Privacy policy
Last updated: 17 June 2026
At VirtuReveal, we collect the bare minimum of data needed to run the service, and we never resell it. This page simply explains what data is processed, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and French data-protection law.
1. Data controller
The data controller is the site publisher (see Legal notice):
Shannah Teikitekahioho, entrepreneur individuel (VirtuReveal), Pianoli, 20134 Sampolo.
Contact: contact@virtureveal.com.
2. What data do we collect?
a) Creating a reveal
- the recipient’s name;
- the relationship / nickname (e.g. “Grandma”), optional;
- a personalized message, optional;
- your preferences: theme, occasion (girl/boy), language, music.
This information is entered freely by you. Please only provide data you have the right to use.
b) Payment
Payment is handled by Stripe. Payment data (card number…) is sent directly to Stripe and is never collected or stored by us.
c) Contact
If you write to us, we process your email address and the content of your message to reply to you.
d) Technical data
Our host may process technical data (IP address, connection logs) for security and proper operation. We use no advertising tracking or behavioral analytics tools (see Cookies).
3. Why (purposes and legal basis)?
- Generate and provide your reveal — legal basis: performance of the contract;
- Process payment — performance of the contract / legal obligation (accounting);
- Answer your requests — legitimate interest;
- Site security — legitimate interest.
4. How long do we keep your data?
- Reveals: automatically deleted 30 days after creation.
- Billing data: kept for the period required by law (up to 10 years for accounting obligations).
- Contact messages: kept for as long as needed to handle your request.
5. Who is it shared with?
We neither sell nor rent your data. It may be processed by our technical providers (processors under the GDPR), solely to run the service:
- Netlify, Inc. — hosting and technical storage of reveals;
- Stripe — secure payment processing.
6. Transfers outside the European Union
Some providers (e.g. Netlify, Stripe) may process data outside the EU, notably in the United States. These transfers are governed by appropriate safeguards (European Commission standard contractual clauses and/or recognized certification mechanisms).
7. Your rights
Under the GDPR, you have the following rights: access, rectification, erasure, restriction, objection and portability of your data. You can exercise them at any time by writing to contact@virtureveal.com.
You may also lodge a complaint with the CNIL: www.cnil.fr.
8. Security
We implement reasonable technical and organizational measures to protect your data (encrypted HTTPS connection, payment delegated to Stripe, automatic deletion of reveals).
9. Contact
For any question about your data: contact@virtureveal.com.