Privacy

Draft. Needs review by a data protection lawyer before launch, because the data involved is special category under GDPR.

The short version

We collect what the platform needs to work and nothing else. We do not sell data. We do not run advertising trackers on pages where your interest in donor conception could be inferred.

What we store

Account: email address and an encrypted password, handled by our authentication provider.
Profile: what you enter yourself. Some of it, such as the kind of arrangement you are open to, allows conclusions about your health or your family planning. Under the GDPR this is special category data, and we process it only on the basis of your explicit consent, given when you create your profile.
Messages: content and metadata of conversations you have here.
Technical: a hashed version of your IP address, your browser identifier, and where you first arrived from.

Who processes it

Hosting and delivery: Cloudflare. Database and authentication: Supabase. Messaging: Stream. Each acts as a processor under contract.

How long

Until you delete your account, after which profile and messages are removed. Records we are legally required to keep are the exception.

Your rights

Access, correction, deletion, restriction, portability, and objection. You can withdraw consent at any time, which for a profile means deleting it. Write to [address]. You may also complain to a supervisory authority.

Cookies

A session cookie once you log in, and one cookie that records where you first came from so we can tell which of our pages are useful. No advertising cookies.