1. Data controller

The data controller is the publisher of Libertines de Velours, reachable at contact@libertinesdevelours.com. For any question about your data: contact@libertinesdevelours.com.

2. Data we collect

We limit collection to what the service actually needs.

• Account data: email address, hashed password, date of birth
• Profile data: nickname, city, gender, orientation, free-text description
• Photographs you choose to upload, and their moderation status
• Messages exchanged with other members
• Technical data: IP address, connection timestamps, browser type
• Billing data handled by Stripe (we never receive a card number)

3. Purposes and legal bases

Account and profile data are processed to perform our contract with you (providing the service).

Technical and moderation data are processed on the basis of our legitimate interest in keeping the platform safe, and our legal obligations regarding illegal content.

Date of birth is processed to meet the legal obligation to verify adulthood.

4. Retention periods

• Active account: for the lifetime of the account
• After account deletion: erased within 30 days, save legal obligations
• Connection logs: 12 months
• Billing records: 10 years (accounting obligation)
• Content removed as illegal: retained for as long as the law requires for any proceedings

5. Recipients

Your data is never sold, rented or shared for advertising. It is accessible to our moderation team and to our technical processors, strictly for operating the service.

• Hosting and database: Supabase
• Payment processing: Stripe
• Application hosting: non précisé dans la présente version

6. Cookies

We only set strictly necessary cookies: a session cookie to keep you logged in, a language preference cookie, and a cookie recording your age confirmation. No advertising cookies or third-party trackers are set, which is why no consent banner is required for these purposes.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. Downloading your data and deleting your account are both available directly from your settings.

You may also lodge a complaint with the supervisory authority in your country of residence.

8. Security

Traffic is encrypted in transit (HTTPS). Passwords are hashed and never stored in plain text. Photographs live in a private store and are served through short-lived signed links. Data access is partitioned by row-level security rules in the database itself.

9. Visibility of your profile and photographs

A listed profile is public: it appears in search and on city pages, and can be viewed without an account. A member account appears in no search results. You can switch between the two at any time from your settings.

Photographs in your public album are visible to everyone, including visitors without an account. Photographs in your private album are hidden from signed-out visitors but accessible to every member who holds an account: the private album restricts access to members, not person by person.

The site is not indexed by search engines. That does not prevent a third party from viewing or capturing a published photograph: only publish what you accept may circulate.