Privacy Policy

The service is published and operated by Zacharie Dos Santos, sole trader, SIREN 104 531 819, SIRET 104 531 819 00019, at 28 rue Ernest Petit, 21000 Dijon, France.

For privacy questions or requests: contact@dlp-friends.fr.

We process account and security data (email, birth date, hashed password, locale, verification, passkeys, and two-factor authentication), profile data (display name, bio, avatar, visit frequency, interests, visibility), discoveries, blocks, matches, conversations and messages, and technical logs needed for security and operation.

• Create and secure accounts and verify adulthood.
• Display and rank profiles by shared interests.
• Provide mutual discovery and messaging.
• Prevent abuse, diagnose incidents, and comply with law.

Contract performance supports accounts, profiles, discovery, and messaging. Legitimate interests support security, abuse prevention, and proportionate technical improvement. Legal obligations may require retention. Consent is used where the law requires it.

Data is available only to authorised people and necessary providers. The VPS is hosted by IONOS. MySQL, Redis, Reverb, and S3-compatible storage are self-hosted there. Resend sends transactional email. Google Analytics 4 provides audience measurement when configured. Google may be used to sign in. Authorised administrators review reported conversations without general access to other exchanges. No advertising or payment service is enabled.

Account data is kept for the account lifetime. An active account deletion request immediately disables access; the account is purged after 30 days. All data of a banned account is retained without a time limit and excluded from automatic purges. Deleting another member removes their identity references without deleting the banned account data. Explicit administrator deletion remains available. Encrypted daily backups are retained for 30 days and then expire automatically; deleted data may temporarily remain there. Technical logs follow operational configuration, 14 days by default.

We use access controls, encrypted connections, password hashing, and encrypted backups. Google may process audience measurement data outside the European Economic Area under its contractual safeguards and privacy policy.

Necessary storage supports sessions, security, language, and interface preferences. When Google Analytics 4 is configured, it remains blocked until you accept. Refusing does not affect any essential feature. Your choice, whether acceptance or refusal, is stored for six months.

After acceptance, trackers measure viewed pages and journeys through the application. DLP Friends normalises dynamic URLs before sending them and deliberately sends no name, email address, message content, or member identifier. No advertising use is enabled. You can change or withdraw your agreement at any time through the “Manage cookies” button available from your profile. Withdrawal stops subsequent measurement and removes analytics cookies accessible to the site.

You may request access, correction, erasure, restriction, objection, and, where applicable, portability at contact@dlp-friends.fr. You may define post-death instructions and complain to the French CNIL at cnil.fr. Proportionate identity verification may be requested.

This policy may change to reflect the service or law. The update date and stable public links identify the published version.