Privacy policy
Who is responsible
farang.dk is run by Johan Andersen, the data controller. Contact: [email protected].
What we keep, and why
- Your account: email address, display name, handle (@name) if you choose one, language and settings. If you log in with Google or Facebook we receive a user id, your name and your email from them. For a passkey we store only its public key. Purpose: giving you an account (contract, GDPR art. 6(1)(b)).
- What you write and do: threads, replies, events, suggested places, RSVPs, likes, helpful marks, threads you follow, reports. These are public, except reports and what you follow; your name appears on events you're going to unless you turn that off. Purpose: running the forum (art. 6(1)(b)).
- Email: login links; a message when someone replies in a thread you follow; a weekly newsletter about events and activity. The last two can be turned off with one click in every email and under My account. Basis: our legitimate interest in keeping members informed about their own conversations and the community (art. 6(1)(f)).
- Push notifications: only if you turn them on for a device; we store that device's push address. Basis: consent (art. 6(1)(a)), which you can withdraw at any time.
- Security: your IP address is used briefly, in memory only, to limit spam and abuse; it is not stored. Cloudflare Turnstile checks that forms are filled in by people (art. 6(1)(f)).
- Visitor statistics: Cloudflare Web Analytics counts page views without cookies and without recognising you.
Cookies
Only necessary cookies: one that keeps you logged in, and a short-lived one while logging in with Google or Facebook. No tracking or advertising cookies, hence no cookie banner.
Who we share with
- Cloudflare, Inc. (USA): delivers the site to you, Turnstile and statistics. Transfers to the USA are covered by the EU-US Data Privacy Framework.
- Brevo (Sendinblue SAS, France): sends our emails.
- Anthropic PBC (USA): its AI model Claude reads posts in massage places' threads to catch sexual content, and translates event descriptions into our other languages (art. 6(1)(f)).
- Google and Meta (Facebook): only if you choose to log in with them.
- Your browser's push service (Google, Mozilla, Apple, Microsoft): delivers push notifications if you turned them on.
We never sell data and show no ads.
How long
Your account, until you delete it. After deletion your posts remain without your name, unless you choose to have them removed too. Encrypted backups are kept for at most about 13 months.
Your rights
You may access, correct, erase, restrict, port and object to the use of your data. Under My account you can download everything we hold about you and delete your account yourself; otherwise write to [email protected]. You can complain to Datatilsynet (the Danish data protection authority), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
Deleting your data (also if you log in with Facebook)
Log in and go to My account → Delete account, or write to [email protected]. You can also remove farang.dk from the apps connected in your Facebook settings.