Privacy and data protection (GDPR)

Data controller

The data controller is Padlove SAS. For any question regarding your data, please write to us at confidentialite@padlove.io.

Data we collect

• Account: email address (login key via magic link), first name(s) engraved on the padlock.
• Padlock: both first names, the date you met, the anchoring location and, if you wish, your story and your photos.
• Technical: connection and security data strictly necessary for the service.

We do not require a password: you log in through a magic link sent by email. No advertising profile is created.

Purposes and legal bases

• Providing the service (creating, sealing and displaying your padlock) — performance of the contract.
• Securing accounts and preventing abuse — legitimate interest.
• Sending you service emails (magic link, sealing notification) — performance of the contract.
• Measuring site audience in an anonymized way — legitimate interest.

Retention periods

Your data is kept for as long as your account is active. After your account is deleted, it is erased or anonymized within 30 days, except where legal retention obligations apply (for example, accounting requirements).

Your rights

• The right to access, rectify and erase your data.
• The right to data portability and the right to object to or restrict processing.
• The right to withdraw your consent at any time, without affecting the lawfulness of processing already carried out.
• The right to lodge a complaint with the CNIL (www.cnil.fr).

To exercise these rights, please write to confidentialite@padlove.io. We respond within a maximum of one month.

One-click unsubscribe

Every non-essential email contains a one-click unsubscribe link, without requiring you to log back in. Emails strictly related to the security and operation of your padlock, however, remain indispensable.

Account deletion

You may delete your account at any time, directly from the application (Account section), or upon simple request to confidentialite@padlove.io. Deletion is permanent and free of charge; it results in the erasure of your associated personal data.

Transfers and security

We favor hosting within the European Union. All data is encrypted in transit. Any providers located outside the EU are governed by safeguards compliant with the GDPR (standard contractual clauses).