Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is Share-Nude, located in France.
Contact: [email protected]

2. Data Collected

We collect the following personal data:

  • Account data: email address, username, hashed password
  • Technical data: IP address (at registration and each upload), browser user agent
  • Upload consent logs: date/time, IP address, user agent, type of content, and confirmation that you certified ownership and consent of depicted persons
  • Usage data: upload count, daily upload count, trust level, last login date
  • Cookies: session cookie (functional), age verification cookie (functional), analytics cookies (Google Analytics, with your consent)

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b) GDPR): account data needed to provide the service
  • Legitimate interest (Art. 6(1)(f) GDPR): IP logging and consent logs for fraud prevention, legal protection, and compliance with DMCA/takedown obligations
  • Consent (Art. 6(1)(a) GDPR): analytics cookies and newsletter
  • Legal obligation (Art. 6(1)(c) GDPR): retention of connection data as required by French law (LCEN)

4. Data Retention

  • Account data: retained for the duration of the account, deleted within 30 days of account deletion request
  • IP addresses and consent logs: retained for 1 year from date of collection, as required by French law (Article 6 II of LCEN - Law No. 2004-575)
  • Cookies: maximum 13 months (in accordance with CNIL recommendations)

5. Your Rights (GDPR)

Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request deletion of your data ("right to be forgotten")
  • Right to restriction: restrict processing in certain cases
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: for analytics cookies and newsletter, at any time

To exercise any of these rights, contact us at: [email protected]

You also have the right to file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes): www.cnil.fr

6. Data Sharing

Your personal data is not sold to third parties. Data may be shared with:

  • Hosting provider: OVH SAS (Roubaix, France) - data stored in the EU
  • Analytics: Google Analytics (data may be transferred to the US under EU-US Data Privacy Framework)
  • Law enforcement: when required by law or valid court order

7. International Transfers

Data is primarily stored within the European Union (OVH, France). When data is transferred outside the EU (e.g., Google Analytics), it is protected by appropriate safeguards including the EU-US Data Privacy Framework or Standard Contractual Clauses.

8. Security

We implement technical and organizational measures to protect your data, including:

  • Password hashing (bcrypt/argon2)
  • HTTPS encryption for all connections
  • Access controls and authentication
  • Regular security reviews

9. Cookies

This site uses:

  • Strictly necessary cookies: session management, age verification (no consent required)
  • Analytics cookies: Google Analytics to measure site traffic (require your consent)

You can manage cookies in your browser settings at any time.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of the site after changes constitutes acceptance of the updated policy.

Bulle