Privacy Policy

Last Updated: June 30, 2026

1. Data Controller Details

Cariff is currently operating as a non-commercial Minimum Viable Product (MVP). The data controller responsible for your personal information is an independent developer:

Operated by: Private Individual
Project Name: Cariff
Location: Tallinn, Estonia
Contact Email: [email protected]

2. What Data We Collect & Why (GDPR Compliance)

We collect only the absolute minimum data required to provide our service:

  • Email Address: Collected solely to verify your account via OTP (Double Opt-in) and prevent fraud.
  • Technical Data: Essential cookies necessary for user authentication and session management.

We explicitly do NOT collect personal data for marketing purposes without a separate, explicit consent.

3. Third-Party Data Processors

To provide a secure and functional service, we engage trusted third-party processors. These processors act strictly under our instructions and are bound by Data Processing Agreements (DPAs) compliant with European GDPR standards:

  • Amazon Web Services (AWS): We use AWS Simple Email Service (SES) exclusively to securely deliver transactional emails (such as OTP verification codes).
  • Cloudflare, Inc.: We use Cloudflare Turnstile to protect our registration and login forms from automated bots and spam. Turnstile may analyze basic browser telemetry and technical data strictly for security verification purposes.

4. Age Restrictions

Our services are strictly intended for users who are at least 16 years old. We do not knowingly collect personal data from children under 16. By checking the consent box during registration, you confirm you meet this age requirement.

5. Your Rights as a Data Subject

Under European law, you maintain full control over your data. You have the right to:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Correct any inaccurate data.
  • Erasure ("Right to be Forgotten"): Request complete deletion of your account and email from our databases.
  • Withdraw Consent: You may withdraw your consent at any time by contacting [email protected].