Terms of Service Last updated: May 2, 2025 1. Introduction Welcome to PandaPostcard! These Terms of Service (“Terms”) govern your use of our website and services at pandapostcard.com (the “Service”) operated by OOO PandaPostcard, Calle Muntanya 86, p-ta 7, Algemesi, Valencia, Espana 46680. By registering or using the Service, you agree to these Terms. If you do not agree, please do not use our Service. ? 2. Eligibility • You must be at least 13 years old to use PandaPostcard. • If you are under 18, your parent or guardian must agree to these Terms on your behalf. ? 3. Account Registration • You agree to provide accurate, complete and current information (username, full name, postal address, email) when you create your account. • You are responsible for keeping your password confidential and for all activity under your account. ? 4. How the Service Works 1. Request an address: Tap “Send Postcard” to receive a random member’s address plus a unique CardID. 2. Mail your postcard: Buy any physical postcard, hand-write the CardID on the back, add your personal note, and mail it. 3. Queue for receipt: Once your postcard is in the mail, you’re queued to receive one in return—every postcard you send > one you get. 4. Register receipt: When your postcard arrives, enter its CardID at PandaPostcard.com to confirm delivery and reveal your sender’s profile. ? 5. User Conduct You agree not to use the Service to: • Harass, abuse, defame or threaten other users. • Post spam, advertising, or political solicitations. • Share illegal, obscene, or infringing content. • Disclose anyone else’s personal data without consent. • Use bots or scrapers to access the site. Violation of these rules may result in suspension or termination of your account. ? 6. Intellectual Property • All site content (design, text, logos, code) is owned by OOO PandaPostcard. • You retain rights to any content you submit (comments, photos) but grant us a royalty-free license to display and distribute it. ? 7. Disclaimers & Limitation of Liability • No warranties: The Service is provided “as is.” We do not guarantee delivery times or postcard condition. • Liability cap: Our maximum liability for any claim related to the Service is limited to €50. • Force majeure: We are not responsible for delays or failures due to postal service errors, network outages, or other events beyond our control. ? 8. Termination We may suspend or terminate your account at any time for violations of these Terms or for conduct harmful to the community. ? 9. Changes to Terms We may modify these Terms at any time. We’ll post the updated date at the top and notify you by email or on login. Your continued use constitutes acceptance. ? 10. Governing Law & Jurisdiction These Terms are governed by the laws of Spain. Any disputes will be heard in Valencia courts. ? 11. Contact For support, questions or complaints, email us at support@pandapostcard.com. ? Privacy Policy Last updated: May 2, 2025 1. Introduction OOO PandaPostcard (“we,” “us”) respects your privacy. This Policy explains what data we collect, how we use and protect it, and your rights. It applies to pandapostcard.com and any related mobile apps. ? 2. Data We Collect • Registration & Profile: Username, full name, postal address, email, password. • Optional Profile Info: Avatar, bio, preferences. • Usage Data: CardIDs, send/receive history, comments, challenge progress. • Automated Data: IP address, browser type, page requests (stored in logs for 30 days). • Analytics: Anonymized site-use data via Google Analytics (data retained 26 months). • Cookies: See our separate Cookie Policy. ? 3. How We Use Data • To operate the Service: Match you with addresses, generate CardIDs, send notifications. • To improve: Analyze usage, fix bugs, develop features. • To communicate: Send transactional emails and optional announcements. • For security: Detect abuse, enforce Terms, protect against fraud. ? 4. Sharing Your Data • With other members: We share your postal address and CardID only with the random recipient of your postcard, and only after you’ve sent your own. • With service providers: We use third parties (e.g. Amazon AWS for hosting, Google Analytics for analytics, SendGrid for email, Stripe for payments) under strict data-protection terms. • Legal requirements: We may disclose data to comply with law or protect rights. ? 5. Data Storage & Security • Hosting: Amazon AWS (EU region). • Security measures: SSL, firewalls, intrusion detection, encrypted backups. • Retention: • Active accounts: data kept until you delete your account. • After account deletion: we retain address and minimal data for up to 12 months if you have postcards in transit; otherwise we delete all personal data immediately. • We may keep transactional records (e.g. payments) as required by law. ? 6. Your Rights Under GDPR you may: • Access and correct your personal data. • Request deletion or restriction of processing. • Object to processing or withdraw consent. • Receive your data in portable form. Use your account settings or contact privacy@pandapostcard.com to exercise these rights. ? 7. International Transfers If we transfer your data outside the EU, we use standard contractual clauses or rely on an adequacy decision to ensure protection. ? 8. Changes to This Policy We may update this Policy. We’ll post the new date at the top and notify you. Continued use = acceptance. ? 9. Contact For privacy questions or complaints, email pandapostcardsocial@gmail.com or write to: OOO PandaPostcard Calle Muntanya 86, p-ta 7 Algemesi, Valencia, Espana 46680 If unresolved, you may contact the Spanish Data Protection Agency.