Privacy policy

Draft, to be reviewed by a lawyer before publication. Text in brackets needs completing.

Data controller

Dareling, a service published in France. Contact: [contact email address, on the Dareling domain].

What Dareling keeps, and why

| Data | Why | Legal basis | How long | | ----------------------------------------- | ------------------------------------ | --------------------------------------------- | --------------------------- | | The couple's first names | Running the game | Contract | Until the couple is deleted | | Answers, desires and reactions, encrypted | The game and the couple's Book | Explicit consent, as they may reveal sex life | Until the couple is deleted | | 18+ declaration and encrypted safe word | Framing the hotter levels | Contract and duty of protection | Until the couple is deleted | | Email, if given | Recovering the couple, notifications | Contract | Until the couple is deleted | | Subscription and payer's email | Billing and warning before a charge | Contract and accounting duty | [Accounting period] | | Notification subscriptions | Sending requested notifications | Consent | Until withdrawn |

An anonymous identity with no couple is erased after 7 days. A couple that never played is erased after 30 days if it stayed on one phone, with no email or subscription.

Intimate data

Answers may reveal sex life: this is special-category data under Article 9 of the GDPR. It is encrypted in the database and excluded from emails, notifications and anything shareable. [Validate how explicit consent is collected, and the impact assessment.]

Card generation

Personalised card generation may use liked themes and cards already seen, up to the Playful level. No first names or answers are sent to the model. Every card is reviewed by a person before publication.

Who else is involved

Supabase (database, European Union), Vercel (hosting), Stripe (payment), Resend (email), Anthropic (card generation), [PostHog if enabled]. [Check processor agreements and transfers outside the EU.]

Your rights

From "Us", each person can download all their data and delete everything, for both members, immediately. For any other request: [email]. You may also complain to your data protection authority.

Cookies and local storage

Dareling keeps the couple and settings in the browser, which the game needs. [Complete if analytics is enabled, with a banner where refusing is as easy as accepting.]