Controller
- Controller: Redder Labs, Spain.
- Privacy contact: [email protected].
- Data protection officer: [email protected].
Our principle
hilo.fans is designed to know as little about you as possible. Your password never leaves your device, and your private content is encrypted before it reaches our servers, so we cannot read it.
What data we process
- Account: your alias and a cryptographic record that lets us check your password without knowing it. Legal basis: performance of the contract. Kept while you have an account.
- Age: your confirmation that you are 16 or older, or 18 or older if you earn money. Legal basis: legal obligation and performance of the contract.
- Public content: hilos and contributions you publish openly. Legal basis: performance of the contract.
- Private content: stored encrypted; we do not hold the keys. Legal basis: performance of the contract.
- Payments: amounts, dates and references for each transaction. Your card details are handled directly by Stripe Payments Europe, Limited (Irlanda) and we never see them. Legal basis: contract and tax obligations. Kept for as long as tax law requires.
- Creator verification: carried out by Stripe Payments Europe, Limited (Irlanda). We receive the result and the data tax law requires us to report. Legal basis: legal obligation.
- Security: IP address, browser type and technical logs to prevent abuse. Legal basis: legitimate interest. Kept for 30 days.
- Notices and moderation: the reported content, the reason and the decision. Legal basis: legal obligation under the Digital Services Act and legitimate interest.
What we don't do
- We don't sell your data.
- We don't use personalised advertising or advertising profiles.
- We don't ask for your real name or email to use the network as a fan.
- We can't read your private content or recover your password.
What encryption means for you
If you lose your password and your recovery key, your private content cannot be recovered. If an authority requires private content from us, we can only hand over encrypted data and the metadata we keep.
Who we share data with
- Stripe Payments Europe, Limited (Irlanda), for charges, payouts and identity verification.
- Render Services, Inc. (United States), which hosts the service.
- Neon, Inc. (United States), which hosts the database.
- Authorities, when the law requires it.
International transfers
Some providers, such as Render Services, Inc. (United States), may process data outside the European Economic Area. We only allow it with appropriate safeguards: standard contractual clauses approved by the European Commission and, where the provider is certified, the EU-U.S. Data Privacy Framework.
Your rights
You can ask to access, correct, delete, restrict or port your data, object to its processing, and withdraw your consent at any time. Write to [email protected]. Because accounts don't use email, we will confirm the account is yours by asking you to log in.
You can also complain to the data protection authority in your country. In Spain, that is the Agencia Española de Protección de Datos (aepd.es).
Minors
hilo.fans is not for anyone under 16. If we find an account belonging to someone under 16, we will close it and delete their data.
Changes
If we make material changes to this policy, we will tell you in the service before they apply.