Privacy Policy

Effective date: October 2, 2026

Princess Arena is operated by Stelya SAS, 10 Square Jean Thébaud, 75015 Paris, France ("Princess Arena", "we", "us"). We are the controller of personal data processed through the Princess Arena app, shared challenge pages, and related services (the "Service"). Contact: support@princessarena.com.

1. Who can use the Service

The Service is available only to adults aged 18 or older. We do not knowingly collect data from minors. If we learn that a minor has used the Service, we will take appropriate steps to remove their account and content. Please contact us if you believe a minor has submitted information.

2. Information we collect

  • Accounts and profiles: information you provide, such as your name or display name, age confirmation, photos, profile text, and the email address or authentication identifier supplied through Sign in with Apple or Google. Apple may provide a private relay address instead of your personal email.
  • Challenge pages and submissions: the challenges a profile owner creates, her public profile and shareable link; a visitor's responses, multiple-choice selections, text, voice recordings, drawings, photos, videos or other attachments; submission time; and the unique code given to the visitor. A submission may be stored and shown to the profile owner before the visitor creates an app account. "Anonymous" in the app means the visitor has not linked an app profile; it does not mean we cannot associate a submission with a code or technical information.
  • Interactions: decisions to add a suitor to Crushes or remove a submission, matches, messages and attachments in chats, reports, blocks, and related moderation records.
  • Technical and security data: IP address, device and browser details, operating system, app version, basic access logs, timestamps, and information needed to operate the Service, prevent abuse, and troubleshoot problems.
  • Support communications: messages and materials you send to us and our replies.

We do not ask users to identify their gender or sexual orientation. Please do not include highly sensitive information about yourself or another person in profiles, challenges, submissions or chats. Free-form content can nevertheless reveal private matters. We do not use it to infer sensitive traits.

3. How we use information and legal bases

PurposeInformation involvedLegal basis for users in the EEA/UK
Create accounts, authenticate users, publish profiles and challenge pages, receive submissions, link codes to accounts, display applications, enable Crushes and chatsAccount, profile, submissions, codes, messagesPerformance of our contract with you; for visitors submitting without an account, steps you request to use the Service
Keep the Service safe, detect spam and fraud, review reports, enforce our rules, maintain securityContent, reports, account and technical dataOur legitimate interests in safety and security, subject to your rights; legal obligations where applicable
Answer support and privacy requestsContact and relevant account or content informationContract, legitimate interests, or legal obligation, as applicable
Maintain and improve reliability and measure useTechnical and usage informationLegitimate interests where permitted; consent where required for optional analytics or non-essential cookies

We do not use submissions or chats for advertising or to build sensitive profiles. If content reveals special-category information, we will apply any additional legal condition and safeguards required before processing it.

4. Who can see information

Anyone with a profile owner's link may see the profile and challenges made available on that page. The profile owner can see submissions made through her link, including those submitted before the visitor registers. If a visitor later uses the code to create or link an account, the profile owner may see the associated profile. Once a profile owner adds a suitor to Crushes, the two people can exchange messages and see the content shared in that chat. Removing a submission or declining to add someone does not guarantee that the recipient has not already viewed, copied or saved content.

We share information with service providers who help run the Service, including Supabase for database, authentication and file storage, and Apple and Google for sign-in where selected. We may disclose limited data to professional advisers, competent authorities when legally required, and a successor in a business transaction subject to applicable safeguards. We do not sell personal data, show advertising, or use submissions and private chats for advertising. Service providers are subject to appropriate data protection obligations.

5. Storage, international transfers and security

Our intended primary Supabase project region is West EU (London), AWS eu-west-2. Data may also be accessed or processed in other countries by authorized personnel and providers. For transfers outside the EEA/UK where required, we rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about relevant safeguards. We use access controls and other reasonable security measures, but no online system is completely secure. Treat shared links and submission codes as private; someone who obtains them may be able to access the corresponding page or submission.

6. Retention and deletion

We keep account and profile information while your account is active. We notify you and delete an account after 24 months of inactivity, unless you reactivate it. We delete an unclaimed website submission, its attachments and code 90 days after submission. We keep a claimed submission and its attachments while its account is active, unless it is deleted earlier. We retain chats while the participants need the conversation; when an account is deleted, we remove that person's account identifiers and user-generated content, subject to narrow legal or safety exceptions. Routine security logs are kept for up to 90 days, report and enforcement records for up to 12 months after case closure, and backups for up to 30 days after deletion from active systems. We may retain only necessary information longer if law requires it or an active dispute calls for it, with restricted access.

You can delete your account within the app in Settings → Delete Account and contact support@princessarena.com for help. Visitors without an account can ask us to delete a submission by providing its code and information reasonably needed to verify control. You can withdraw optional consent using the relevant control or by contacting us; withdrawal does not affect earlier processing.

7. Your rights

Depending on your location, you may request access to, correction, deletion or portability of your personal data, object to certain processing, restrict processing, or withdraw consent. Email support@princessarena.com. We may need to verify your identity or control of a submission before fulfilling a request. You may also complain to the CNIL in France or another competent data protection authority. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

8. Cookies and permissions

The website uses essential cookies or local storage to run challenge pages and protect submissions. If we introduce optional analytics or other non-essential tracking, we will explain it and request consent where required before use. Camera, photos and microphone access is requested only when you choose a feature that needs it, subject to your device settings. Refusing optional permissions may limit only the relevant feature.

9. Changes

We may update this Policy and will post the revised version with its effective date. If changes materially affect your rights or how we use data, we will provide additional notice when required.

10. Contact

Stelya SAS
10 Square Jean Thébaud
75015 Paris, France
support@princessarena.com