Who is responsible
Broken Bounds is run by Bálint Klinger, Budapest, Hungary ("we"). Contact for anything about your data: balint@brokenbounds.com.
What we store and why
- Your account: email address and password (to sign you in; the password is stored only as a one-way hash, and your email is never shown to other members), display name and avatar (what others see), birth month and year (to keep under-18s in a separate experience), time zone, language, and why you joined.
- Your progress: which lessons you finished, check-in answers and scores, private notes, points and level. Notes are visible only to you.
- Community: posts, replies, support you give, and reports you file. Posts show your display name and level only.
- Coaching: session time, the optional note you write, the amount paid and payment status. Card details go directly to Stripe; we never see them.
- Email: whether you agreed to reminders and updates, a log of which emails we sent you, and whether each one was delivered and its links clicked, so we can see which emails help. If you mark one as spam or your address stops working, we stop emailing you.
- Newsletter and contact form: your email address, your name if you give it, the language you used, when and how you agreed to emails, and the message you send us.
- Website visits: we count how often each public page is viewed and which site a visit came from (for example a search engine). The count uses no cookies and stores nothing that could identify you.
- Technical data: standard server logs for security (for example IP address), kept for a short time.
Because the course is about pornography, the fact that you use it, and what you write here, can reveal information about your sex life or health. That is special category data under the GDPR (Article 9). We only process it with your explicit consent, given when you set up your account, and only to run the course, the community and coaching for you.
Legal bases
- Running your account, the course and coaching: our agreement with you, and your explicit consent for sensitive data.
- Reminder and update emails, and the newsletter: your consent, which you can withdraw with one click in any email or in your profile.
- Answering a contact form message, and counting page visits without identifying anyone: our legitimate interest.
- Safety moderation and preventing abuse: our legitimate interest in a safe community.
- Payment records: our legal obligation to keep accounting records.
Who helps us run Broken Bounds
These providers process data on our behalf, under data processing agreements:
- Supabase: database and sign-in. Data is stored in the EU (Frankfurt, Germany).
- Cloudflare: website hosting, delivery and course video storage.
- Stripe: card payments for coaching.
- Google: calendar and Google Meet for coaching sessions.
- Resend: sending our emails.
Some of these providers are based in the United States. Transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We use no advertising trackers and share nothing with ad networks.
How long we keep it
- Account, progress, notes and community posts: until you delete your account (or a post).
- Payment records: 8 years, as Hungarian accounting law requires, without your notes.
- Email preferences and unsubscribes: as long as needed to respect your choice.
Your rights
You can access, correct, download or delete your data, restrict or object to processing, and withdraw consent at any time. Most of this you can do yourself in your profile: download everything as a file, change your email preferences, or delete your account. For anything else, email us; we answer within 30 days.
You can also complain to the Hungarian data protection authority, Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu, or to the authority in your own country.
Age
Accounts are for people aged 16 and over. Members under 18 use the course but not the community or coaching.
Cookies
We use no advertising or tracking cookies, and the visit count works without cookies. Your browser stores your sign-in session so you stay signed in; that is strictly necessary and needs no consent.
Changes
If we change how we use your data, we update this page and tell members by email before the change applies.