BattleBraids

Privacy notice

Last updated August 2026

Draft, not yet reviewed by a lawyer

This document is a working draft written to make the product usable in a closed beta. It has not been reviewed by a qualified lawyer and it is not legal advice. It must be reviewed before the service opens to the public, in particular for UK GDPR and EU GDPR, the age policy, user-generated content and international availability.

This notice explains what BattleBraids Sisterhood collects, why, and what you can do about it. It is written to meet UK GDPR and EU GDPR, and it needs a lawyer’s review before public launch, including confirmation of the data controller entity and its representative in the EU or UK.

What we collect

  • Your email address. Used to sign you in and to tell you when something involving you happens. It is never shown to other members and never sold or shared for marketing.
  • Your profile. Display name, optional photo, optional home city and country, languages, optional short bio.
  • Your listings. The race, your role, when you are free, the general area you gave, your hair length, optionally how you describe your hair, the styles you want or can do, and any private practical note.
  • Your messages with people you have connected with.
  • Reports and blocks you make, kept for safety.
  • Basic technical data needed to run the service securely, such as rate limiting counters.

We do not collect your date of birth, your exact address, your location, or any payment details, because the service is free and does not need them.

Hair texture and why it is optional

You may describe your hair texture. It is optional, it is your own description of yourself, and it exists so that a braider arrives with the right comb and enough time. It is never used to rank, sort or filter people, and the matching code contains no branch that reads it. If you would rather not say, choose “rather not say” and nothing changes about your matches.

Why we are allowed to hold it

  • Performing our agreement with you for your profile, listings, matches and messages: without them the service cannot work.
  • Our legitimate interests in keeping members safe, for reports, blocks, moderation records and abuse prevention.
  • Your consent for anything optional, such as a photo, which you can withdraw by deleting it.

Who can see what

Signed-in members can see your display name, photo, bio, languages, general area, availability and listing details for a race you have both joined. They cannot see your email address, your private notes, or your reference photos unless you have both agreed to connect. Nothing personal is visible to people who are not signed in.

Who else processes it

  • Supabase, for the database, authentication and file storage.
  • Netlify, for hosting and server functions.
  • Our transactional email provider, for sign-in links and notifications.

Each of these is a processor acting on our instructions. The data processing agreements and the record of transfers outside the UK and EEA must be completed before launch.

How long we keep it

  • Your profile and listings: until you delete your account.
  • Messages: until either person deletes their account.
  • Reports and moderation records: two years, so that patterns can be seen.
  • Rate limiting counters: thirty days.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how it is used, and complain to a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office. Export and deletion are both available in your profile and are handled within thirty days.

Age

You must be 18 or over to use BattleBraids Sisterhood. We do not knowingly hold data about anyone younger. If you believe a member is under 18, report the account and we will act.