Privacy Policy
Effective Date: August 23, 2026
We do not sell or trade personal information. We disclose it only to the providers needed to operate this website and deliver communications, or when law and safety require it. Information is handled discreetly and kept only for the purposes described below.
1. Controller and Contact
Josefine Edel operates this website and is the controller of the personal information described here. Privacy requests may be sent to josefine.edel@proton.me.
2. Information We Process
Booking inquiries: identity and contact details, age, occupation, nationality, proposed meeting details, preferences, payment and screening choices, verification details, and optional ID and selfie images.
Letters: email address and subscription status.
Site operation: request and security data, including IP address and hCaptcha interaction signals.
Optional analytics: page paths, referrer-free interaction events, approximate device and performance information.
Browser storage: photo likes, an analytics preference, and short-lived preload and location-refresh state. Form answers, uploads, gallery history, and form progress are not saved in the browser.
3. Purposes and Legal Bases
We process inquiries to respond and take steps at your request; use legitimate interests for screening, safety, abuse prevention, and reliable site operation; rely on your explicit consent for sensitive information you voluntarily include; and rely on consent for letters and optional analytics. Consent may be withdrawn at any time without affecting earlier lawful processing.
4. How Information Is Handled
Forms are protected by hCaptcha and delivered through Resend to a Proton Mail inbox. The website does not keep a separate contact-form database or save form answers in browser storage.
Uploaded images are decoded, re-encoded, stripped of metadata, and size-limited before delivery. The original upload is not retained by the application.
Analytics remain off until allowed. PostHog uses manual events with browser persistence, autocapture, session replay, person profiles, query strings, and geolocation enrichment disabled. Vercel provides aggregated traffic and performance data. Form field values are not sent to analytics.
Do Not Track and Global Privacy Control signals keep optional analytics disabled.
5. Recipients
Information may be processed by Vercel for hosting and performance, hCaptcha for abuse prevention, Resend and Proton Mail for communications, and, only with permission, PostHog and Vercel for analytics. It may also be disclosed to professional advisers or authorities where reasonably needed or legally required. It is never sold or used for targeted advertising.
6. Retention
Routine unsuccessful inquiries are deleted within 12 months. Correspondence needed for an ongoing relationship, safety, accounting, or legal claims is reviewed at least annually and retained only while that need remains.
Verification images are removed from the receiving mailbox within 30 days after screening unless a documented safety or legal need requires longer retention.
Letter subscriptions remain until unsubscribed.
Photo likes normally expire after 30 days. Session storage lasts for the browser session; the analytics choice remains until changed or cleared.
Hosting, security, and permitted analytics records follow the configured provider retention periods and are reviewed periodically.
7. Your Rights
Depending on applicable law, you may request access, correction, deletion, portability, or restriction; object to processing; and withdraw consent. Send requests to the address above. We normally respond within one month.
8. Automated Decisions
No booking decision is made solely by automated means.
9. Security and Breaches
We use data minimisation, restricted access, transport encryption, bounded requests, upload sanitisation, and abuse controls. No system is risk-free. A qualifying breach will be handled and notified as required by applicable law.
10. International Processing
Some providers may process information outside your country. Where required, those transfers rely on recognised legal safeguards such as adequacy decisions, the Data Privacy Framework, or standard contractual clauses.
11. Age Restriction
This website and its inquiry form are for adults aged 21 and over. We do not knowingly process inquiries from minors.
12. Complaints
You may lodge a complaint with the data protection authority where you live or work, or where you believe an infringement occurred.
13. Changes
Material changes will be shown on this page with a revised effective date.