Privacy Policy
1. Data controller
WishPride, a sole proprietorship (French micro-entrepreneur regime) operated by Damien Altman (see /legal/legal-notices), is the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR). Contact point for data matters: dpo@wishpride.com.
2. Data collected
We collect: registration data (email, username, date of birth), profile data you choose to provide (bio, photos, interests, approximate location), usage data (interactions, preferences, browsing history) and technical data (hashed IP address, browser type, connection logs).
3. Processing purposes
Your data is processed to: provide and improve the service, personalize your experience, ensure the security of the platform and its members, comply with our legal obligations (DSA, GDPR, LCEN) and, with your consent, send you relevant communications.
4. Retention period
Active data is retained for the lifetime of your account. After deletion, data is anonymized or deleted within 30 days, subject to legal retention obligations (up to 5 years for billing data).
5. Your rights
Under the GDPR, you have rights of access, rectification, erasure, portability and objection. You can exercise them from your settings or by writing to dpo@wishpride.com.
6. Algorithmic processing (EU AI Act)
WishPride uses several AI and algorithmic processing systems, which you must be informed about under GDPR art. 13(2)(f) and art. 50 of Regulation (EU) 2024/1689 (AI Act): • Automated image moderation: AWS Rekognition (NSFW, violence, suggestive content classification) applied before publication of each image. Images in the grey zone are queued for human review. • CSAM detection: Microsoft PhotoDNA performs perceptual hash-matching on 100% of uploaded images against the NCMEC database. Any match triggers automatic blocking and reporting to authorities (see /legal/child-safety). • Feed personalization: ranking algorithm weighted on 8 signals (interactions, follows, hashtags, qualified views). You can view and erase these signals at any time from /settings/privacy/feed-insights. None of these systems make final legal decisions without human oversight. You may request human review of any automated decision affecting you by contacting appeals@wishpride.com.
7. Transfers outside the EU
Your data is hosted within the European Union. Where we use sub-processors located outside the EU — notably Google for audience measurement and advertising (see section 8), Microsoft for behavioural analysis of our public pages (see section 9) and Cloudflare for anti-bot protection at sign-up (Turnstile widget) — we ensure appropriate safeguards are in place: an adequacy decision under the EU–US Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCC).
8. Audience measurement and advertising (Google)
With your consent only, we use Google services to measure the site's audience (Google Analytics 4) and manage our advertising campaigns, including remarketing (Google Ads), orchestrated via Google Tag Manager and the Consent Mode v2 mechanism. • Recipient: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with a possible transfer to Google LLC in the United States. • Purposes: usage statistics, conversion measurement (for example sign-ups coming from an ad), targeted advertising and remarketing. • Legal basis: your consent (GDPR art. 6-1-a), collected via our cookie banner. • Transfer outside the EU: framed by the Data Privacy Framework and/or Standard Contractual Clauses (see section 7). • Retention: see the per-cookie details in our Cookie Policy (/legal/cookies). • Your safeguards: we do not enable 'Google signals', do not transmit a user identifier (user_id) or enhanced conversion data, and redact potentially sensitive information contained in URLs before any transmission. • Withdrawal: you can withdraw your consent at any time via the 'Cookie preferences' button at the bottom of the page. See also Google's privacy policy: https://policies.google.com/privacy.
9. Behavioural analysis of our public pages (Microsoft Clarity)
With your consent only, and only while you are not signed in to an account, we use Microsoft Clarity on our publicly accessible pages (home page, guides, information and legal pages, sign-up and sign-in, event listings, public profiles and posts) to understand how those pages are used: clicked areas, scroll depth and anonymised replay of the browsing journey. • Recipient: Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), with a possible transfer to Microsoft Corporation in the United States. • Purposes: audience measurement, usability analysis and detection of friction points on our publicly accessible pages. • Legal basis: your consent (GDPR art. 6(1)(a)), collected through our cookie banner, Statistics category. • Never active once you are signed in: collection is automatically suspended as soon as a session is opened. Neither your feed, nor your messages, nor your galleries, nor your settings, nor the admin area are ever recorded — and neither is your browsing as a member, including on publicly accessible pages. • Excluded content: input fields and dropdowns are masked from capture, as are numbers and email addresses. We receive neither what you type nor your credentials. Pages reached from a personal link received by email (unsubscribe, invitation) are entirely excluded from the tool. • Addresses visited: on publicly accessible profile and post pages, the address of the page visited — which contains a username or a post identifier — is sent to Microsoft. Those pages are public and indexed by search engines. • Transfer outside the EU: framed by the Data Privacy Framework and/or the Standard Contractual Clauses (see section 7). • Withdrawal: you may withdraw your consent at any time via the 'Cookie preferences' button at the bottom of each page. See also Microsoft's privacy statement: https://privacy.microsoft.com/privacystatement.