Legal
Privacy policy
1. Controller
SocialProof (social-proof.net) is the controller of the personal data collected through this site. Data requests go through the form on the Contact page.
2. What we collect
Account: your e-mail address and password (stored only as a hash). When you sign in with Google or Apple we receive only your e-mail and, optionally, your name from the provider; we never receive your account password. Orders: the public link you provide, the quantity, the comment text and the order status. Contact: the name, e-mail and message sent through the form. Technical: IP address, browser type and pages visited, in the server and Cloudflare logs.
3. Purpose and legal basis
Performance of the contract (creating the account, processing and delivering orders, answering requests), legal obligations (invoicing, accounting) and our legitimate interest in protecting the site from abuse (rate limiting, Turnstile, security logs).
4. Payments
Payment is arranged directly with you by e-mail once the order is recorded. The site processes no cards and stores no payment data.
5. Cookies
We use strictly necessary cookies only: the session cookie (httpOnly, to keep you signed in), the Cloudflare Turnstile cookie on the contact form and Cloudflare's technical cookies. No tracking or advertising cookies.
6. Who we share data with
Cloudflare (proxy and protection), Google and Apple (only if you choose to sign in with those services) and our hosting provider in the European Union. We do not sell or rent personal data.
7. Retention
Account data is kept for as long as the account is active. Order and payment records are kept as required by tax law. Technical logs are deleted automatically within 90 days.
8. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Romanian data-protection authority (ANSPDCP). Exercise them through the form on the Contact page.