Privacy Notice
This page gives a concise overview of the types of personal data that may be processed in connection with narcissus.black and the rights available to you.
1. Controller
The controller for the processing associated with narcissus.black is the operator of the website. Contact details are available in the imprint.
2. Data that may be processed
- Account data such as email address, password hash, Google sign-in details, and verification status
- Content you actively submit, including messages, cases, profiles, history, and saved app state
- Subscription and billing information related to Stripe
- Technical information such as IP address, browser details, security events, and error logs
- Usage and analytics information where measurement or security services are enabled
3. Purposes
Data may be processed to provide accounts and app functionality, store your in-product content, deliver verification and reset emails, process subscriptions, secure the service, prevent abuse, and understand product usage for improvement.
4. Legal bases
Depending on the context, processing may be based on contractual necessity, steps taken prior to entering a contract, legitimate interests in operating and securing the service, or consent where consent is specifically obtained.
5. Service providers
Depending on the feature, technical providers and processors may be involved, including hosting and infrastructure providers, payment processors, email providers, anti-bot and security vendors, analytics tools, and AI/model providers. Where such vendors process data outside the EU/EEA, this should occur only under applicable transfer mechanisms and safeguards.
6. Retention
Personal data is generally retained only for as long as necessary for the relevant purpose, active subscriptions or accounts, security needs, or legal retention obligations. Where deletion features exist, in-product content can be removed through those mechanisms.
7. Your rights
You may have rights of access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent for future processing where consent applies. You may also lodge a complaint with a supervisory authority. The BfDI provides an official overview here: Data subject rights.
8. Cookies, local storage, and measurement
The website and app may use technically necessary cookies, session cookies, local storage, and security-related mechanisms. Where analytics or similar measurement tools are used, they should only be configured in line with applicable legal requirements. You should review the live technical setup regularly.
9. Contact
Privacy-related requests can be sent to the contact address listed in the imprint.