back to site
Politique de confidentialité

Privacy Policy

GDPR / Loi Informatique et Libertés — Last updated: 2026-09-12
Short version: we collect the minimum needed to run the site, we don't sell anything, and you can ask us to delete your data any time.

1 — Controller

Private individual — see Legal Notice for identity details.
Contact for all privacy matters: legal@puppygirlcore.com

2 — What we collect and why

a) Site usage logs IP address, user agent, page visited, timestamp.
Purpose: security, abuse prevention, basic statistics.
Legal basis: Legitimate interest.
Retention: 12 months, then deleted.
b) Discord sign-in Discord ID, username, avatar hash.
Purpose: Identify you across visits, show your contributions, display your name on the supporters list if you choose.
Legal basis: Contract / consent (for public display).
Retention: Until you delete your account or 3 years of inactivity.
c) Guest contributions Display name, email (stored as a one-way hash on our server; the clear email is held by Stripe for receipts).
Legal basis: Contract, legal obligation (accounting).
d) Payment data Card details are entered directly into Stripe and never reach our servers. We receive: card brand, last four digits, expiry, Stripe customer and payment IDs, amount, item, timestamp.
Legal basis: Contract, legal obligation (accounting — 10 years under French commercial law).
e) Auto-Contribute run logs IP, user agent, settings chosen (item, random, limits, bonus spin), each charge's amount and result, consent version and timestamp.
Purpose: Evidence of your consent and the amounts you authorised, fraud prevention, dispute handling.
Legal basis: Legitimate interest / legal obligation.
Retention: 5 years (limitation period for payment disputes).
f) Consent records Terms version, timestamp, IP.
Legal basis: Legal obligation.
Retention: 5 years.

3 — Recipients

Stripe Payments Europe Ltd — payments and fraud prevention. Stripe acts as independent controller for its own regulatory purposes; see stripe.com/privacy.
Discord Inc. — sign-in.
Hetzner Online GmbH — server infrastructure.

No sale of data. No advertising. No analytics trackers.

4 — International transfers

Stripe and Discord may process data in the United States under the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

5 — Cookies & local storage

  • wishlist_session (relay, 30 days) — keeps you signed in. Strictly necessary.
  • session (admin only) — strictly necessary.
  • localStorage: okita_age_ok — remembers that you confirmed your age. Strictly necessary.

No advertising or analytics cookies are used, so no consent banner is required (per CNIL guidelines for strictly necessary cookies only).

6 — Your rights

You have the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, as well as the right to define directives on your data after death.

Write to legal@puppygirlcore.com and we'll respond within one month. You may also lodge a complaint with the CNIL.

Note: transaction records required by law are kept even after account deletion.

7 — Security

TLS everywhere, card data handled exclusively by Stripe (PCI-DSS), hashed emails, access-restricted admin.

8 — Minors

The Site is not intended for anyone under 18. If you believe a minor has contributed, contact us immediately at legal@puppygirlcore.com.

9 — Changes

We'll post any changes here with a new date. Significant changes will be communicated more prominently.

Last updated: 2026-09-12