Privacy Policy
Last updated: October 17, 2026
This privacy policy describes how Racster collects, uses and stores your personal data when you use our app and website.
Data controller
Bo Toftegaard Nielsen is the data controller responsible for the processing of your personal data in connection with Racster. If you have questions about this policy, or want to exercise your rights, you can contact us at info@racster.dk.
What information do we collect?
We only collect what is necessary to provide Racster: your email address and password when you create an account (your password is stored encrypted and is not accessible to us); your location (GPS), if you grant the app permission, so we can show you shops and markets near you; a push notification token, if you allow notifications — together with the token we store your device's last known position so we can send you notifications about markets nearby; a random device ID, linked to your votes on whether a shop is still open and what it sells; and the shops/markets you mark as favorites and the ratings (stars) you give to shops. When you accept our terms, we store a record of your consent (time, device ID, IP address and device type). If you say yes to usage statistics, we record which screens and features you use, and an error report if the app runs into a problem. If you're logged in, your push token, market interests and usage statistics are linked to your account so they follow you across devices.
Anonymous area statistics
If you search for shops somewhere outside Denmark that isn't in our own database yet, the app counts the area anonymously. Only an area number for a cell of roughly 25 × 15 km is sent — no account, no device ID and no precise position — and each area is counted at most once each time you open the app. The numbers are used only to decide which areas to add to the database so the map gets faster there.
How do we use the information?
The information is used to show you relevant shops and markets near your location, send push notifications you've opted into, save your favorites, ratings and votes, send you transactional emails such as account confirmation and password resets, and — if you've said yes to usage statistics — improve the app and fix errors. We do not use your information for advertising or sell it to third parties.
Legal basis
We process your information to fulfil our agreement with you to use Racster (GDPR Art. 6(1)(b)). Processing of location data and sending push notifications is based on your consent (Art. 6(1)(a)), which you can withdraw at any time via your device settings. Usage statistics and error reports are only collected if you have said yes (Art. 6(1)(a)) — you can change this at any time in the app under About → Usage statistics. Votes on shops and the record of your consent are processed on the basis of our legitimate interest in keeping shop information accurate and in being able to document that you gave consent (Art. 6(1)(f)).
Who do we share information with?
We use the following subprocessors to provide Racster: Supabase (database and login), Resend (sending transactional emails), Expo (delivering push notifications), Vercel (hosting our website and API) and PostHog (usage statistics and error reports, hosted in the EU — only if you've said yes; if you're logged in, this data is linked to your account via an internal user ID, not your email). When you accept our terms, the ipify service is used to read the IP address stored in the record of your consent. For map data and address search we use OpenStreetMap services (Overpass API and Nominatim) — the coordinates of the area you're looking at are sent, but no account or contact details. We never sell your information to third parties.
Retention
Your account information, favorites and ratings are kept for as long as you have an account with us. You can delete your account at any time directly in the app under Profile — this permanently removes your favorites and ratings, unlinks your push token and market interests from the account, and permanently closes the account. Your push token and the associated position are deleted when you turn off notifications in the app. Anonymous area counts are deleted after 120 days.
Your rights
Under the GDPR you have the right to access, correct, delete or restrict the information we hold about you, as well as the right to object and to data portability. You can always delete your account directly in the app. To exercise your other rights, contact us at info@racster.dk. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk.
Cookies and tracking
Our website currently uses no third-party tracking or analytics cookies. We only use a technically necessary session cookie when you log in or reset your password.
Changes to this policy
We may update this privacy policy from time to time, for example when we add new features that process data. Material changes will be communicated in the app.