Privacy Policy
What we collect, why, and the controls you have.
We respect your privacy and only collect data we need to run Amara. We do not sell your personal data to third parties. This Policy explains how we handle the information you share.
Data we collect
- Account data — email, password (hashed), date of birth and the consents you give at signup.
- Profile data — display name, location, bio, interests, preferences, photos.
- Operational data — session cookies, IP address, basic device info, audit log entries.
Why we use it
- To run the service: authenticate you, store your profile, serve your photos.
- To keep the community safe: detect abuse, enforce our Guidelines, respond to reports.
- To comply with legal obligations.
Where data is stored
Amara is hosted on Cloudflare's global network with European data residency for the database (Cloudflare D1) and object storage (Cloudflare R2). We do not transfer personal data outside of supported regions.
Cookies
We use a small number of essential cookies to keep you signed in and to protect forms from cross-site request forgery. We do not use advertising or third-party analytics cookies in Phase 1.
Your rights
Under GDPR you can access, rectify, port and erase your personal data, and object to certain processing. Use the controls in your account, or email privacy@amourmix.eu. You can also contact your local supervisory authority.
Retention
We keep account data while your account is active. When you delete your account we erase your personal data within 30 days, except where we must retain limited records for fraud prevention or legal reasons.
Last updated: 2025-01-01.