Privacy Policy

This Privacy Policy explains how the controller ('we', 'us' or 'Service') collects, uses, discloses, and retains personal data in connection with the Service.

1. Contact and Controller

Controller: The operator of this Service

Contact: support@yourdomain.example

2. Personal Data We Collect

• Account information: email address, display name.
• Content data: media files you upload (photos, videos) and related metadata.
• Usage data: IP address, device and browser information, server logs.
• Payment references: transactional references required to reconcile payments (processed via BTCPay/SEPA). We do not store full card numbers or sensitive card data.

3. Purpose and Legal Basis

We process personal data to provide the Service, manage accounts, process payments, prevent fraud, and comply with legal obligations. For EU/UK residents, the legal bases include contract performance and legitimate interests (service operation, fraud prevention, legal compliance).

4. Third-Party Services

We use third-party processors: BTCPay (payments), SEPA rails (payments), AWS S3 (media storage), SMTP2GO (email delivery). These providers act as processors and process data on our behalf.

5. Data Sharing and Transfers

We do not sell personal data or share it with affiliates for marketing. We may disclose data to comply with legal obligations or to enforce our Terms.

6. Data Retention

• Account data: retained for up to 7 years to comply with record-keeping obligations and for fraud prevention.
• Media (active): stored while the account is active and for up to 30 days after account deletion request.
• Backups: retained up to 90 days and purged thereafter.
• Server logs and IPs: retained up to 365 days; IPs may be masked or deleted after 90 days where feasible.

(Note: These retention periods are standard defaults: 7 years for account data for business/tax records; 30–90 days for media/backups; 1 year for logs.)

7. Account Deletion

Users may request account deletion. Deletion requests are processed within 30 days. Media associated with the account will be removed from active storage within 30 days; backups and residual copies will be purged within 90 days.

8. International Transfers

Data may be transferred to processors outside the EEA (for example AWS/S3). Where transfers occur, we rely on appropriate safeguards (EU standard contractual clauses) or the processors' compliance measures.

9. Security

We implement technical and organizational measures to protect personal data, including access controls, encryption in transit and at rest for stored media, and secure processor contracts. However, no system is perfectly secure and we cannot guarantee absolute security.

10. Your Rights (EU/UK Residents)

• Right to access and receive a copy of your data.
• Right to rectification of inaccurate data.
• Right to erasure (subject to legal retention obligations).
• Right to restrict or object to certain processing.
• Right to lodge a complaint with a supervisory authority.

11. Children

The Service is intended for adults. We do not knowingly collect personal data from persons under 18. If you are under 18, do not use the Service.

12. Changes to this Policy

We may update this Policy. Material changes will be notified by email or by notice on the Service.

13. Contact

For privacy requests: support@yourdomain.example

Legal Entity (for legal notices)

The legal entity operating this Service: François Nguinbu (micro-entrepreneur)

Address: 12 Avenue du Sauvageon, Brunoy, France

Last updated: 25/01/2026