Privacy & Data Protection

ERKA Event Ltd. is the data controller responsible for the processing of personal data on FF-Lover.FUN.

Account Data

• Username — chosen by you, publicly visible within the platform
• Email address — used for login and platform communications
• Password — stored as a one-way cryptographic hash (bcrypt)
• Date of birth — collected to verify you are 18 or older; stored securely
• Registration IP address — stored for security and age-verification audit purposes

Profile Data

• Role, experience level, tags, and bio — all optional, visible to other members according to your privacy settings
• City and country — optional location data you provide for community discovery
• Profile photos and avatar — uploaded images stored on our infrastructure
• Travel dates — optional dates you share when visiting other cities

Contact Data (Shared Within the Platform)

• First name, last name, WhatsApp, mobile, Telegram, and other contact handles — entered voluntarily into the Contact Info section
• This data is only shared with other members you explicitly choose to share it with
• Contact share logs (who shared with whom, when) are retained for your review

Chat and Message Data

• Direct messages between members are stored in the platform database
• Group and community chat messages are similarly stored
• Message content is accessible to the sender and recipient(s) only

Access and Invite Code Metadata

• When you register via a paid access code or invite code, metadata about the code used is stored for security and moderation purposes
• For paid codes: your email address is associated with the code at the time of payment

Payment Metadata

• FF-Lover.FUN processes payments via Stripe, Inc.
• We do not store payment card details ourselves
• We receive and store: payment confirmation status, Stripe session ID, and the email address associated with the payment
• For Stripe's own privacy practices, see stripe.com/privacy

Technical and Log Data

• IP addresses — stored in logs, access records, session tokens, and security events
• Browser/device type (user agent) — stored in session and security logs
• Login and session data — JWT tokens, session activity, last seen timestamps
• Server request logs — standard technical logs for infrastructure operation

• Account creation and authentication — to allow you to register, log in, and use the platform
• Community access control — to verify that members meet the 18+ requirement and have a valid invite or paid access code
• Profile and community functionality — to power profiles, chats, contact sharing, discovery, and community features
• Payment and access fulfilment — to process early-access payments and generate access codes via Stripe
• Security and abuse prevention — to detect fraud, block accounts, investigate reports, and maintain platform integrity
• Admin moderation and support — to allow administrators to manage accounts, respond to reports, and maintain community safety

Railway (Cloud Hosting)

FF-Lover.FUN is hosted on Railway (railway.app), a cloud infrastructure provider. Application servers and the PostgreSQL database are operated within Railway's infrastructure. Data may be stored and processed in data centers that may be located outside the European Economic Area. Railway operates with appropriate technical and organizational security measures.

Stripe (Payments)

Payments for early access are processed by Stripe, Inc., headquartered in the United States. When you make a payment, your payment data is processed by Stripe under their own privacy policy. Stripe is certified under appropriate data protection frameworks. See stripe.com/privacy.

International Data Transfers

Due to the use of cloud infrastructure providers and Stripe, your data may be transferred to and processed in countries outside the EU/EEA, including the United States. Where such transfers occur, they are based on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

We retain personal data only for as long as necessary for the purposes described above or as required by applicable law.

• Account data: Retained for the duration of your account and deleted upon account deletion (see below)
• Log and security data: Typically retained for 90 days; certain records may be retained longer for legal compliance
• Payment metadata: Retained as required by tax and accounting law (typically 10 years in Germany)
• Chat messages: Retained for the duration of the conversation; anonymized or deleted upon account deletion

You may delete your account at any time from Settings → Account → Delete Account. Account deletion will:

• Permanently delete your user record, profile data, and contact information
• Remove your profile photos and uploaded content from active storage
• Revoke all active login sessions
• Anonymize or remove your authorship from chat messages (to preserve conversation integrity for other users)
• Remove your access codes, friendships, blocks, favorites, and travel entries

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of inaccurate personal data
• Right to erasure ("right to be forgotten") — you may request deletion of your data (subject to legal retention requirements)
• Right to restriction of processing — in certain circumstances, you may request that we limit how we use your data
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to object — where processing is based on legitimate interests, you may object to such processing
• Right to lodge a complaint — you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence

To exercise any of these rights, contact us at the contact form on our Imprint page.

FF-Lover.FUN is a user-generated content platform. Members are solely responsible for the content they upload, post, or share. ERKA Event Ltd. does not review all uploaded content in advance. If you believe content violates applicable law or these policies, you may use the report function on any profile.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated via the platform. Continued use of FF-Lover.FUN after an update constitutes acceptance of the revised policy.