Privacy Policy
This page always shows the current version of our privacy policy.
Who we are
MojoRadar is an independent search engine for pre-owned and vintage guitars and basses from trusted guitar stores across Europe, operated by Orpheus Techworks SRL, registered in Romania (CUI: 54267679), at 35D Buna Ziua Street, Apt. 4, 400495 Cluj-Napoca.
We do not sell instruments or process payments. You can browse the site without an account; creating one is optional. For privacy-related inquiries, contact us at privacy@mojoradar.com.
What data we collect
If you accept cookies, we collect pseudonymous analytics data so we can keep improving MojoRadar - making it easier to find the right instrument, fixing things that aren't working well, and building a better experience for everyone who uses the site. This data does not directly identify you but may be considered personal data under GDPR because it is linked to a pseudonymous device identifier. This includes:
- Pages viewed and time spent on each page
- Clicks and interactions with site elements
- General device information (browser type, screen size)
- Approximate country based on IP address
- Session duration and navigation patterns
If you browse without an account, analytics data is pseudonymous and is linked to a random device identifier, not to your identity. For signed-in users, analytics events are linked to your account ID.
Account data
When you create an account we store your email address and an account role. Lawful basis: Article 6(1)(b) GDPR (necessary to provide the account you signed up for). Account data is stored with Supabase (database and authentication, hosted in eu-north-1 / Stockholm). Sign-in links are delivered by Resend, which only receives your email address and only to send you sign-in links. Resend is a US-based company; appropriate safeguards such as Standard Contractual Clauses are in place for any data processed outside the European Economic Area. We keep account data until you delete your account, plus up to 30 days of backup retention. You can delete your account yourself at any time from your account page.
Cookies we use
Analytics cookies are only set if you click “Accept” on the cookie banner. If you reject cookies, no analytics cookies are set. Signing in to an account sets strictly necessary authentication cookies that keep you signed in — these are required for the account to work and do not need consent.
| Cookie | Purpose | Duration | Legal basis |
|---|---|---|---|
| AMP_* | Stores a pseudonymous device and session identifier for analytics | Up to 1 year | Consent |
| AMP_MKTG_* | Stores referrer and campaign attribution information for analytics | Up to 1 year | Consent |
| sb-* | Keeps you signed in to your account (only set when you sign in) | Until you sign out | Strictly necessary |
We also store your cookie preference in your browser's local storage (not a cookie) so we remember your choice.
Legal basis
We process analytics data based on your consent(Article 6(1)(a) GDPR). Analytics cookies are optional and the website functions normally without them. Analytics only runs after you explicitly accept cookies via the banner. You can withdraw your consent at any time by clicking “Cookie Settings” in the site footer.
Hosting and infrastructure
This website is hosted by Vercel Inc. When you visit the site, Vercel processes standard connection data as part of serving the page. This includes your IP address, browser type, and the page you requested. This processing is necessary for the website to function and is handled by Vercel under their Privacy Policy.
Where your analytics data is stored
Analytics data is processed by Amplitude, our analytics provider. Amplitude acts as our data processor under a Data Processing Addendum. Analytics data is stored in Amplitude's EU data center. Although Amplitude is a US-based company, appropriate safeguards such as Standard Contractual Clauses are in place for any data processed outside the European Economic Area.
Error monitoring
We use Sentry for error monitoring and Axiom for server-side logging. These services may process technical data such as IP addresses, browser information, and error details when issues occur. When errors happen on our servers, this processing is based on our legitimate interest in maintaining a functional and reliable service (Article 6(1)(f) GDPR). When errors happen in your browser, Sentry only runs if you accept cookies, so it is based on your consent (Article 6(1)(a) GDPR).
Data retention
Analytics data is retained by Amplitude for up to 12 months and is then automatically deleted or aggregated. Error monitoring data in Sentry and Axiom is retained for up to 90 days. Account data (your email address and account role) is kept until you delete your account, plus up to 30 days of backup retention. Your cookie consent preference is stored in your browser until you clear your browser data or change your choice via “Cookie Settings” in the footer.
Third parties
The following third parties process data in connection with your visit:
- Vercel - hosting infrastructure (processes connection data for all visitors)
- Amplitude - analytics (only when you have consented to cookies)
- Sentry - error monitoring (errors and technical context)
- Axiom - server-side logging (technical request data only)
- Supabase - database and authentication for user accounts (eu-north-1 / Stockholm)
- Resend - email delivery (only your email address, only to send sign-in links)
We do not sell, share, or transfer your data to any other parties.
Your rights
Under the General Data Protection Regulation (GDPR) and UK data protection law, you have the right to:
- Withdraw consent- click “Cookie Settings” in the footer at any time
- Request access - ask what data we hold about you
- Request deletion - ask us to delete any data associated with your device
- Restrict processing - ask us to limit how we use your data
- Data portability - request a copy of your data in a portable format
- Lodge a complaint - with your local data protection authority
If you have an account, you can delete it (and the data we hold about it) yourself at any time from your account page. For visitors without an account we only collect pseudonymous data, so we may not be able to identify specific records — but we will do our best to assist with any request.
Contact
For any privacy-related questions or requests, contact us at privacy@mojoradar.com.
Changes to this policy
We may update this privacy policy from time to time. The latest version is always the one published on this page.