{{ __('1. Data We Collect') }}

{!! __('privacy.collect_required') !!}

{!! __('privacy.collect_optional') !!}

{!! __('privacy.collect_special') !!}

{{ __('privacy.collect_photos') }}

{!! __('privacy.collect_technical') !!}

{{ __('privacy.collect_age') }}

{{ __('2. How We Use Your Data') }}

{{ __('privacy.use_general') }}

{{ __('privacy.use_visibility') }}

{{ __('privacy.use_no_profiling') }}

{{ __('3. Legal Basis (GDPR)') }}

{{ __('privacy.legal_general') }}

{!! __('privacy.legal_special') !!}

{{ __('privacy.legal_legitimate') }}

{{ __('4. Data Retention') }}

{{ __('privacy.retention_account') }}

{{ __('Technical security logs (IP address, browser, session data) are retained for a maximum of 90 days.') }}

{{ __('5. Security') }}

{{ __('privacy.security') }}

{{ __('6. External Processors') }}

{{ __('privacy.processors') }}

{{ __('7. International Data Transfers') }}

{{ __('privacy.international') }}

{{ __('8. Personal Toolkit Data (Me-menu)') }}

{{ __('privacy.toolkit') }}

{{ __('Because this data may include information about your mental health and wellbeing, it qualifies as special category data under GDPR Art. 9. It is only processed on the basis of your explicit consent, given at the moment you enable sync. If you enable sync, this data is included in your data export.') }}

{{ __('9. Abuse Prevention After Account Deletion') }}

{{ __('To prevent circumvention of free plan limits through repeated account deletion and re-registration, we retain a cryptographic fingerprint of your email address after your account is deleted. This fingerprint is a one-way hash (SHA-256) combined with a server-side secret key. It cannot be reversed to identify you and is not linked to any personal data such as your name or email address. Only anonymous numeric counters (number of matches and messages used) are stored alongside the fingerprint. This processing is based on our legitimate interest in preventing platform abuse (GDPR Art. 6(1)(f)). The fingerprint is automatically and permanently deleted 12 months after your account deletion. You may request earlier deletion by contacting us.') }}

{{ __('10. Your Rights') }}

{{ __('Under GDPR you have the right to access, rectify, erase, and port your personal data. You can exercise most of these rights directly:') }}

{{ __('For any other privacy requests, please') }} {{ __('the contact form') }} {{ __('or email') }} contact@ndlink.app.

{{ __('Under GDPR you have the right to access, rectify, erase, and port your personal data. After logging in you can rectify your data, download a copy, and delete your account directly via your account settings.') }}

{{ __('11. Cookies') }}

{{ __('We use only functional cookies required for the platform to operate (session, CSRF). No tracking or advertising cookies are used.') }}

{{ __('12. Supervisory Authority') }}

{{ __('You have the right to lodge a complaint with the supervisory authority if you believe your personal data is being processed unlawfully. In Belgium, this is:') }}

{{ __('Authority') }}

{{ __('Gegevensbeschermingsautoriteit (GBA)') }}

{{ __('Address') }}

Drukpersstraat 35, 1000 Brussel

{{ __('Phone') }}

+32 (0)2 274 48 00

{{ __('Email') }}

contact@apd-gba.be

{{ __('Website') }}

gegevensbeschermingsautoriteit.be

{{ __('13. Contact') }}

@auth {{ __('For privacy-related questions, please') }} {{ __('the contact form') }} {{ __('or email') }} contact@ndlink.app. @else {{ __('For privacy-related questions, please email') }} contact@ndlink.app. @endauth