Privacy Policy

Plaerus Studios places great importance on the protection of your personal data. This policy describes the data collected via CupiBoom and how it is used.

1. Data Controller

2. Data Collected

We only collect strictly necessary data:

3. Legal Basis

• Contract performance (Art. 6.1.b GDPR): necessary for service provision.
• Consent (Art. 6.1.a GDPR): for optional data (profile picture).
• Legitimate interest (Art. 6.1.f GDPR): service improvement and security.

4. Retention Period

Your data is retained for the duration of your account usage. Upon deletion, your personal data is erased within 30 days.

5. Data Sharing

Data accessible only by:

• Your linked partner: coupon data necessary for operation.
• Technical subcontractors: Vercel (hosting) and Supabase (DB, auth).

6. Security

• Encryption in transit (HTTPS/TLS)
• Secure authentication via Supabase Auth
• Row Level Security (RLS) in database
• Hashed passwords, never stored in plain text

7. Cookies

CupiBoom exclusively uses strictly necessary cookies (Supabase authentication session). No advertising or tracking cookies.

8. Your Rights (GDPR)

You have the following rights:

Contact: hello@cupiboom.com. Response within 30 days.

Complaints can be filed with the CNIL (French data protection authority).

9. Minors

10. Changes

This policy may be modified at any time. Users will be informed via the application of any substantial changes.