firebase App Hosting, United States). Transfers to the US rely on the EU–US Data Privacy Framework and standard contractual clauses.
- [HOSTING PROVIDER], France hosts the database and the server that answers the site.
- Google Analytics, only with your consent.
We don’t sell personal data, and we don’t share it with advertisers.
What is public
Once approved, a consultant profile is public: your name, profile picture, and everything on the profile except your email address, which is never shown. You can ask search engines not to index it. A project brief is public without your name. Your company is shown only if you tick that box. Messages are never public.
How long we keep it
- Your account and everything in it: until you delete it.
- A consultant profile is taken off the site if you don’t confirm it is still accurate for a year. It stays in your account until you delete it.
- Projects close after 60 days unless renewed, and are deleted a year after they stop being open.
- Messages last until the sender or the recipient deletes their account.
Your rights
- Access and portability: download everything we hold about you as a JSON file from Account → Privacy.
- Correction: edit your profile, projects and listings at any time.
- Erasure: delete your consultant profile, or your whole account, from the same page. This is real deletion. The account, what it published, the messages it sent, and our change records about it are removed. We keep only a note that an account was erased, with no details.
- Objection and restriction: write to us at the address above.
- Complaint: you can complain to [NATIONAL DATA PROTECTION AUTHORITY], or to the data protection authority where you live.
Cookies
Signing in stores a session in your browser, which the site needs to work. Analytics cookies are set only if you accept them.
Changes
If this policy changes in a way that matters, the version date above changes, and you are asked to accept the new version the next time you submit a consultant profile or a project.