Legal
Privacy policy
1. Controller
SocialProof (social-proof.net) is the controller of the personal data collected through this site. Data requests go through the form on the Contact page.
2. What we collect
Account: your e-mail address and password (stored only as a hash). When you sign in with Google or Apple we receive only your e-mail and, optionally, your name from the provider; we never receive your account password. Orders: the public link you provide, the quantity, the comment text and the order status. Contact: the name, e-mail and message sent through the form. Technical: IP address, browser type and pages visited, in the server and Cloudflare logs.
3. Purpose and legal basis
Performance of the contract (creating the account, processing and delivering orders, answering requests), legal obligations (invoicing, accounting) and our legitimate interest in protecting the site from abuse (rate limiting, Turnstile, security logs).
4. Payments
Payment is arranged directly with you by e-mail once the order is recorded. The site processes no cards and stores no payment data.
5. Cookies
Strictly necessary cookies: the session cookie (httpOnly, to keep you signed in), the Cloudflare Turnstile cookie on the contact form and Cloudflare's technical cookies. Analytics cookies: Google Analytics 4 sets its own cookies to count visits and to see which pages lead to an order. We use no advertising cookies and we do not build advertising profiles.
6. Analytics
We use Google Analytics 4 to measure how the site is used: pages viewed, services looked at and orders placed, with the order id, the amount and the quantity. It is not used to identify you personally, and the data is not linked to your account. You can stop it with any browser setting or extension that blocks Google Analytics.
7. Who we share data with
Cloudflare (proxy and protection), Google (Analytics, and sign-in only if you choose it), Apple (sign-in only if you choose it) and our hosting provider in the European Union. We do not sell or rent personal data.
8. Retention
Account data is kept for as long as the account is active. Order and payment records are kept as required by tax law. Technical logs are deleted automatically within 90 days.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Romanian data-protection authority (ANSPDCP). Exercise them through the form on the Contact page.