Privacy Policy

The data controller responsible for the processing of your personal data is:

• Name: Christopher Kiefer
• Contact: contact@dance.today

We may collect the following categories of information:

Account Information

• Name or display name
• Email address
• Profile image (optional)

Usage and Technical Data

• IP address
• Device and browser information
• Session activity, pages visited, and timestamps
• Interaction signals used for security and platform integrity

Event-Related Data

• Events you create, submit, edit, or interact with
• RSVP or registration activity (where applicable)
• Leader/follower role selections

We do not intentionally collect sensitive personal data.

We use collected information to:

• Operate and maintain the platform
• Verify users and prevent abuse
• Moderate content and enforce policies
• Detect fraud, scraping, automation, and misuse
• Communicate important updates and service notices
• Improve user experience and platform features

We do not sell personal data.

In accordance with the GDPR and applicable French law, we process personal data based on:

• Your consent
• Performance of a contract (providing the service)
• Legitimate interests such as security, abuse prevention, and platform integrity
• Legal obligations

We may share limited data with:

• Infrastructure and security providers
• Analytics and monitoring tools
• Legal authorities if required by law

We never share personal data for advertising or resale purposes.

Some of our service providers are located outside the European Economic Area (EEA):

• Supabase Inc. (database and authentication) — Singapore / USA
• Vercel Inc. (hosting and CDN) — USA

These transfers are governed by appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the providers' compliance with applicable data protection frameworks.

We retain data only as long as necessary to:

• Provide the service
• Comply with legal obligations
• Enforce platform policies

We may retain anonymized or aggregated data for analytics and security purposes.

Under the GDPR and French data protection law (Loi n° 78-17 du 6 janvier 1978, "Loi Informatique et Libertés"), you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion of your account and data
• Object to certain processing activities
• Request restriction of processing
• Request data portability
• Withdraw consent at any time
• Define post-mortem directives regarding your data (Art. 85 Loi Informatique et Libertés)

Requests can be made via the contact page.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French supervisory authority:

• CNIL — Commission Nationale de l'Informatique et des Libertés
• 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
• www.cnil.fr