Privacy

This page is a translation: in case of any discrepancy, the French version prevails.

Brink is designed to know as little as possible about you. This page explains what happens, on this site and in the app.

Your account

• The app requires an account: an email address and a password. The password is stored hashed, never in plain text. The server also keeps the date of your consent and, for each signed-in device, its name and when it was last used.
• What is stored on the server: your session history (date, duration, edges, intensity curve, outcome, your notes, your toys’ names, the name of the preset, program or challenge) and your progress (totals, streak, badges, current program). This information relates to your sex life: it is sensitive data within the meaning of the GDPR (Article 9). It is only stored with your explicit consent, given when you create your account, and is used for four purposes: giving it back to you, on this phone or another one; producing overall statistics on how the service is used; moderation (handling reports) and support; the security of the service and the prevention of abuse. For the last three, Brink's administrator can view it (see below).
• It is never sold, shared or used for advertising. The service only derives anonymous totals from it (number of accounts, sessions and messages per day, average duration, how sessions end) to monitor how it runs. The app has no tracking tools and no advertising.
• Administrator access: Brink's administrator can view, from the service's admin interface, your account (email address, pseudo, signed-in devices), your session history including your notes, and your conversations with your partners, for the purposes above: handling a report or a request for help, checking that the service works properly, preventing abuse. Every viewing of your history or of a conversation is recorded in a log, kept for as long as your account exists.
• Deletion: “Delete my account”, in the app, immediately erases your account, your history and your progress from the server. “Clear history” erases your sessions. Reports you have made remain, without your name, until they are handled. Your data is kept for as long as your account exists. Without the app, you can also do it from the Delete my account page.
• Your settings, presets and toy settings stay on your phone, and nowhere else.

In the app

• Bluetooth and location: the app needs them to find your toys. On Android versions older than 12, searching for Bluetooth devices requires the location permission. Brink never reads your position.
• Intiface Central: if you use it, the app connects to the Intiface server you specify, usually on your phone or on your local network.

Partner mode

• If you create partner links, the server keeps each link (a secret address and the optional name you give it) until you delete it. Deleting your account deletes your links.
• Partners between accounts: to invite or be invited, you choose a username. It is the only name other accounts see, never your email address. An invitation only works with the exact username: accounts cannot be browsed. The server keeps invitations and partnerships until one of you removes them. A refusal is not reported to the person who sent the invitation.
• Messages: only two partners can write to each other. Messages (text only) are stored on the server, encrypted, so you can find them on your phones. This encryption protects the database in case of a leak, but not against the service’s host: it is not end-to-end encryption. Each of you can delete your own messages, for both of you; ending the partnership erases the whole conversation, and deleting your account erases your messages. Brink's administrator can read them (see “Administrator access”).
• Reports: you can report a partner, or an account inviting you, and block them. The report (the reason, what you add, and the message in question if there is one, copied and encrypted) is kept while it is handled, then erased. The reported account is not told. Blocking ends the partnership, erases the conversation for both of you, and stops you from inviting each other again. A reported account can be suspended: it can no longer sign in, its partnerships, conversations and links are erased, as are its history and progress, and its e-mail address and pseudo stay reserved so it can't simply be created again.
• Your partners can see when you are in a session with partner mode on, and nothing else from your account.
• During a session with partner mode on, the session state (phase, intensity, edges, time) and your partner’s commands pass through Brink’s real-time server, from one device to the other. They are neither stored nor logged. Only your session, once finished, goes into your history, as usual.
• Whoever has the link joins the room, without an account. Only share it with the right person; deleting it makes it unusable, even for someone who already has it. Your partner sees neither your email address nor your history.

On this site

• No audience measurement, no advertising, no social media buttons.
• Fonts and images are served by this site: your visit triggers no request to any third-party service.
• The server sets two technical cookies: a session cookie and a token protecting against cross-site request forgery. They are not used to track you and expire after two hours.
• If you choose a language on the site, it is remembered for one year in a strictly functional lang cookie, which contains nothing but that language.
• Your age confirmation is remembered in your browser (local storage) so you are not asked again. It is never sent to the server.
• Like any web server, this one records the IP address, the date and the requested page in its technical logs. These logs are used only for security and to keep the site running properly, and are kept for a limited time.

Your rights

You have the right to access, rectify, port and erase the data concerning you, and you can withdraw your consent at any time by deleting your account. To exercise these rights, write to contact@qr-developpement.fr. You can also lodge a complaint with the CNIL, the French data protection authority.