Privacy

Controller

The controller is Lobadina Labs, a sole proprietorship based in Au SG, Switzerland. UID: CHE-400.1.612.224-8. Website: lobadina.ch. Contact email: hi@mandamele.com.

Summary

Mándamele is designed not to store transferred text or files on the server. The server is used to manage temporary codes and help browsers find each other; content moves through the direct browser connection when available.

Data we may process

We may process technical data needed to provide and protect the service: temporary code, connection state, timestamps, technical errors, IP address, request metadata, browser or device type and language preference stored in your browser. If you scan a QR code, camera permission is handled in your browser.

Text and files

We do not sell, analyze or deliberately store transferred text or files. Content may remain in browsers, downloads, clipboards, previews, operating systems or copies made by recipients, outside Lobadina Labs' control.

Why we use data

We use data to provide the service, maintain temporary codes, connect browsers, show the chosen language, resolve errors, measure its operation in a limited way, protect security and prevent abuse.

Legal bases

We process data needed to provide the service you request. We may also process data for legitimate interests in maintaining security, preventing abuse, diagnosing errors and understanding the product's general operation. Browser permissions, such as camera access for scanning a QR code, depend on your choice.

Technical and product metrics

Mándamele records limited technical and usage events, such as page visits, Pase status, the result of a connection or transfer, general file type and approximate size range. Cloudflare may also process request, performance, security and approximate location data to host, protect and measure the service.

These metrics do not deliberately include transferred text, file names or file contents.

Retention

Temporary codes and connection data are kept only as long as needed to operate the service and debug problems. Aggregated metrics and technical logs may be kept for applicable operational, security or legal periods. Language preference and other local data may remain in your browser until you remove them.

Providers

We use Cloudflare to host, deliver, protect and measure the service, and to help establish connections through STUN; and Clerk for optional account and session features. We do not sell personal data. These providers may process data in Switzerland, the European Union, the United States or other countries with applicable contractual or legal safeguards.

Your choices and rights

You can choose not to use Mándamele, close the Pase, clear local browser data, deny camera access and avoid sending sensitive information. Where available under applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent, by emailing hi@mandamele.com.

Security

We design Mándamele to reduce the data that passes through the server, but no system is completely secure. You use it at your own risk and should not rely on it as the only method for sensitive, critical or irreplaceable content.