Privacy Policy

This Privacy Policy explains how Nylonia, the operator and data controller of Nylonia (nylonia.co), based in the European Union (Croatia), collects and uses your personal data, and the rights you have under the EU General Data Protection Regulation (GDPR) and Croatian law. For any privacy request — including formal data-protection requests — contact us at privacy@nylonia.co.

1. Data we collect

• Account data — username, email address, password (stored only as a secure hash), and security settings such as two-factor authentication.
• Profile & content — your display name, bio, avatar, posts, messages, and any media you upload.
• Age-assurance data — a record that your age was verified and when. Where a third-party age-verification provider is used, the identity documents or biometric checks are processed by that provider; we receive a pass/fail result and a reference, not your ID documents.
• Usage & device data — log data such as IP address, approximate location, browser/device information, and actions on the Service, used for security, abuse prevention, and reliability.
• Payment data — if you buy supporter features, payment is handled by a payment processor; we receive confirmation and limited details, never your full card number.
• Communications — messages you send us and reports you file.

2. Why we use it, and our legal bases

• To provide the Service and your account — performance of a contract.
• To verify you are 18+ and keep minors off the platform — legal obligation and legitimate interests.
• To keep the Service safe (moderation, fraud/abuse prevention, security, rate limiting, bot protection) — legitimate interests and legal obligation.
• To process payments — performance of a contract.
• To send service messages, and (only with your consent) any marketing — legitimate interests or consent.
• To comply with the law and respond to lawful requests — legal obligation.

3. Processors we rely on

We share data only with providers who process it on our behalf under data-processing agreements, including:

• Supabase — database, authentication, and media storage (hosted in the EU).
• Cloudflare — content delivery, DNS, email forwarding, and security (CAPTCHA, bot and rate-limit protection).
• An age-verification provider (once enabled) for age assurance.
• A payment provider for supporter purchases (once enabled).

We do not sell your personal data. We may disclose data if required by law or to protect rights, safety, and the integrity of the Service.

4. International transfers

We aim to keep personal data within the EU/EEA. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

We keep personal data for as long as your account is active and as needed to provide the Service. After you delete your account we delete or anonymise your data within a reasonable period, except where we must retain certain records to comply with legal obligations, resolve disputes, prevent abuse (for example, records relating to banned or unlawful content), or enforce our Terms.

6. Your rights

Subject to the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise these rights, email privacy@nylonia.co. You also have the right to lodge a complaint with your supervisory authority — in Croatia, the Agencija za zaštitu osobnih podataka (AZOP).

7. Cookies and similar technologies

We use strictly-necessary cookies and local storage to keep you signed in, remember preferences (such as age-gate acknowledgement and display settings), and secure the Service. We do not use advertising cookies. Any non-essential cookies would be used only with your consent.

8. Security

We protect your data with measures including encryption in transit, hashed passwords, row-level database access controls, optional two-factor authentication, a strict content-security policy, and bot/abuse protection. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

9. Children

The Service is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we remove it. Report any suspected underage user to safety@nylonia.co.

10. Changes

We may update this Policy and will post the new version with an updated date; for material changes we will give reasonable notice.

11. Contact

Privacy questions or requests: privacy@nylonia.co.