Clouds of Europe - Privacy Policy

Last updated: 2025-12-09

Clouds of Europe - Privacy Policy

Effective Date: December 2024

Data We Collect

  • Account Information: Email, name, profile details you provide
  • Usage Data: How you interact with our platform (pages visited, features used)
  • Communications: Messages, posts, and content you share in our community

Cookies & Local Storage

We use minimal, essential cookies for platform functionality:

Essential Cookies (No Consent Required)

  • Authentication: next-auth.session-token - keeps you signed in securely
  • Security: CSRF protection tokens - prevents malicious attacks
  • Session Management: Database-stored session data for GDPR compliance

What We DON'T Use

  • No Google Analytics or tracking cookies
  • No marketing or advertising cookies
  • No third-party tracking pixels
  • No Google Fonts cookies (self-hosted for digital sovereignty)

Why no cookie banner? Under GDPR Article 6 and ePrivacy Regulation, essential cookies for authentication and security don't require consent. We only use cookies necessary for platform operation.

How We Use Your Data

  • Platform Operation: Authenticate users, provide community features
  • Communication: Send platform updates, event notifications (with your consent)
  • Improvement: Analyze usage to enhance our services
  • Legal Compliance: Meet European regulatory requirements

Data Sharing

  • We never sell your data to third parties
  • Limited sharing: Only with European service providers who meet GDPR standards
  • Community Content: Profile information you choose to make public is visible to other members
  • Legal Requirements: Only when required by European courts or regulators

Your Rights (GDPR)

  • Access: Request a copy of your data
  • Correction: Update incorrect information
  • Deletion: Delete your account and data (right to be forgotten)
  • Portability: Export your data in standard formats
  • Objection: Opt out of non-essential processing

Data Security

  • European Hosting: All data stored in EU data centers
  • Encryption: Data encrypted in transit and at rest
  • Access Controls: Strict access limitations for staff
  • Retention: Data deleted after account closure or 3 years of inactivity

Contact

  • Data Protection: privacy@clouds-of-europe.eu
  • EU Representative: [Address in Amsterdam, Netherlands]