Privacy Policy
Last updated: June 17, 2026
1. Introduction
This Privacy Policy explains how WannaGoOnADate collects, uses, stores and protects personal data when you use the website wannagoonadate.com (the "Service"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection law.
2. Data Controller
The data controller is:
Louis BreyneRegistered as a self-employed individual in Belgium
Rue de l'Yser 31, 5020 Namur, Belgium
Belgian company number: BE1008222750
Email: contact@wannagoonadate.com
3. Personal Data We Collect
Depending on how you use the service, we may process the following categories of personal data.
Account data
- Name or display name
- Email address
- Authentication provider
- Google account identifier, if you sign in with Google
- Profile picture or avatar, if provided by the authentication provider
- Account creation date and settings
Invitation creator data
- Invitations created, including title, message, proposed date/time/location
- Uploaded images or visual assets
- Invitation URL/token
- RSVP settings
- Creation, update and deletion timestamps
Recipient data
We may process personal data about invitation recipients when such data is provided by the invitation creator or by the recipient themselves. This may include:
- Name, nickname or identifier used in the invitation
- RSVP answer
- Message or response submitted by the recipient
- Date and time of response
- Technical metadata related to the response
Creators must not provide personal data about another person unless they have a lawful and respectful reason to do so.
Uploaded content
- Images uploaded by users
- Texts, messages and invitation content
- Metadata necessary to store, display and moderate the content
Users must not upload images or personal data of another person unless they have the right and permission to do so.
Technical data
- IP address
- Browser and device information, user agent
- Approximate location derived from IP, if applicable
- Logs, timestamps and security events
- Error reports
Analytics data
If you consent to analytics cookies or similar technologies, we may process:
- Pages viewed and referring pages
- Interaction events
- Approximate location, device and browser information
- Aggregated usage statistics
Support and abuse reports
If you contact us or report an invitation, we may process:
- Your email address and message
- The reported invitation URL
- Information necessary to investigate the report
- Follow-up correspondence
4. Personal Data About Other People
WannaGoOnADate allows users to create invitations intended for other people. Creators are responsible for ensuring that the content they create is respectful, lawful and appropriate. Creators must not upload or publish personal data, images or sensitive information about another person unless they have a lawful basis and the necessary permission to do so.
Recipients may contact us at contact@wannagoonadate.com or use the report/removal mechanism available on the invitation page to request deletion or review of an invitation concerning them.
5. Sensitive Data
The service is not intended to process sensitive personal data.
Users must not create, upload or share content that reveals or concerns another person's sexual orientation or sex life, health, religious beliefs, political opinions, ethnicity or racial origin, biometric or genetic data, criminal convictions, or trade union membership.
Users must not upload intimate, sexual, humiliating, threatening, non-consensual or exploitative content. Any content involving minors in a romantic, sexual, exploitative or inappropriate context is strictly prohibited.
6. Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Allowing users to create and share invitations | Performance of a contract |
| Displaying invitations to recipients | Legitimate interest / performance of the service |
| Processing RSVP responses | Legitimate interest / recipient consent |
| Hosting user-uploaded content | Performance of a contract |
| Preventing abuse, spam and harassment | Legitimate interest |
| Responding to support or legal requests | Legitimate interest / legal obligation |
| Analytics cookies | Consent |
| Essential cookies and authentication | Performance of a contract / legitimate interest |
| Compliance with legal obligations | Legal obligation |
Where processing is based on legitimate interest, we balance our interest in operating and securing the service against the rights and freedoms of the persons concerned, especially recipients who may not have created an account.
7. Cookies and Analytics
We use essential cookies or similar technologies where necessary for authentication, security and basic operation of the service.
We only use analytics cookies or similar tracking technologies if you give your consent. No analytics cookies are set until you explicitly accept.
You can accept, reject or change your cookie preferences at any time using the Cookie settings link available in the website footer.
If you withdraw consent, we will stop placing non-essential analytics cookies and, where technically possible, remove existing analytics cookies from your browser.
| Name | Type | Purpose | Requires consent |
|---|---|---|---|
| _ga, _ga_* | Cookie (persistent) | Google Analytics | Yes |
| next-auth.session-token | Cookie (session) | Authentication | No (essential) |
| cookie_consent | localStorage | Stores your consent choice | No (functional) |
8. Google Sign-In
If you sign in with Google, we may receive basic profile information from your Google account, such as your name, email address, profile picture and Google account identifier.
We use this information only to authenticate you, create your account, display your profile where necessary and secure access to the service.
We do not sell Google user data. We do not use Google user data for advertising. We do not share Google user data except with service providers necessary to operate the service or where required by law.
9. Service Providers
We may rely on third-party service providers to operate the service, including:
| Provider | Purpose | Location / safeguards |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, security, DNS, D1 database, R2 storage | EU/US, DPA and transfer safeguards |
| Google LLC | Authentication (OAuth), analytics (if consented) | EU/US, DPA and transfer safeguards |
| Stripe, Inc. | Payments and fraud prevention (if payments are introduced) | EU/US, DPA and transfer safeguards |
We only share personal data with service providers where necessary to operate, secure and improve the service.
10. International Transfers
Some of our service providers may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as:
- an adequacy decision adopted by the European Commission;
- the EU-US Data Privacy Framework where applicable;
- Standard Contractual Clauses approved by the European Commission;
- additional contractual, technical and organisational safeguards where required.
11. Data Retention
We keep personal data only for as long as necessary for the purposes described in this policy.
| Data category | Retention period |
|---|---|
| Account data | Until account deletion, then deleted or anonymised within 30 days |
| Invitations | Until deleted by the creator, removed following a report, or automatically expired |
| Uploaded images | Deleted when the related invitation is deleted, or earlier if reported |
| RSVP responses | Deleted with the related invitation |
| Technical logs | Up to 90 days unless needed for security or legal reasons |
| Analytics data | According to analytics provider settings |
12. Security
We implement reasonable technical and organisational measures to protect personal data, including:
- HTTPS encryption
- Secure authentication
- Access controls and limited access to production data
- Logging and monitoring for abuse
- Protection against spam and automated misuse
- Deletion or anonymisation of data no longer needed
No online service can guarantee absolute security. Users should avoid uploading sensitive, intimate or confidential content.
13. Your Rights
Under the GDPR, depending on the circumstances, you may have the right to:
- access your personal data
- correct inaccurate data
- request deletion
- restrict processing
- object to processing based on legitimate interest
- withdraw consent for analytics cookies
- request data portability
- lodge a complaint with the Belgian Data Protection Authority
To exercise your rights, contact contact@wannagoonadate.com.
If you are the recipient of an invitation and do not have an account, you can still request removal or exercise your rights by providing the invitation link and enough information for us to identify the relevant content.
14. Children and Minors
The service is intended for users aged 18 and over. We do not knowingly collect personal data from minors. Any content involving minors in a romantic, sexual, exploitative or inappropriate context is strictly prohibited.
15. Contact
For any question or request related to this Privacy Policy or to your personal data, contact: contact@wannagoonadate.com
16. Complaints to the Belgian Data Protection Authority
You have the right to lodge a complaint with the Belgian Data Protection Authority:
Autorité de protection des données / GegevensbeschermingsautoriteitRue de la Presse 35, 1000 Brussels, Belgium
www.autoriteprotectiondonnees.be
17. Changes to This Policy
We may update this Privacy Policy from time to time. For minor changes, the updated policy will apply once published on the website. For material changes affecting your rights, we will make reasonable efforts to notify registered users in advance.