LogoBack to site
Legal · GDPR

Privacy Policy

At Maybe Ange™ Corporation, we highly value your privacy and the protection of your personal data. This policy explains how we collect, use, and safeguard your data when you visit our website or use our services.

EntityMaybe Ange™ Corporation
Sitemaybe-ange.com
RegulationGDPR compliant
Last updateMarch 2025
Table of contents
01 Information We Collect02 Legal Basis for Processing03 Methods of Collection04 Cookies05 Use of Data06 Data Sharing & Third Parties07 International Data Transfers08 Security Measures09 Hosting10 Your Rights11 Data Retention12 Use by Minors13 Changes to This Policy14 Contact & DPO
01

Information We Collect

During Your Browsing

When you browse our site, we automatically collect certain technical data related to your device:

  • IP address
  • Browser type and version
  • Operating system
  • Time zone and language
  • Pages visited and time spent
  • Referral source (referring URL)
This data is used solely for statistical and security purposes. It does not allow us to directly identify you.
When Subscribing to a Service

Some of our services may be paid (one-time payment or subscription). When you subscribe, we collect:

  • First and last name
  • Email address
  • Billing information
  • Payment details (processed securely by a third-party provider — Stripe or equivalent)
No banking data is stored by Maybe Ange™ Corporation.
Via the Contact Form

When you use our contact form, we collect:

  • First and last name
  • Email address
  • The content of your message
  • Technical metadata (IP address, submission timestamp)
This data is used solely to process your request and is never shared with third parties.
02

Legal Basis for Processing

In accordance with the GDPR (Art. 6), each data processing operation is based on one of the following legal grounds:

Contractual performance
Processing necessary for the execution of a service you have requested.
Legitimate interest
Technical security, fraud prevention, service improvement.
Legal obligation
Retention of billing data as required by applicable law.
Consent
For optional cookies or communications, where your explicit consent has been obtained.
03

Methods of Collection

We use the following tools:

  • Cookies — to ensure site functionality and improve user experience
  • Server log files — to track technical site usage and detect incidents
  • Contact form — direct data submission by the user
  • Payment provider API — secure transmission of billing data
No advertising, marketing, or cross-site tracking technologies are used on our platforms.
04

Cookies

We use only strictly necessary cookies. No third-party or advertising cookies are set.

Name
Purpose
Duration
{Anonyme}
Anonyme Variable - No Details
No Details
_locale
User language preference
30 days
You can disable cookies at any time via your browser settings, though this may affect site functionality.
05

Use of Data

We use your personal data solely to:

  • Provide the requested services
  • Manage technical and security aspects of the site
  • Process payments securely
  • Respond to your contact requests
  • Analyze and improve our services (anonymized statistics only)
  • Fulfill legal and regulatory obligations
We never sell, rent, or share your data with third parties for commercial purposes.
06

Data Sharing & Third Parties

Your data may be shared with the following strictly necessary third parties:

  • PlanetHoster — web hosting provider (servers located in Canada/France)
  • Payment processor (Stripe or equivalent) — for secure transaction handling only
  • Discord — OAuth2 authentication for admin access only
Each of these providers is contractually bound to process your data only for the purpose of providing the service, and in compliance with the GDPR.
07

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that transfers are governed by appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions recognizing an equivalent level of protection
  • Binding Corporate Rules (BCR) where applicable
PlanetHoster is headquartered in Canada, a country recognized as offering adequate data protection by the European Commission.
08

Security Measures

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration:

HTTPS / TLS encryption on all communications
HttpOnly and Secure flags on authentication cookies
Rate limiting and bot detection on all public forms
Input validation and XSS/injection protection
Access restricted by Discord OAuth2 with whitelist
No sensitive data stored in plaintext
09

Hosting

Our site is hosted by:

PlanetHoster
📍 4416 Louis-B.-Mayer, Laval, Québec, Canada H7P 0G1
🌐 https://www.planethoster.com/en
10

Your Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of the data we hold about you
  • Right to rectification — correct inaccurate or incomplete data
  • Right to erasure ("right to be forgotten") — request deletion of your data
  • Right to restrict processing — temporarily limit how your data is used
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — oppose processing based on legitimate interest
  • Right to withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by the GDPR.
If you believe your rights have not been respected, you may lodge a complaint with your national supervisory authority (e.g. CNIL in France: www.cnil.fr).
11

Data Retention

Your data is retained only for as long as necessary for the purpose for which it was collected:

  • Browsing logs — maximum 12 months
  • Contact form messages — 3 years from last contact
  • Billing and payment data — 10 years (legal accounting obligation)
  • Authentication session data — 24 hours maximum
After these periods, data is either permanently deleted or fully anonymized.
12

Use by Minors

Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately so we can delete it.

13

Changes to This Policy

This policy may be updated at any time to reflect legal, technical, or operational changes. In the event of significant changes, we will notify users via a visible notice on the site. The date of the last update will always be indicated at the top of this page.

Continued use of the site after a policy update constitutes acceptance of the revised terms.
14

Contact & DPO

For any questions, requests, or complaints regarding the protection of your personal data, you can contact us at: [email protected]

© 2026 Maybe Ange™ Corporation — All rights reserved.

← Back to maybe-ange.com