Text to be reviewed by a lawyer
This document is a working draft. It must not be published as is.
Privacy policy
Working draft. Last updated: [to be completed].
Who is responsible
[To be completed: entity responsible for dopa, address and person in charge of personal information protection.]
Information collected
Your email, display name, password (stored hashed), language and preferences; the gestures you share, your reactions, reports and blocks; your mood if you give it (only visible to you); your sessions and recognised devices (IP address, device type) and a log of security events.
Why
To run dopa, protect your account, handle reports and send you the emails you expect. [To be completed: legal bases for the targeted markets.]
What others see
Gestures you publish for the community, with your display name, or without it if you post anonymously. Your “Only me” gestures and your mood are only visible to you. [To be checked: privacy by default, Quebec Law 25, s. 9.1.]
Cookies
Only necessary cookies: session, recognised device, protection against request forgery and chosen language. No advertising or audience-measurement cookies.
Retention
As long as your account exists. After a deletion request, your data is deleted after 7 days; the security log is erased after 365 days. [To be completed.]
Your rights
Access and copy (JSON export in Profile › Your data), correction (Profile), deletion (Profile › Your data). [To be completed: withdrawal of consent, complaint to the competent authority.]
Hosting
[To be completed: host, hosting country and transfers outside Quebec, if any.]
Contact us
[To be completed: contact address.]