Privacy policy (GDPR)

Data controller

Nottaluna SRL, publisher of the nottaluna.com platform. Contact: contact@nottaluna.com.

Data collected

• Phone number (verification at sign-up) — stored hashed, never in plain text.
• Email address and password (hashed) for login.
• Username and profile characteristics you enter.
• Certification video — stored privately and deleted once verified.
• Photos you upload to your galleries.

"Verified, never exposed" principle

Your real identity (phone, email) is decoupled from your public profile. Other members only see you by your username: never your email or your number.

Purposes

Your data is used solely to operate the service (authentication, certification, matchmaking) and is neither sold nor shared with third parties for advertising purposes.

Your rights

You have the right to access, rectify, erase and port your data. To exercise it, write to contact@nottaluna.com. You can delete your account at any time.

Retention

Your data is kept as long as your account is active. Profiles inactive for more than 60 days are hidden; your personal data (identity, photos, profile) is deleted on request or after account deletion.

Retention for security purposes

For security, abuse prevention and evidence purposes (legal basis: legitimate interest and legal obligations), exchanged messages and connection logs are kept archived, including after an account is deleted. These archives are dissociated from your real identity: they only keep the username used at the time of sending, never your email or phone number.