wannagoonadatewannagoonadate
← Back to wannagoonadate

Privacy Policy

Last updated: June 17, 2026

1. Introduction

This Privacy Policy explains how WannaGoOnADate collects, uses, stores and protects personal data when you use the website wannagoonadate.com (the "Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection law.

2. Data Controller

The data controller is:

Louis Breyne
Registered as a self-employed individual in Belgium
Rue de l'Yser 31, 5020 Namur, Belgium
Belgian company number: BE1008222750
Email: contact@wannagoonadate.com

3. Personal Data We Collect

Depending on how you use the service, we may process the following categories of personal data.

Account data

  • Name or display name
  • Email address
  • Authentication provider
  • Google account identifier, if you sign in with Google
  • Profile picture or avatar, if provided by the authentication provider
  • Account creation date and settings

Invitation creator data

  • Invitations created, including title, message, proposed date/time/location
  • Uploaded images or visual assets
  • Invitation URL/token
  • RSVP settings
  • Creation, update and deletion timestamps

Recipient data

We may process personal data about invitation recipients when such data is provided by the invitation creator or by the recipient themselves. This may include:

  • Name, nickname or identifier used in the invitation
  • RSVP answer
  • Message or response submitted by the recipient
  • Date and time of response
  • Technical metadata related to the response

Creators must not provide personal data about another person unless they have a lawful and respectful reason to do so.

Uploaded content

  • Images uploaded by users
  • Texts, messages and invitation content
  • Metadata necessary to store, display and moderate the content

Users must not upload images or personal data of another person unless they have the right and permission to do so.

Technical data

  • IP address
  • Browser and device information, user agent
  • Approximate location derived from IP, if applicable
  • Logs, timestamps and security events
  • Error reports

Analytics data

If you consent to analytics cookies or similar technologies, we may process:

  • Pages viewed and referring pages
  • Interaction events
  • Approximate location, device and browser information
  • Aggregated usage statistics

Support and abuse reports

If you contact us or report an invitation, we may process:

  • Your email address and message
  • The reported invitation URL
  • Information necessary to investigate the report
  • Follow-up correspondence

4. Personal Data About Other People

WannaGoOnADate allows users to create invitations intended for other people. Creators are responsible for ensuring that the content they create is respectful, lawful and appropriate. Creators must not upload or publish personal data, images or sensitive information about another person unless they have a lawful basis and the necessary permission to do so.

Recipients may contact us at contact@wannagoonadate.com or use the report/removal mechanism available on the invitation page to request deletion or review of an invitation concerning them.

5. Sensitive Data

The service is not intended to process sensitive personal data.

Users must not create, upload or share content that reveals or concerns another person's sexual orientation or sex life, health, religious beliefs, political opinions, ethnicity or racial origin, biometric or genetic data, criminal convictions, or trade union membership.

Users must not upload intimate, sexual, humiliating, threatening, non-consensual or exploitative content. Any content involving minors in a romantic, sexual, exploitative or inappropriate context is strictly prohibited.

6. Legal Bases for Processing

PurposeLegal Basis
Creating and managing your accountPerformance of a contract
Allowing users to create and share invitationsPerformance of a contract
Displaying invitations to recipientsLegitimate interest / performance of the service
Processing RSVP responsesLegitimate interest / recipient consent
Hosting user-uploaded contentPerformance of a contract
Preventing abuse, spam and harassmentLegitimate interest
Responding to support or legal requestsLegitimate interest / legal obligation
Analytics cookiesConsent
Essential cookies and authenticationPerformance of a contract / legitimate interest
Compliance with legal obligationsLegal obligation

Where processing is based on legitimate interest, we balance our interest in operating and securing the service against the rights and freedoms of the persons concerned, especially recipients who may not have created an account.

7. Cookies and Analytics

We use essential cookies or similar technologies where necessary for authentication, security and basic operation of the service.

We only use analytics cookies or similar tracking technologies if you give your consent. No analytics cookies are set until you explicitly accept.

You can accept, reject or change your cookie preferences at any time using the Cookie settings link available in the website footer.

If you withdraw consent, we will stop placing non-essential analytics cookies and, where technically possible, remove existing analytics cookies from your browser.

NameTypePurposeRequires consent
_ga, _ga_*Cookie (persistent)Google AnalyticsYes
next-auth.session-tokenCookie (session)AuthenticationNo (essential)
cookie_consentlocalStorageStores your consent choiceNo (functional)

8. Google Sign-In

If you sign in with Google, we may receive basic profile information from your Google account, such as your name, email address, profile picture and Google account identifier.

We use this information only to authenticate you, create your account, display your profile where necessary and secure access to the service.

We do not sell Google user data. We do not use Google user data for advertising. We do not share Google user data except with service providers necessary to operate the service or where required by law.

9. Service Providers

We may rely on third-party service providers to operate the service, including:

ProviderPurposeLocation / safeguards
Cloudflare, Inc.Hosting, CDN, security, DNS, D1 database, R2 storageEU/US, DPA and transfer safeguards
Google LLCAuthentication (OAuth), analytics (if consented)EU/US, DPA and transfer safeguards
Stripe, Inc.Payments and fraud prevention (if payments are introduced)EU/US, DPA and transfer safeguards

We only share personal data with service providers where necessary to operate, secure and improve the service.

10. International Transfers

Some of our service providers may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as:

  • an adequacy decision adopted by the European Commission;
  • the EU-US Data Privacy Framework where applicable;
  • Standard Contractual Clauses approved by the European Commission;
  • additional contractual, technical and organisational safeguards where required.

11. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy.

Data categoryRetention period
Account dataUntil account deletion, then deleted or anonymised within 30 days
InvitationsUntil deleted by the creator, removed following a report, or automatically expired
Uploaded imagesDeleted when the related invitation is deleted, or earlier if reported
RSVP responsesDeleted with the related invitation
Technical logsUp to 90 days unless needed for security or legal reasons
Analytics dataAccording to analytics provider settings

12. Security

We implement reasonable technical and organisational measures to protect personal data, including:

  • HTTPS encryption
  • Secure authentication
  • Access controls and limited access to production data
  • Logging and monitoring for abuse
  • Protection against spam and automated misuse
  • Deletion or anonymisation of data no longer needed

No online service can guarantee absolute security. Users should avoid uploading sensitive, intimate or confidential content.

13. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

  • access your personal data
  • correct inaccurate data
  • request deletion
  • restrict processing
  • object to processing based on legitimate interest
  • withdraw consent for analytics cookies
  • request data portability
  • lodge a complaint with the Belgian Data Protection Authority

To exercise your rights, contact contact@wannagoonadate.com.

If you are the recipient of an invitation and do not have an account, you can still request removal or exercise your rights by providing the invitation link and enough information for us to identify the relevant content.

14. Children and Minors

The service is intended for users aged 18 and over. We do not knowingly collect personal data from minors. Any content involving minors in a romantic, sexual, exploitative or inappropriate context is strictly prohibited.

15. Contact

For any question or request related to this Privacy Policy or to your personal data, contact: contact@wannagoonadate.com

16. Complaints to the Belgian Data Protection Authority

You have the right to lodge a complaint with the Belgian Data Protection Authority:

Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35, 1000 Brussels, Belgium
www.autoriteprotectiondonnees.be

17. Changes to This Policy

We may update this Privacy Policy from time to time. For minor changes, the updated policy will apply once published on the website. For material changes affecting your rights, we will make reasonable efforts to notify registered users in advance.