Draft. Written in plain English by Claude for Kate to edit, and not yet reviewed by a lawyer. Everything in square brackets is an unanswered question.

Privacy

Last updated: [date]

This explains what we do with your information. The short version: we keep as little as we can, we never show your email address on your page, and you can delete everything whenever you want.

Who is responsible

[Legal entity name and address] is responsible for the information collected here. You can reach us at hello@cupidgonerogue.com.

What we collect

When you make a page

• Your email address, so you can get back into your account.
• Whatever you write and upload for your page — words and photos.
• The web address you chose.

When someone sends you a message

• Their name and email address, if they give them, and what they wrote.
• A scrambled version of their internet address, used only to stop spam. It cannot be turned back into the original.

Automatically

• Basic technical information needed to serve the site — the kind every website receives. [Confirm what Cloudflare retains and for how long.]

What we do not do

• We do not sell your information.
• We do not put your email address on your public page, in its code, or anywhere a visitor or a scraper can reach it.
• We do not read your draft pages. Nobody but you can see them.
• We do not track you around other websites.

Your photos

Phones write hidden information into photos, including where they were taken. We strip that out on your device before anything is uploaded, so your location never reaches us or your page.

Photos on an unpublished page are private. When you publish, the photos on that page become public — anyone with the link can see them. That is the point of publishing, but it is worth saying plainly.

Who else sees it

We use a small number of services to run this, and each sees only what it needs:

• Supabase — stores your account, your page and your photos. [Confirm region. Their data processing agreement needs accepting.]
• Cloudflare — serves the site.
• [Email provider] — sends your login codes.
• Shopify — handles payment, once there is something to pay for. They take your payment details directly; we never see them.

How long we keep things

• Your account and page: until you delete them.
• Messages sent to you: 180 days, then deleted automatically.
• Your QR code: kept permanently, even after your page is gone. A printed card can outlive an account, so the code stays registered to you and is never given to anyone else. After your page ends it shows a neutral notice. [Confirm how long that notice should stand — proposed: at least 24 months.]

Deleting everything

You can delete your page from the editor. To delete your whole account, email hello@cupidgonerogue.com and we will remove it, your photos and your messages. Your QR code is retired rather than deleted, for the reason above.

Your rights

Under Swiss and EU data protection law you can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email us and we will respond within [30 days].

[Add the supervisory authority for complaints once the legal entity is settled.]

Children

This is for adults. You must be 18 or over to make a page.

Changes

If this changes in a way that matters, we will tell account holders by email.