Last update: December 26, 2025
Welcome to PenPalk (the “Platform”).
Protecting your personal data is important to us.
This Privacy Policy explains how we collect, use, and protect your data when you use the Platform.
1. Data Controller
1.1. The data controller is the Platform publisher (see our Legal Notice).
1.2. For privacy-related requests, you can contact us at [email protected].
2. Data We Collect
2.1. Account data: email address, username, password (securely stored), date of birth, gender (if provided), languages, and preferences.
2.2. Profile data: information you choose to add (bio, interests, country, photos/avatars, etc.).
2.3. User-generated content: letters, posts, comments, private messages, reports, and any content you submit.
2.4. Technical and usage data: IP address, technical identifiers, device/browser information, visited pages, security logs, and data required to operate the Platform.
2.5. Cookies and similar technologies: used for authentication, security, preferences (theme/language), and, where applicable, advertising (see our Cookies Policy).
3. Purposes and Legal Bases (GDPR)
3.1. Providing the service (account creation, messaging, access to features).
3.2. Legal basis: performance of a contract (Terms of Service).
3.3. Security, fraud and abuse prevention, moderation, and enforcement of rules.
3.4. Legal basis: legitimate interests and/or legal obligations, as applicable.
3.5. Service communications (e.g., security, account, platform operation).
3.6. Legal basis: performance of a contract and legitimate interests.
3.7. Advertising (Google AdSense) and consent management through a CMP where required.
3.8. Legal basis: consent for advertising cookies/trackers where applicable.
3.9. Improving and maintaining the Platform.
3.10. Legal basis: legitimate interests.
4. Sharing Your Data
4.1. Public content: any content you post publicly may be visible to other users and, depending on settings, may be indexed.
4.2. Service providers: we may share limited data with providers (hosting, maintenance, security, email delivery, etc.) strictly to operate the service.
4.3. Advertising: where you consent if required, advertising partners (e.g., Google AdSense) may process data through cookies/advertising identifiers.
4.4. Legal compliance: we may disclose information if required by law or to protect rights, safety, and platform integrity.
5. International Transfers
5.1. Some providers (e.g., Google services) may process data outside the European Economic Area.
5.2. Where applicable, transfers rely on recognized mechanisms (e.g., adequacy decisions, Standard Contractual Clauses) under providers’ policies.
6. Data Retention
6.1. We keep data only as long as necessary to provide the Platform and comply with legal obligations.
6.2. Account data: kept while your account remains active.
6.3. Account deletion: you can delete your account via “Manage my data”.
6.4. After deletion, associated data is deleted, except for limited retention where required for legal obligations, security, fraud prevention, or dispute handling.
6.5. Backups: technical copies may temporarily remain in backups and will be overwritten.
7. Security
7.1. We implement reasonable security measures to protect your data from unauthorized access, alteration, or disclosure.
7.2. However, no system can be guaranteed as fully secure.
8. Your Rights (GDPR)
8.1. Depending on your situation, you may have rights to access, rectify, erase, restrict, object, and receive a copy of your data (portability), and to withdraw consent where processing is based on consent.
8.2. To exercise your rights, contact us at [email protected].
8.3. You may also lodge a complaint with your competent supervisory authority (in France: CNIL).
9. Children’s Privacy
9.1. The Platform is not intended for users under 15 years old.
9.2. We do not knowingly collect personal data from individuals under 15.
10. Changes to This Policy
10.1. We may update this Policy to reflect legal, technical, or functional changes.
10.2. The update date is shown at the top of this page.
11. Contact
11.1. If you have any questions, contact us at [email protected].