Privacy policy

1. In short

• Event guests need no account: only first name, age, gender and a photo – and only for this event.
• Nobody sees whom you show interest in. Only when you both show interest in each other do you both see the match.
• Your event profile is deleted automatically 2 days after the event ends. You can delete it yourself at any time before that.
• We do not store IP addresses, set no advertising or tracking cookies and never sell data.

2. Controller

Chedjou Daniel, Nußweg 18, 9020 Klagenfurt am Wörthersee, Austria

E-mail: cross.contact.at@gmail.com

You can reach us at this address for all privacy questions.

3. Joining an event in the web app (no account)

When you scan an event's QR code and join, we process:

• first name, age (18+) and gender (woman, man, diverse),
• your photo: cropped on your device, stored again on the server, with all metadata (e.g. location and camera) removed,
• whom you showed interest in, matches, blocks and reports,
• a random session identifier in a cookie so you stay signed in (we store only a hash of it).

Who sees what: other guests of the same event see first name, age and photo and can filter by gender. Nobody sees one-sided interest – not the person you showed interest in, not the organizer, not other guests. A match is visible only to the two people. Blocked people no longer see each other. Organizers only see totals (e.g. number of guests), only from 10 guests, and small values are hidden.

Legal basis: providing CROSS at your request (Art. 6(1)(b) GDPR). Gender and the interest you show may allow conclusions about your sexual orientation. For this we ask for your explicit consent when you join (Art. 9(2)(a) GDPR). You can withdraw it at any time by deleting your profile.

Retention: 2 days after the event ends, profile, photo, interest shown, matches and blocks are deleted automatically. "Delete profile" does this immediately; the photo is physically deleted and the deletion verified.

4. CROSS account and app

An account is voluntary. In the web app it is offered only after a match ("Chat in the CROSS app"); the app needs it to sign in. We process:

• e-mail address and first name,
• sign-in codes: valid for 10 minutes and stored encrypted. There are no passwords,
• optionally birth date and gender so you can join events in the app without entering them again. Others only see your age,
• optionally a profile picture (without metadata, like event photos), used as your event photo when you join an event,
• chat messages and reactions with your matches,
• the link between your account and your event profiles so your matches are kept.

Sign in with Google (app only, voluntary): Google learns that you sign in to CROSS. We store only your Google account identifier plus e-mail and first name – no Google access tokens and no Google profile picture. The provider is Google LLC (USA); the transfer relies on the EU Commission's adequacy decision (EU-US Data Privacy Framework).

Sign in with Apple (iPhone app only, voluntary): Apple learns that you sign in to CROSS. We store only your Apple account identifier plus e-mail and first name – no Apple access tokens and no last name. If you choose "Hide My Email", we only receive a forwarding address from Apple. The provider is Apple Distribution International Ltd. (Ireland). When you delete your account, we ask Apple to remove the link to CROSS; Apple asks you to sign in once more for this.

Legal basis: Art. 6(1)(b) GDPR.

Retention: until you delete your account (in the app under Profile → Delete account, confirmed with a code by e-mail). This deletes the account, profile picture, linked profiles and all chats – also for the other person. If you block someone in a chat, also together with a report, the chat is deleted for both.

The app keeps its sign-in key protected on the device: on Android in the Keystore (the app is excluded from Android backups), on the iPhone in the Keychain (not synced via iCloud). The camera is used only to scan the QR code and – if you want – to take a photo; the camera image for the QR code is analysed only on the device.

5. Reports and safety

When you report someone, we store the reason, your optional description and a copy of the reported person's profile (including the photo). For a chat report also the last 20 messages and, if you report a single message, that message. Only CROSS platform admins see reports – not the reported person and not the organizer.

Legal basis: our legitimate interest in a safe platform (Art. 6(1)(f) GDPR). Retention: 90 days after the event ends; for a report made later (for example from a chat), 90 days after the report.

Admin actions (e.g. handling a report) are logged without contents and deleted after one year.

6. Organizers and admins

For organizers and their team we store e-mail, name and role as well as invitations (valid 7 days). Platform admins also use an authenticator app. Legal basis: Art. 6(1)(b) GDPR.

7. Server, logs and backups

CROSS runs on its own server at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in the Falkenstein data centre (Germany). Photos are kept in storage on this server, not with a third party. A data processing agreement with Hetzner is in place.

Server logs contain only the time, type and path of a request and the result – no IP addresses, no cookies, no contents. They are overwritten automatically by size. To prevent abuse we count requests per IP address; for this we store only an encrypted value (HMAC) of the address for at most 15 minutes.

Encrypted backups are made daily and kept for 7 days, so deleted data also disappears from the backups after 7 days at the latest.

An encrypted copy of the backups is also kept with Backblaze, Inc. (2261 Market Street, STE 81006, San Francisco, CA 94114, USA) in a data centre in Amsterdam (Netherlands). Backblaze has no key and cannot read the contents. A data processing agreement with Backblaze is in place. For possible access from the USA the EU standard contractual clauses apply. There too, deleted data is removed after 7 days at the latest.

The connection is always encrypted (HTTPS). Fonts and all files come from our own server.

8. E-mails

We send sign-in and deletion codes and invitations through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as a processor. Brevo receives your e-mail address and the content of the e-mail. We send no advertising.

When you write to us, for example through the request form for organizers on our start page, we process your e-mail address and the content of your message in order to reply. The form itself stores and transmits nothing: it only opens your own e-mail app, and nothing is sent until you send it there yourself. Our mailbox is currently hosted by Google (Gmail, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); the message is stored there. We delete it once your request has been dealt with, unless statutory retention duties apply. Legal basis: Art. 6(1)(b) GDPR (requests about working together), otherwise Art. 6(1)(f) (answering requests).

9. Statistics

To improve CROSS we use Matomo on our own server to count how often certain things happen (e.g. "guest list opened", "match created"). Each count is a separate random entry: no cookie, no IP address, no name, no identifier, no page address. It cannot be related to you. Legal basis: Art. 6(1)(f) GDPR.

10. Cookies and browser storage

We only use what is needed for CROSS to work (§ 165 (3) TKG 2021, Austria):

• a cookie for your event session (until 12 hours after the event ends) and, if you have one, one for your account,
• your language and chosen tile size in browser storage, and briefly the id of a deletion while it runs.

There are no advertising, analytics or third-party cookies.

11. Sharing

Only the people named above see your data. Beyond that only our processors (Hetzner, Brevo, Backblaze) and – only with Google or Apple sign-in – Google or Apple receive it. For e-mails you write to us, see section 8. We do not sell data and show no ads. Authorities receive data only where we are legally obliged. There is no automated decision-making or profiling; a match only results when two people show interest in each other.

12. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) and may withdraw consent at any time. You can do much of this yourself: delete your profile or account, change your name and picture. For everything else write to cross.contact.at@gmail.com.

You may lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.

13. Age and changes

CROSS is only for people aged 18 or over.

If CROSS changes, we update this policy. The current version is always here.