Your privacy matters. This page explains how CDRas collects, stores and protects your personal information.
Privacy Policy
Last updated: July 2026
1. Information We Collect
When you create an account we collect your username, email address, profile picture, connected social accounts, and any content you choose to publish on your profile (bio, links, uploaded images, audio, custom cursor, and similar customization). We process this to provide the service you sign up for (GDPR Art. 6(1)(b), contract performance).
2. Authentication
CDRas supports sign-in through third-party providers (Google, Discord, GitHub) and, optionally, device passkeys (WebAuthn) that never leave your device. We only receive the profile information these providers share with your consent — we never see or store your password with any provider.
3. Cookies
We use one strictly necessary cookie to keep you signed in — this cannot be disabled, as the service cannot function without it, and no consent banner is required for it under EU law (it's essential to the service you requested). Analytics cookies (see below) are optional and only set after you actively accept them via the cookie banner.
4. Analytics
We use Google Analytics to understand site traffic, but only after you explicitly accept analytics cookies in the banner shown on your first visit — declining keeps Google Analytics fully disabled for your browser. Profile-view analytics you see in your own dashboard (device type, browser, referrer, and country) are derived from an offline, locally-hosted IP lookup — your IP address itself is never stored, sent to Google, or shared with any third party, and is only ever hashed, transiently, to apply a view-spam rate limit.
5. Payments
Premium payments are processed by Stripe. We never see or store your card details — Stripe handles them under its own privacy policy and PCI-DSS compliance. We store only the resulting subscription status and billing type.
6. Data Storage & Retention
Your information is stored on servers within the EU and access is limited to systems required to operate the platform. Uploaded files (images, audio, custom cursors/fonts) are kept only as long as your account exists or until you delete them yourself. Deleting your account (available any time from Settings) permanently and immediately removes your profile, links, uploads, and associated data.
7. Your Rights (GDPR)
Under the GDPR you have the right to access, correct, export, or erase your personal data, to object to or restrict certain processing, and to withdraw analytics consent at any time (the cookie banner choice can be changed by clearing your browser's local storage for this site). Most of these are self-service from your dashboard Settings page; for anything else, contact us below. You also have the right to lodge a complaint with your national data protection authority.
8. Contact
Email:
valentini06@icloud.com