ShareControl

Privacy Policy

Last updated: August 19, 2026

This explains what personal data Share Control collects, why, and what rights you have over it. We're based in the Netherlands, so this is written to meet the requirements of the GDPR.

1. Who's responsible for your data

Frank van den Berg is the data controller for Share Control. Contact for anything privacy-related: use our contact form and pick "Privacy / data request" as the topic.

2. What we collect

Account information

  • Username, email address, and password (stored as a salted hash, never in plain text)
  • Email verification status

Content you create

  • Share links: the Lovense control link, your optional message and tags, and your visibility/settings choices
  • Messages you send to friends
  • Friend requests and the friendships that result from them
  • Blocks and reports you make, including the reason you give for a report

Activity and security logs

  • A record of link activity (created, grabbed, confirmed, reactivated, etc.), including the IP address and browser/device information ("user agent") of whoever performed the action
  • A record of who has taken control of whose link, and when

This log exists specifically for safety: it's what lets us investigate abuse reports, including checking whether someone actually waited before confirming control of a link (see the Terms of Service) rather than just claiming they did.

Technical data

  • A session cookie, so you stay logged in between requests

We don't use analytics, advertising, or tracking cookies.

3. Why we process it, and on what legal basis

  • To provide the service (your account, links, messages, friends) - necessary to perform our contract with you (GDPR Art. 6(1)(b))
  • For safety and abuse prevention (activity logs, reports, blocks) - our legitimate interest in keeping the platform safe (Art. 6(1)(f)), balanced against your privacy
  • To respond to legal requests, where we're required to by law (Art. 6(1)(c))

4. Who we share it with

We don't sell your data. It's shared only where necessary to run the service:

  • Lovense - the control link itself is Lovense's product. We don't send your account data to Lovense; visiting a control link is between you and Lovense's platform, governed by their own privacy policy.
  • Amazon SES - our email provider, used to send verification and password-reset emails. Amazon may process this data outside the EEA; where that happens, it's protected by appropriate safeguards (e.g. standard contractual clauses).
  • Google reCAPTCHA - if enabled on this deployment, used on registration to reduce bot signups. Google processes some technical/device data under its own privacy policy in that case.

5. How long we keep it

We keep your account and content for as long as your account is active. Activity/security logs are kept only as long as reasonably needed for the safety purposes described above, after which they're deleted or anonymized. If you delete your account, we remove your personal data except where we need to retain something briefly for legal or safety reasons (for example, an open report involving your account).

6. Your rights

Under the GDPR, you can:

  • Ask what personal data we hold about you, and get a copy of it
  • Ask us to correct inaccurate data
  • Ask us to delete your data ("right to be forgotten")
  • Ask us to restrict or object to certain processing
  • Ask for your data in a portable format

To exercise any of these, use our contact form. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at any time.

7. Children

Share Control is for people 18 and older. We don't knowingly collect data from anyone younger.

8. Changes

We may update this policy from time to time. Continued use of the service after a change means you accept the update.

9. Contact

Questions about this policy: use our contact form.