Privacy policy

• Account, when you sign in with Google or Apple: your name, email address, profile picture, and the identifier provided by that provider. We never receive or store your password.
• Age declaration, when you create your account: the date of your declaration that you are 18 or over, and the IP address and browser used at that moment. This is what lets us show that the account was properly opened.
• Profile, the gender and country you declare, used for matching.
• Subscription, a Stripe customer ID and your subscription status. Your bank details never pass through our servers: they are entered directly with Stripe.
• Technical, IP address, browser type, and connection timestamps, needed for security and to fight abuse.
• Reports, when one user reports another, the reason given and anything attached to the report.
• Streamer mode consent, when someone agrees or refuses to be broadcast live: the two accounts involved, the room, and the date.

Your video conversations are never recorded, stored, or rebroadcast. The stream passes directly from one browser to the other; it only passes through our servers when a direct connection is not possible, and it is never retained.

Text messages sent during a conversation pass through our servers to be relayed, but are not recorded: they disappear at the end of the conversation.

• to run the service and put you in touch with someone
• to enforce the rules and permanently keep out accounts that break them
• to manage subscriptions and payments
• to respond to your requests

We do not sell any data. We work with:

• Google and Apple, for authentication
• Stripe, for payments
• MongoDB Atlas, to host the database
• OVH, to host the servers, in France
• a messaging provider, used by our moderation team to review reports and to follow new sign ups. It receives only what those two tasks require, in private channels closed to anyone outside the team

We also disclose information when required by law, or to report content involving a minor, without condition or delay.

• Account: for as long as it exists, then thirty days after deletion
• Age declaration: for as long as the account exists, because it is what justifies opening it
• Connection logs: twelve months
• Reports and suspension decisions: three years, to prevent a banned account from coming back
• Streamer mode consent records: 180 days, longer than moderation evidence because a complaint about being broadcast can surface well after the fact
• Billing records: ten years, the legal retention period for accounting records

You can request access to your data, its correction, its erasure, its portability, or object to its processing. Write to hello@decal.ink: we reply within one month.

Deleting your account erases your data, except for what we must keep to prevent a banned account from coming back or to meet an accounting obligation.

If our response does not satisfy you, you can lodge a complaint with your country’s data protection authority.

We only use cookies that are necessary for the service to work: one that keeps you signed in, and one that secures forms. No advertising or tracking cookie is set without your consent.

The service is for people aged 18 and over. We do not knowingly collect data about a minor. If you think a minor is using the service, report it immediately: we close the account and delete the associated data.