Privacy policy

Who is responsible?

MyMood is a free website, privately operated by Christian van der Hulst. This policy describes my-mood.nl and its connected preview.

Without an account

Atmosphere, films, music, books and activities work without a MyMood account. Your language and optional player permissions are saved on your device. Previously saved local moodboards remain on your device. Sound files and our original imagery load from this website. MyMood does not place its own ads or analytics trackers. External players may show advertisements from their service.

With an account

We keep your email address, account ID, creation date, session information and the content you choose to save: favorite films, music, books, activities, sound mixes, language and streaming services. Previously saved boards remain available to their owner. We do not require a birth date, home address or phone number for your account. The account service stores password hashes; MyMood does not keep a password file.

Purposes and legal grounds

Account details and saved content are needed to provide the account, saving and recovery you request (performance of the contract). Limited security information prevents abuse and unauthorized access (legitimate interests). Loading YouTube and Spotify and remembering permission requires your consent. You can withdraw it without affecting the lawfulness of earlier use.

Search, location and external sources

Our server requests public book information from Open Library; displaying a book cover also sends your IP address to Open Library. Live music search uses the YouTube Data API without forwarding your MyMood account details. For activities you may voluntarily choose a place, postcode, address or device location. We do not save this starting point to your account or catalogue cache. Address text goes to PDOK to resolve the location; coordinates go to openrouteservice for the requested route. OpenStreetMap venues come from a public Netherlands dataset hosted by us; that search is not sent to Overpass. Open-Meteo receives a rounded location for weather. These providers may process request information under their own policies. Bookshops, libraries and route planners only open when you choose their link.

Private content and sharing

Account boards are private by default. A viewing link makes the content accessible to anyone who has it. Links can be forwarded; avoid sharing sensitive information or other people’s data without a lawful reason. You can revoke the link. This does not remove copies recipients already downloaded. Anonymous boards may use a separate editing link; keep it safe.

Security and administration

We use encrypted connections, private storage, per-account access checks and protected session cookies. There is no admin page for reading personal content. This is not end-to-end encryption: technical administrative access is not completely excluded, for example for necessary recovery or handling a specific report. Email password recovery preserves your saved content.

Services processing data

Cloudflare provides hosting, the account database and Turnstile. The MyMood database is configured for the EU; Cloudflare operates a global network. Supabase provides accounts and private files from Frankfurt. Resend sends account emails from Ireland but stores email data in the United States. Support and subprocessors may also process data outside the EEA. Provider processing terms describe international transfers and safeguards, including European Standard Contractual Clauses. Data is not sold. Links to those terms are provided below.

Account form security check

Cloudflare Turnstile loads for registration, sign-in, password recovery and deletion code requests. Cloudflare processes signals including your IP address, browser information and the visited website to detect bots. The check loads only when you open an account form. Cloudflare describes this processing in its Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/.

Retention

Accounts and saved content remain until you delete them or your account. Anonymous shared boards remain until removed using the editing link or following a valid report. Security limits use hashed information: sign-in limits expire after ten minutes; daily cleanup on the standalone site removes them within about 24 hours afterwards. Anonymous sharing uses a daily changing IP hash, removed after seven days during use and daily cleanup. Preview cleanup happens on further use. Local data stays until you delete it or clear browser storage. Account deletion removes active MyMood data; it does not remove delivered mail from your own inbox. Resend states that email and log data is retained for 30 days and backups for 7 days. Technical logs and recovery copies at other providers follow their published policies; deleting active data does not immediately erase those copies.

Cookies, players and external links

Session cookies are needed to sign in and may last up to thirty days. Language, local boards and remembered permission have no automatic expiry. YouTube and the Spotify player connect only after consent and receive information including your IP address. These services may use their own cookies or similar storage. You can withdraw permission for both players here. Watch links open external services with their own privacy rules. Your Spotify or streaming account is not connected to MyMood. Live film posters may load from TMDB.

Your rights

You can export, change and delete saved data from your account. Export individual boards and images from Moodboard. You may also request access, correction, deletion, restriction or portability, and object where applicable. We normally respond within one month and request only necessary information to verify your identity. You can complain to the Dutch Data Protection Authority. MyMood does not make decisions with legal effects through automated profiling.

Privacy contact

Last updated: 12 October 2026.

Providers and safeguards