Privacy Policy
Last updated: 2026-04-28
This Privacy Policy explains what personal data Afroduma collects, how we use it, who we share it with, and the rights you have over it. It applies to afroduma.com and all associated services.
1. Data we collect
Information you give us
- Account details — name, email, chosen handle, password hash, profile bio, avatar image.
- Content — posts, comments, reactions, tips, and any other material you submit.
- Payout details — for writers, the bank or payment-processor account used to receive earnings.
- Communication — emails and messages you send us.
Information we collect automatically
- Usage data — pages viewed, clicks, scroll depth, session duration.
- Device data — IP address, browser type, OS, screen size, referrer.
- Cookies and similar technologies — session cookies, analytics cookies, preference cookies.
2. How we use your data
- To provide and personalise the Service (show your posts, track reads, deliver tips and payouts).
- To communicate with you — transactional emails, editorial feedback, newsletters you opted into.
- To prevent abuse, fraud, match-fixing, or ToS violations.
- To measure engagement and improve the product.
- To comply with legal obligations (tax reporting, court orders, regulatory requests).
3. Cookies
We use a small number of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| afroduma_session | Keeps you logged in | 30 days |
| _ga, _ga_* | Google Analytics — aggregate usage | Up to 2 years |
| afroduma_consent | Stores your cookie preferences | 12 months |
| aff_ref | Tracks affiliate referrals for payout | 30 days |
You can manage cookies via your browser. Disabling essential cookies will break login functionality.
4. Third parties we share with
- Google Analytics 4 — aggregate usage statistics. We do not pass personally identifying information.
- Payment processors — for tips, subscriptions, and sponsored payouts. Financial data is processed directly by the provider, not stored on our servers.
- Cloudflare — DNS, CDN, DDoS protection. Cloudflare may log your IP for security purposes.
- Email providers — for transactional and newsletter email.
- Law enforcement — when required by a valid legal process.
We do not sell personal data to third parties.
5. Where your data lives
Afroduma servers are hosted in Europe. Some of our processors (e.g. Google) store data in the United States under appropriate data-transfer safeguards (Standard Contractual Clauses or equivalent).
6. How long we keep it
- Active account data — for as long as your account is active.
- Deleted accounts — profile data removed within 30 days; backups purged within 90 days.
- Published posts — retained unless you request removal; anonymised on account deletion.
- Payment records — retained for the statutory tax/accounting period (typically 7 years).
7. Your rights
Under GDPR and equivalent laws, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data (right to erasure).
- Export your data in a portable format.
- Object to certain types of processing (e.g. marketing).
- Withdraw consent for processing based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email [email protected]. We respond within 30 days.
8. Children
Afroduma is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If we discover such data we will delete it.
9. Security
We use industry-standard measures — HTTPS everywhere, password hashing (bcrypt), least-privilege access, regular backups. No system is perfectly secure; you share data with us at your own risk. Report suspected breaches to [email protected].
10. Changes
We may update this policy. Material changes will be notified by email and a homepage banner. The "Last updated" date above will reflect any change.
11. Contact
Privacy questions: [email protected]. General contact: /contact.