Privacy policy
Data controller
MaFeliza
The service is published on a non-professional basis by a natural person who has chosen to remain anonymous in accordance with Article 6 III-2 of French Law No. 2004-575 of 21 June 2004 on confidence in the digital economy.
For any question about your personal data: contact@mafeliza.com.
The controller’s identity has been communicated to the hosting provider in accordance with applicable legal requirements.
Data collected
Depending on how you use MaFeliza, we may process:
- account identity: email, hashed password, first name, last name, photo, language, timezone;
- social sign-in identifiers (Google, Apple, Facebook) — Apple may relay a hidden email;
- events: title, description, date, location, cover image;
- user content: photos, guestbook messages, live chat, private messages;
- participations, friendships, favourites, history;
- notification tokens and preferences;
- reports and moderation decisions;
- non-nominative aggregated statistics;
- for gift pots: only the public URL and the public amount if shown by the external platform.
MaFeliza never collects bank details, payment data, balances, health data or continuous geolocation.
Purposes and legal bases
- Providing the service (account, events, album, messages) — performance of the contract;
- session security — legitimate interest;
- push notifications — consent;
- audience measurement (Google Analytics 4) — consent;
- moderation and reports — legitimate interest and legal obligations;
- anonymous statistics — legitimate interest.
Recipients and transfers
- OVH: hosting (European Union, subject to the chosen datacenter);
- Google (Firebase Cloud Messaging): push notifications — outside the EU, standard contractual clauses;
- Google Analytics 4: audience measurement — outside the EU, only after consent;
- Google, Apple, Meta: social sign-in — outside the EU;
- YouTube / Twitch: embedded live playback — outside the EU, third-party cookies when the player loads;
- gift-pot platform chosen by the organiser: redirect; direct relationship between the user and that platform.
Retention
- account: lifetime of the account, then 30 days after a deletion request;
- event and related content: until 7 days after the end (archive) then purge at day 14;
- downloadable ZIP archive: 7 days;
- sessions: 90 days after expiry;
- moderation log: 3 years, without the reported content;
- anonymous aggregated statistics: unlimited.
Gift pots and payments
MaFeliza does not process banking data. Only the public URL of an external gift pot, and the public amount if exposed by that platform, may be displayed. No payment is collected or simulated inside MaFeliza.
Your rights
You have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. In MaFeliza:
- rectification: Profile screen;
- portability: export from Settings (JSON archive and media, signed link);
- erasure: Settings → Delete my account, with password confirmation; sessions are revoked immediately and purge occurs at day 30;
- objection / consent: notification preferences, reopenable cookie banner, public visibility.
No data protection officer is appointed at this time. Requests go to contact@mafeliza.com. You may lodge a complaint with the French CNIL (cnil.fr) or your local supervisory authority.