Light-House
Privacy notice
Template prepared for the organiser. Replace every [bracketed] item and review the text, ideally with someone familiar with the GDPR, before publishing. Last updated: [date].
Who is responsible
The controller of your personal data is [full name or organisation name, address]. Contact for any privacy question or request: [e-mail address].
What this site does with your data
The Light-House Protocol & Play Guide lets you record preferences about service, protocol, role-play and consensual activities. These preferences can reveal information about your sex life, which the GDPR treats as a special category of personal data (Art. 9).
- In your browser only (default). Your answers stay on your device. If you switch on “Remember my answers on this device”, or create a link, they are kept in your browser’s local storage until you clear them.
- Link without storage (optional). The profile is encoded in the link itself. Nothing is stored by us. Anyone who receives the link can read it.
- Your share link, stored encrypted. Only if you choose “Agree and create my link”, your profile is encrypted in your browser (AES-GCM, 128-bit key) and the encrypted data is stored on our server. The key is only in the part of the link after the # sign, which browsers do not send to servers. We and our hosting provider cannot read the stored profile. Anyone who has the full link can.
We do not ask for your name, e-mail address or other contact details, use no cookies, no analytics and no third-party fonts or scripts.
Legal basis
We store an encrypted private link only on the basis of your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR). You can withdraw consent at any time by pressing “Delete my link”; this does not affect the lawfulness of storage before withdrawal. Short-lived technical processing needed to deliver the website securely (such as handling your IP address while a request is answered) is based on our legitimate interest in running a secure site (Art. 6(1)(f)).
Where the data is stored and who processes it
The site and the storage service are provided by Cloudflare, Inc. (USA) as our processor under its Data Processing Addendum. Stored encrypted profiles are kept in a Cloudflare D1 database created with the European Union jurisdiction. Requests may be handled in Cloudflare data centres outside the EU; transfers to the USA rely on the EU-US Data Privacy Framework and standard contractual clauses. Because profiles are encrypted before upload and the key never reaches the server, Cloudflare receives no readable profile content.
How long we keep it
- Encrypted private links: until you delete them, and automatically deleted 12 months after the last update.
- Deleted data may remain in the database provider’s point-in-time recovery history for up to [7] days before it disappears completely.
- We do not keep access logs with IP addresses for this service. [Confirm that Workers Logs are switched off in the Cloudflare dashboard.]
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to withdraw consent. Because we cannot read encrypted profiles or link them to you, we may not be able to identify your data without the private link (Art. 11 GDPR); the easiest way to exercise your rights is the Update and Delete buttons on the site, or sending us your link. You can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
Please keep in mind
Your profile describes preferences. It is not consent to any activity. Share links only with people you trust: a link is not a lock.