Privacy Policy

Who is responsible for your data

The data controller under the EU General Data Protection Regulation (GDPR) is:

Write to the contact email for any privacy request.

What we collect

• Account data: email address, password (stored only as a secure hash), username, and the profile details you choose to add.
• Your confirmation that you are 18 or older, and when you gave it.
• Content you publish: ads, images, comments, likes and follows.
• Payment records: amounts and status. Card details are handled by our payment provider and never stored by ADORA.
• Aggregate analytics: ad impressions and clicks, counted with a pseudonymous, rotating identifier rather than your identity.

Why we use it, and on what basis

• To provide your account and publish your ads — performance of our contract with you.
• To take payments and keep accounting records — legal obligation.
• To prevent fraud, abuse and illegal content — our legitimate interest in a safe service.

We do not sell personal data and we don't use it for third-party advertising.

Who processes it for us

We use service providers that process data on our behalf under data processing agreements: Supabase (database, login and file storage), Vercel (website hosting) and Stripe (payments). Some of them may process data outside the European Economic Area under the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

Account data is kept while your account exists and deleted within 30 days of you closing it. Payment records are kept for as long as tax law requires (in Poland, generally 5 years from the end of the tax year).

Your rights

You can access, correct, export or delete your personal data, restrict or object to certain processing, and withdraw consent where we rely on it. You can also complain to a data protection authority — in Poland, the President of the Personal Data Protection Office (Prezes UODO, uodo.gov.pl).