Last updated: July 18, 2026
Blackhole is a social network published by Lethaware, an independent studio founded by Mayare Ouassou. Lethaware is the data controller for the processing described in this policy.
For any question about your data or to exercise your rights, contact us at mayare.ceo@gmail.com.
At signup: your name, a username, your email address, a password (never stored in plain text, managed by our host Supabase), and your gender (optional field, stored separately in a restricted table only you and admins can access).
While using the service: your city or zone if you choose to enter one (free text, never real GPS geolocation), your avatar (generated via the DiceBear service or an image you upload), the content you post (signals, comments, messages, media), and the technical information required for the site to work (functional cookies, described in section 8).
For payments: if you subscribe, send a tip, or buy/sell on the marketplace, payment is processed entirely by Stripe. We never receive or store your card number.
We do not run advertising and do not use any analytics or ad-tracking tools (no Google Analytics, no remarketing pixels).
To provide the service (create your account, display your profile and feed, enable messaging and payments).
To keep the platform safe and moderated: detect hateful content or abusive behavior, enforce our community rules, and ban an account or device when needed.
To prevent fraud and automated abuse (bot verification via Cloudflare Turnstile, rate limits on posts and messages).
Performance of the contract with you (providing the service you requested by creating an account).
Your consent, for optional data such as gender or a custom profile photo.
Our legitimate interest in keeping the platform secure and preventing abuse, hate and fraud.
We never sell your data. It is shared only with the technical providers needed to run the service:
• Supabase (database, authentication, media storage, realtime)
• Stripe (payment and subscription processing)
• Cloudflare (Turnstile bot verification)
• Netlify (site hosting)
• Google Play (if you install the Android app, for distribution and related sign-in services)
These providers may process data outside the European Union (notably in the United States); they are contractually bound to GDPR-recognized safeguards (Standard Contractual Clauses).
Your data is kept while your account is active. If you delete your account, your personal data is erased within a reasonable timeframe, except for data we must keep longer for legal or safety reasons (for example banned-device identifiers, billing records required by law, or an internal verification archive - username, email, last published content and related reports - accessible only to the moderation team and purged at most 12 months after deletion).
All data travels over an encrypted connection (HTTPS). Database access is protected by Row Level Security rules: a user can only read or modify data they are entitled to. Sensitive fields (admin status, ban status) can never be modified from the app itself. Our payment webhooks are signed and verified.
We only use functional cookies and local storage needed for the site to work: your preferred language, your color theme, your login session, your preferences (sound, chat backgrounds) and your onboarding progress. No advertising or third-party tracking cookies are used.
Blackhole is intended for adults. We do not knowingly collect data from anyone under 18. If you believe an account was created by a minor, contact us at the address above so we can act.
Under GDPR, you have the right to access, rectify, erase, port, restrict and object to the processing of your data. You can exercise these rights at any time by emailing mayare.ceo@gmail.com.
You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) if you believe your rights are not respected.
We may update this privacy policy to reflect changes to the service or to the law. The last-updated date is shown at the top of this page.
For any question: mayare.ceo@gmail.com.
// end of transmission