What Collared Ribbon collects today.

This notice covers the current Collared Ribbon website, public directory, public submission form, profile claim/removal form, and private curation tools. Privacy requests should be sent to CollaredRibbon@proton.me.

The prelaunch project still needs final legal controller details before a wider launch. Until those details are finalized, this page is intentionally conservative about what the site collects, publishes, and retains.

Published profiles are meant to describe public professional Dominant personas, not private lives. A public profile may include a stage or public persona name, public X handle, website, public links, profile image URL, country, city or broad region, tags, availability signals, source URL, and source-checked date.

Private drafts may also contain curation notes, source context, draft status, archive status, timestamps, and internal quality or safety context. Draft, archived, risk, suppression, claim, and curation data are not public profile fields.

Collared Ribbon treats adult professional persona data as higher-risk personal data. Public profiles should only use information that is part of the Dominant's public professional persona, useful for directory navigation, source-linked, and not obviously private.

The site avoids legal names, private identity material, client or sub details, reviews, allegations, explicit images, and private verification material. If a detail could reveal sensitive information, it should not be published unless it was made public by the person concerned, is necessary for the profile, and passes editorial and privacy review.

• • Suggestions: display name, optional X handle, country, city or broad location note, source URL, optional website URL, optional profile image URL, availability checkboxes, suggested tags, and a private note for curation.
• • Claim, correction, and removal requests: request type, contact email, X handle, verification URL, message, profile identifiers, request status, submission time, and decision time if reviewed.
• • Internal login: operator email is placed in a signed internal session cookie after a successful staff login.

Public submission and profile request forms use Cloudflare Turnstile to reduce spam and automated abuse. The browser receives a Turnstile widget, and the server sends the Turnstile response token plus the request IP address to Cloudflare's Siteverify endpoint. Collared Ribbon does not store Turnstile response tokens.

Ordinary hosting infrastructure may process request metadata such as IP address, user agent, request URL, and time for security and debugging.

Cloudflare's own Turnstile privacy information is available in the Turnstile Privacy Addendum.

• • To draft, source-check, edit, publish, correct, archive, or remove public persona profiles.
• • To let listed Dominants or their representatives request a claim, correction, review, or removal.
• • To keep reviews, allegations, legal names, client details, private images, and explicit imagery out of the public directory.
• • To prevent duplicate submissions, spam, impersonation, and automated abuse.
• • To run the private curation tools needed before launch.

The current working position is that ordinary public persona profile data is processed for Collared Ribbon's legitimate interest in running a source-linked curated directory, balanced against the rights and privacy of the people listed. Claim, correction, removal, and deletion requests are processed to respond to the requester and keep the directory accurate and safe.

Security, anti-abuse, internal login, rate-limiting, and incident response data are processed to protect the site, prevent spam, and protect private curation and request data. If consent is used for a future feature, it must be specific, clear, and withdrawable.

Any feature that intentionally collects or publishes sensitive category data needs a separate legal review before it ships.

• • No public accounts for listed Dominants.
• • No client or sub accounts.
• • No booking messages.
• • No payment details.
• • No reviews, ratings, testimonials, or client stories.
• • No optional analytics, advertising, tracking pixels, or marketing cookies in the app code today.

This prelaunch product does not yet have automated retention jobs. Retention is handled manually while the directory is being built.

• • Published profile data is kept while a profile remains useful, source-linked, and not removed or archived.
• • Draft profiles and private curation notes are kept while a profile is being reviewed, improved, suppressed, archived, or used to prevent re-importing unsafe or unwanted material.
• • Claim, correction, and removal requests are kept while pending and may be retained after decision long enough to document what was requested and avoid repeated abuse.
• • Internal operator session cookies expire after twelve hours.
• • Before wider launch, retention should be converted into a reviewed operating policy with deletion or minimization checks.

If personal data on the site is about you, you can ask to access it, correct it, remove or erase it, restrict how it is used, object to processing, or receive data you provided in a machine-readable format where that right applies. You can also ask how a profile was sourced.

Collared Ribbon may need enough information to confirm that a request relates to you, your public persona, or a representative acting for you. Requests should receive a response without undue delay and, for GDPR requests, within one month unless the request is complex or clarification is needed.

If you are in the EU or EEA, you may also have the right to complain to your local data protection authority.

The current production-shaped setup uses Railway for web hosting and Postgres, Cloudflare Turnstile for public form abuse checks, and email or public social contact paths for manual privacy handling. These services may process request metadata such as IP address, user agent, timestamps, and form/security signals.

Launch traffic checks use hosting logs, manual smoke tests, public QA, and direct tester feedback. Collared Ribbon does not use optional analytics scripts, marketing profiling, advertising pixels, or third-party traffic analytics in the app code today.

Before wider launch, Collared Ribbon must keep a reviewed processor and international transfer register covering hosting, database, security checks, email, DNS/domain providers, backups, and any future analytics or media storage.

If a profile is about you, use the profile's claim or removal link for the fastest review path. If you cannot access that route, or if you want to ask for deletion of submission or request data, email CollaredRibbon@proton.me.

Requests may require enough information to confirm that the requester controls, owns, or represents the public persona or contact method at issue. Collared Ribbon will not publish claim, correction, removal, or deletion requests publicly.