Privacy Policy

1. Data Controller

Orbinuity operates under EU/GDPR jurisdiction. For any privacy queries or data protection requests, you can contact the data controller at: orbinuity@ratgers.nl.

2. Information We Collect

When you register and use an account, we collect:

• Account Credentials: Username, email address, and encrypted (bcrypt hashed) passwords.
• Profile Info: Display name, age, pronouns, and country (if provided).
• Security & Authentication Data: Email verification status, 2FA preferences, and session tokens.

3. How We Use Your Data

Your data is processed strictly for:

• Authenticating your account and managing account settings.
• Sending necessary transactional emails (verification, 2FA codes, password resets).
• Storing custom user data and application preferences.

We never sell, rent, or trade your personal data to third parties.

4. Cookies & Local Storage

We use essential cookies strictly required for authentication (session tokens). We do not use third-party tracking or advertising cookies.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: View your personal profile data at any time on your account page.
• Correction: Update your profile details directly from the Settings page.
• Erasure ("Right to be Forgotten"): Permanently wipe your account and associated data using the "Delete Account" button in Settings.

6. Data Security

We enforce HTTPS encryption for all data transport, store passwords using secure salted hashes (bcrypt), and limit authentication tokens to 7-day lifespans.