Privacy Policy

This privacy policy explains how Big White Spot (operated by Montages Media Labs, Flat 1, 24 Charles Road, St. Leonards-on-sea, TN38 0QH, UK) handles your personal data when you use our service.

Big White Spot is a privacy-first social wall and matchmaking platform for live events. Our core design principle is that guest users' data stays on their own device and is never uploaded to our servers. This policy sets out what data is collected, how it is used, and your rights regarding that data.

We comply fully with all applicable UK and EU Data Protection legislation, including the UK GDPR and EU GDPR.

1. Guest Users (Non-Account Holders)

If you join a room as a guest by scanning a QR code or entering a room slug, you do not need an account. In this mode:

  • Your badge profile (the name, photo, and any other information you choose to include) is created and stored exclusively on your device using your browser's local storage.
  • No personal data from your badge is transmitted to or stored on our servers.
  • Local mesh broadcasting — your device broadcasts your badge to other devices in the same room via an encrypted peer-to-peer connection. This data never passes through our infrastructure.
  • Ephemeral by design — when you leave the room or close the page, your badge data remains only on your device until you choose to clear it. No digital footprint is left on our systems.
  • No tracking — we do not track guest users across rooms or sessions. Each room visit is independent and anonymous to us.

Important: Because we do not hold any personal data for guest users, we cannot delete, correct, or provide access to data that resides on your device. You have full control over that data through your browser settings.

2. Account Holders (Venue Hosts & Event Organisers)

If you register for an account to create and manage rooms as a venue host or event organiser, a different privacy framework applies. We collect and store the following data on our servers (hosted by Hetzner Online GmbH, Germany):

  • Registration data: your name, email address, and password (stored securely as a salted hash).
  • Venue profile data: venue name, address, description, logo/banner images, and event details that you choose to upload.
  • Payment data: if you subscribe to a paid plan, payment processing is handled by Stripe. We do not store full credit card numbers. Stripe's privacy policy applies to the data you provide during payment.
  • Communication data: if you contact us via email or support forms, we retain that correspondence to assist you.

We use this data solely to operate your account, provide you with room management features, and communicate with you about your account and our service. We do not sell or share your personal data with third parties for their marketing purposes.

3. Information We Collect Automatically

When you visit the Big White Spot website (whether as a guest or account holder), we may automatically collect:

  • Technical information: an anonymised version of your IP address, browser type and version, operating system, and platform.
  • Usage information: pages you visit, how long you spend on those pages, and how you arrived at the site.

This information is collected anonymously via Google Analytics and is not linked to any personally identifiable information. It helps us improve the website and understand how it is used.

4. Cookies and Local Storage

We use cookies and browser local storage to make the service work. For guest users, local storage is essential — it is how your badge profile is saved on your device. For detailed information on the cookies we use and how to control them, see our Cookie Policy.

5. Disclosure of Your Information

We do not rent, sell, or share personal information about you with third parties except in the following circumstances:

  • Service providers: we use Hetzner Online GmbH (Germany) for server hosting and Stripe for payment processing. These providers are contractually bound to process data only on our instructions and in compliance with applicable data protection law.
  • Legal obligations: we will disclose personal data if required to do so by law or in response to a valid legal request from a public authority.

6. Third-Party Links

Our site may contain links to third-party websites. We are not responsible for the privacy practices of those websites. Please review their privacy policies before submitting any personal data.

7. Your Rights

Under UK and EU data protection law, you have the following rights:

  • Right of access: you may request a copy of the personal data we hold about you.
  • Right to rectification: you may request that we correct any inaccurate data.
  • Right to erasure: you may request that we delete your personal data, subject to certain exceptions.
  • Right to restrict processing: you may request that we limit how we use your data.
  • Right to data portability: you may request a copy of your data in a machine-readable format.

To exercise any of these rights, please contact us in writing at the address below. We will respond within the statutory timeframes. If you have a complaint about how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO).

Note for guest users: since we do not hold any personal data about you on our servers, rights relating to erasure, rectification, and access are primarily matters you control directly through your device and browser settings.

8. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page, and account holders will be notified by email where appropriate. Please check back regularly for updates.

9. Contact

Montages Media Labs
Dr. Julian P. Keogh
Flat 1, 24 Charles Road
St. Leonards-on-sea, East Sussex TN38 0QH
United Kingdom

Email: [email protected]