Privacy Policy
Last updated: May 12, 2026
1. Data controller
HBDWall.xyz is operated by Yémalin Modeste (yemalin.me). Contact: support@hbdwall.xyz
2. Data collected
When creating an account
- Username (pseudo)
- Display name (optional)
- Birthday
- 4-digit PIN (stored as a hash, unreadable)
- Email address (optional)
- TikTok handle (optional)
When leaving a message on a wall
- Message author's name (optional)
- Message text
- Attached photo (optional)
Technical data
- IP address (kept temporarily, only to prevent abuse)
- Encrypted session cookie (required for the service to function)
- Anonymised browsing data via Umami Analytics (self-hosted)
3. Purposes and legal bases
Service execution — Create and manage your account, display your wall, allow contributors to leave messages.
Legitimate interest — Prevent abuse and spam (IP-based rate limiting).
Consent — Push notifications (you can decline or disable them at any time in settings).
Audience measurement — Anonymous statistics via Umami. No personal data is shared with third parties.
4. Sub-processors and non-EU transfers
We use the following providers to operate the service:
- Cloudflare R2 (Cloudflare Inc., United States) — Storage of photos uploaded to walls. Cloudflare is subject to the European Commission's standard contractual clauses.
- Umami Analytics — Self-hosted outside of GAFAM infrastructure. No data leaves the EU.
5. Retention periods
- Account data: retained until the account is deleted
- Messages and photos: retained while the wall exists
- IP address (rate limiting): deleted after 15 minutes
- Session cookie: deleted on logout or after expiry
6. Your rights
Under the GDPR, you have the following rights:
- Access — obtain a copy of your data
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and data
- Portability — receive your data in a structured format
- Objection — object to processing based on legitimate interest
To exercise these rights: support@hbdwall.xyz. Response within 30 days. You may also contact the CNIL (French data protection authority).
7. Cookies
HBDWall.xyz uses a single technical cookie (bw_session), strictly necessary for the service to function. It contains no readable personal data and cannot be disabled without preventing login. No advertising or third-party tracking cookies are set.
8. Changes
If this policy is materially updated, you will be notified by email (if provided) or via an on-site notification.