Privacy statement
Last updated: 19 September 2026
Who we are
Shootspots is run by MonkeyRebels, the trade name of Stefan van Dockum. We are the controller of the personal data processed through the Shootspots website and apps. This means we decide why and how your data is used, and we are responsible for it.
MonkeyRebels (Stefan van Dockum), Rooiseheide 37G, 5481 SG Schijndel, the Netherlands. Chamber of Commerce (KvK) number: 11053393. Email: stefan@shootspots.nl. Website: https://monkeyrebels.com.
This statement explains which data we collect, why we collect it, who receives it, how long we keep it and what your rights are.
What we collect and why
We only collect the data we need to run Shootspots. For each type of data we explain what we use it for and name the legal basis under the General Data Protection Regulation (GDPR).
Account data: your email address, handle, display name, profile photo, bio, website, city and language. We use this to create your account, show your profile and send you emails about your account, such as the confirmation link and password resets. Your password is only stored in hashed form. Legal basis: performance of our contract with you.
Content you post: photos, captions, spots and comments, and the camera details read from your photos (such as camera, lens, aperture, shutter speed and ISO), which are shown with your post. If a photo contains the location where it was taken, we store that location and show it only to logged-in users. Before your photos are uploaded, your browser saves them as new image files. This removes the metadata embedded in the original files. Legal basis: performance of the contract.
Social activity: likes, follows, saved posts and spots, notifications, events you host or respond to, and competition entries. Legal basis: performance of the contract.
Subscriptions and payments: if you take out Pro, Pro+ or Premium for a spot, we store your plan, its status, payment dates and amounts, and the customer and subscription IDs that our payment provider Mollie gives us. Your card and bank details are handled by Mollie. Shootspots does not store them. Legal basis: performance of the contract.
Reports and moderation: when you report something, we store your report, the reason you give and what we did with it. Legal basis: our legitimate interest in keeping Shootspots safe and lawful.
Security and technical logs: our hosting and database providers keep technical logs, such as IP addresses, browser details and error messages, to keep the service secure and working. Legal basis: our legitimate interest in a secure and reliable service.
Google sign-in: if you choose to sign in with Google, Google sends us your name, email address, an account ID and a link to your Google profile picture. We never receive your Google password. Legal basis: performance of the contract.
Advertising
Shootspots shows sponsor banners that we sell ourselves. For these banners we only count how often they are shown and clicked. These counts contain no personal data.
When enabled, Shootspots also shows Google AdSense ads between the posts in the feed. Google may use cookies or similar identifiers for these ads: to show and measure them, to prevent fraud and, if you allow it, to show ads based on your interests (personalised ads). Google decides how it uses this data and is responsible for that use. You can read more at policies.google.com/technologies/ads.
In the European Economic Area and the United Kingdom, Google's certified consent message asks for your consent first. Without your consent, Google does not use advertising cookies and you will not see personalised ads.
You can change or withdraw your choice at any time through “Privacy choices” at the bottom of the page.
Pro members are not shown Google ads.
Who receives your data
We use service providers that process data on our behalf (processors). We have agreements with them, and they may only use the data to provide their service to us. The other recipients below receive data because your browser contacts them directly or because they are responsible for their own part of the service.
Supabase: database, login and file storage. Our data is stored in the EU.
Vercel: hosting of the website.
Mollie B.V. (the Netherlands): payments. As a licensed payment institution, Mollie is itself responsible for the payment data it needs to process your payments.
Google: sign-in with Google and, when enabled, AdSense ads.
OpenFreeMap: map tiles. Your browser loads the map directly from OpenFreeMap, so OpenFreeMap receives your IP address.
OpenStreetMap Foundation (Nominatim): address lookup when you create a spot. Your browser sends the coordinates of the pin, and with it your IP address.
We do not sell your data. We only share it with others when the law requires us to, for example at the request of the police or a court.
Some of these providers are based outside the European Economic Area (EEA), for example in the United States. Transfers outside the EEA rely on the EU standard contractual clauses or the EU-US Data Privacy Framework.
What others can see
Your profile, posts, comments, public collections and the events you host are visible to everyone, including people without an account and search engines. Others can also see who you follow, who follows you, which posts you like and which events you respond to.
The location where a photo was taken is only shown to logged-in users. Collections are private unless you make them public.
Spots you create stay on Shootspots after you delete your account, without your name, because other people's posts may be pinned to them.
How long we keep your data
We keep your account and your content for as long as you have an account. When you delete a post or comment, it is removed from our active systems.
When you delete your account, your data is removed from our active systems immediately, except your subscription and payment records, which we keep, no longer linked to your account, as described next. Copies in our providers' backups disappear when those backups are rotated out.
Mollie keeps transaction records for as long as the law requires. When you delete your account, we keep your subscription and payment records until 7 years after the end of the year they relate to, because Dutch tax law requires it (legal obligation, art. 6(1)(c) GDPR; art. 52 AWR). They are no longer linked to your Shootspots account, and we delete them when that period ends.
We keep reports for as long as we need them to handle them and to prevent abuse.
Our providers keep technical logs for a limited period, under their own retention policies.
Your rights
You have the right to access your personal data and to have incorrect data corrected. You can view and change most of it yourself in Settings.
You have the right to have your data erased. You can delete your account yourself, at any time, in Settings. The exact steps are also listed at shootspots.nl/delete-account.
You also have the right to restrict processing, to object to processing based on our legitimate interest, and to receive your data in a structured, commonly used format (data portability). Where we rely on your consent, you can withdraw it at any time. This does not affect processing that took place before.
To use any of these rights, email stefan@shootspots.nl. We respond within one month. We may first ask you to confirm your identity, for example by emailing us from the address linked to your account.
Not happy with how we handle your data? Please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) through autoriteitpersoonsgegevens.nl.
Minimum age
You must be 16 or older to use Shootspots. We do not knowingly collect data from children under 16. If you believe a child under 16 has an account, let us know and we will delete it.
Security
We take appropriate measures to protect your data. All connections to Shootspots are encrypted. Access rules enforced in the database make sure you can only change your own data. Passwords are stored in hashed form, and payments go through Mollie.
If a data breach puts your data at risk, we report it to the Autoriteit Persoonsgegevens and inform you when the law requires it.
Changes to this statement
We may update this statement, for example when we add features or change providers. The date at the top shows when it was last changed. If a change significantly affects you, we will tell you on Shootspots or by email.
This statement was last updated on 19 September 2026.
This statement is available in Dutch and English. If the two versions differ, the Dutch version prevails.