Privacy Policy

1. Introduction

This Privacy Policy explains how RemoteChastity ("we," "our," or "us") collects, uses and protects personal data when individuals ("users" or "you") use the Remote Chastity service (the "Service"). We are committed to processing personal data in a concise, transparent and intelligible way, as required by Articles 12ÔÇô14 of the GDPR.

2. Identity and Contact Details

Controller: RemoteChastity, registered in the Netherlands.
Data Protection Officer (DPO): Not applicable.
Contact: For questions about this policy or your data, email privacy@remotechastity.com

3. Purposes and Legal Bases for Processing

We process personal data only when there is a lawful basis:

Purpose	Legal Basis	Description
Account creation and management	Performance of a contract (Article 6 (1)(b) GDPR)	We collect your name (real or alias), email address, password, and other profile data to create and manage your account. You are required to provide this information to use the Service; without it, we cannot fulfill our contract.
Service functionality	Legitimate interests (Article 6 (1)(f))	We record device IDs, session logs, and operational data to operate and improve the Service. This includes ensuring security, preventing fraud, and troubleshooting. We ensure these interests do not override your fundamental rights.
Communications and support	Legitimate interests or Performance of a contract	We use your contact details to send transactional emails (e.g., password resets, security alerts) and respond to support requests.
Analytics	Consent (Article 6 (1)(a))	We use analytics to understand how the Service is used. Analytics cookies are deployed only after you provide consent via our cookie banner.
Legal obligations	Compliance with a legal obligation (Article 6 (1)(c))	We may process data to comply with tax, accounting or lawÔÇæenforcement requirements.

4. Data Collection

Because the Service is still in a preÔÇælaunch phase, we collect only limited data. In particular:

Account information: For applicants and community members, we collect your email address and a chosen username or alias. Passwords are stored in hashed form.

Device and usage data: We collect IP addresses, browser type, operating system, timestamps and basic usage logs to maintain the security and performance of our website. Because the remote device has not yet been released, no device telemetry is collected at this stage.

Preferences and settings: Language preference, consent choices, and notification settings (if you opt to receive updates).

Communications: Messages sent to our support team or through feedback forms.

Cookies: Essential cookies for authentication and security; optional analytics cookies for aggregated usage statistics (see §7).

In the future we anticipate collecting payment information (such as billing details and transaction IDs) and age/identity verification data (e.g., governmentÔÇæissued ID and date of birth) in order to comply with adultÔÇæentertainment regulations and antiÔÇæmoneyÔÇælaundering requirements. We will update this policy and obtain explicit consent before collecting such data.

We do not collect special categories of personal data (e.g., data on race, religion or sexual orientation) and discourage users from sharing such information. We also do not knowingly collect data from anyone under 18; using the Service signifies that you are 18 or older. Age verification will be required for performers and device users once those features launch.

5. Data Recipients

We do not sell or rent your personal data. We may share information with:

Service providers: We host our infrastructure on Microsoft Azure in Europe (Amsterdam). Azure acts as our processor and only accesses data under our instructions. We also host analytics on our own server; no data is sent to thirdÔÇæparty analytics vendors. If and when we introduce payments or KYC, we will partner with regulated payment processors and identityÔÇæverification providers who meet EU dataÔÇæprotection standards. Such partners will receive only the minimum data necessary to perform their functions.

Legal authorities: We may disclose data when required to comply with a legal obligation or to protect our rights, property or safety.

Corporate transactions: If we engage in a merger or asset sale, we will ensure an adequate level of data protection and inform users before personal data is transferred or becomes subject to a different privacy policy.

We do not transfer personal data outside the European Economic Area. If such transfers become necessary, we will implement safeguards (e.g., EU Standard Contractual Clauses) and update this policy accordingly.

6. Retention of Personal Data

We keep personal data only as long as necessary for the purposes described above. Generally:

• Account data are stored while your account is active. When you delete your account, we erase or anonymize your personal data within 30 days, unless retention is required by law.
• Security logs are retained for 6 months to help us detect and investigate abusive activities.
• Communications and support tickets are retained for 2 years for quality assurance and dispute resolution.

7. Cookies and Tracking Technologies

Cookies allow websites to store information on a user's device. Under the GDPR and the ePrivacy Directive, consent is required for any cookies that are not strictly necessary. We use:

Strictly necessary cookies: Session cookies used for authentication and to remember your preferences. These are essential and do not require consent.

Analytics cookies: We use firstÔÇæparty, selfÔÇæhosted analytics cookies to collect aggregated data about how you navigate our site. These cookies are used only after you provide consent and help us improve user experience. They do not collect personally identifiable information.

ThirdÔÇæparty cookies: We do not use thirdÔÇæparty marketing or advertising cookies.

Our cookie banner explains the purpose of each cookie in plain language and allows you to accept or reject optional cookies. You may also withdraw consent at any time via the cookie settings link in the footer; we will make it as easy to withdraw consent as it was to grant it.

8. Your Rights

Under the GDPR, you have the following rights:

Right	Description
Access	You can request a copy of the personal data we hold about you.
Rectification	You can ask us to correct or update inaccurate or incomplete data.
Erasure ("right to be forgotten")	You can request deletion of your data when it is no longer necessary for the purposes collected, or when you withdraw consent.
Restriction	You may ask us to restrict processing if you contest the accuracy of your data or object to our legitimate interests.
Data portability	You can request that we transfer your personal data to you or another controller in a structured, commonly used format.
Objection	You can object to processing based on legitimate interests. We will cease processing unless compelling legitimate grounds override your interests.
Withdraw consent	When processing is based on consent (e.g., analytics cookies), you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
Lodge a complaint	You have the right to lodge a complaint with your local supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

To exercise your rights, contact us at privacy@remotechastity.com. We will respond within one month.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we do, we will post the updated version with a "last updated" date and, where required, seek your consent to the changes. Please review this policy periodically for updates.

10. Contact

If you have questions about this policy, contact RemoteChastity at privacy@remotechastity.com.