Privacy Policy

This Privacy Policy explains what FLARE collects, why we collect it, and your rights. We design for customization and nostalgia - not for selling your personal life to advertisers.

1. Data we collect

• Account data: email, username, password hash (via our auth provider), date of birth / age confirmation
• Profile data: display name, bio, theme config, guestbook entries, Sparks, optional media
• Technical data: IP address, device / browser type, cookies needed for sessions, basic diagnostics
• Local device data: some preferences (custom streams, draft themes) may be stored in your browser via localStorage

2. Why we process data

• Create and secure your account
• Enforce the minimum age of 16 and safety rules
• Show your public profile and social features you choose to use
• Prevent abuse, spam, and illegal content
• Comply with legal obligations

3. Legal bases (EEA / UK)

Depending on the processing: contract (providing the Service), legitimate interests (security, product improvement), consent (where required, e.g. optional cookies), and legal obligation (age / safety / lawful requests).

4. Age and children

FLARE is not directed at children under 16. We do not knowingly collect personal data from children under 16. If we learn an underage account exists, we will delete it. Date of birth is collected for age assurance and is not shown publicly by default.

5. Sharing

We use infrastructure providers (currently hosting and database services such as Vercel and Supabase) as processors under appropriate agreements. We do not sell your personal data. We may disclose information if required by law or to protect users from serious harm.

6. Retention

We keep account and profile data while your account is active. After deletion requests, we remove or anonymize personal data within a reasonable period, except where retention is required for security, disputes, or legal compliance.

7. Your rights

Depending on your region, you may have rights to access, correct, delete, restrict, or export your data, and to object to certain processing. Contact privacy@myflare.ro. You may also lodge a complaint with your local data protection authority.

8. Cookies

We use essential cookies / storage for authentication sessions. Analytics cookies, if added later, will be disclosed here and gated by consent where required.

9. International transfers

Data may be processed in the EU and other regions where our providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

10. Contact

Privacy requests: privacy@myflare.ro. Controller identity will be updated when the operating company is registered.