Companies and Entities

Flarum B.V. is registered in the Netherlands at Arnhem, Rosendaalseweg 497, Chamber of Commerce Registration Number 90031156.

This Privacy Policy applies to any information you share with or provide to Flarum B.V. via any of our community forums, websites or applications, including, but not limited to flarum.org. Flarum B.V. and its entities and assets are referred to hereon as Flarum B.V.

Definitions

• GDPR General Data Protection Regulation Act.
• Data Controller Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
• Data Processor Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.
• Data Subject Data Subject is any living individual who is using our Service and is the subject of Personal Data.

Principles for processing personal data

Our principles for processing personal data are:

• Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.
• Restricted to a specific purpose. The personal data of Data Subject must be processed only for specific purposes.
• Transparency. The Data Subject must be informed of how his/her data is being collected, processed and used.

Information you provide

This is information that you provide to us through text fields, such as your name, payment information, repositories and extensions. The information we collect is different depending on the relationship with us; if you are an account holder on any Flarum B.V. website, subscriber by subscribing to premium extensions, using one of our services or a developer by maintaining premium extensions offered through our marketplace.

All accounts

On every form that requires your input an explanation is given what the input is used for.

To create an account on any Flarum B.V. website you have to provide your:

1. Email address
2. Name
3. Password
4. A nickname

It is up to you to provide additional information:

1. Your discuss.flarum.org, extiverse.com, blomstra.net or blomstra.community username.
2. Connected accounts like GitHub, GitLab, Discord or Stripe.

Paid services & subscriptions

A subscriber is someone who pays a fee to use a premium extension and paid services. This is possible by providing our payment processor Stripe with your payment information. The Stripe privacy policy is available on their website. Stripe provides us with a token that represents your account and the information you shared with them, including your payment method and address information.

Premium extensions

Subscriber information is shared with the developers providing premium extensions through our platform:

• Premium extension developers have access to the email address, discuss username, name and nickname of users with an active subscription to any of their premium extensions. We provide this information to them so that they can give targeted support to their clients.

To safeguard against abuse, we register additional information on use, these include:

• Your premium extension download behaviour and related information like your IP.
• Your browser information and IP address for each order.

Developer

A developer is someone who creates premium extensions and offers these through our marketplace to receive payment from subscribers. Any information you share with Stripe may be potentially collected and stored by us, including (but not limited to):

• Contact details, such as name, postal address, telephone number, email address;
• Other personal data, such as date of birth;
• Legal information, such as legal name and foreign tax identification information.

Information we collect

We collect information automatically as you navigate the site or through our third party analytics providers. We may store usage information such as the type of device you use to access Flarum B.V., your operating system, browser type, IP address, and device ID, the pages you visit or request, links clicked, referring sites, user interactions and your search terms. We also derive your location from your IP address.

Our service does not support Do Not Track requests at this time, which means our third party analytics providers may associate your usage on Flarum B.V. with your usage on other sites.

We use Google Analytics cookies to see how you use Flarum B.V. so we can improve in a variety of ways. We encourage you to read the Google privacy policy. If you prefer to not have data reported by Google Analytics, you can install the Google Analytics Opt-out Browser Add-on.

While we try to keep this list up to date, we often experiment with new third party analytics providers. This list, therefore, may not be exhaustive.

How we use your information

We never sell your information to anyone. We use your information to:

1. provide Flarum B.V. and related services to you.
2. allow you to sign in to your account.
3. allow you to subscribe to services like premium extensions.
4. allow you to receive subscribers to your premium extensions.
5. send you emails relevant to your usage.
6. send you emails relevant to your subscriptions.
7. send you emails relevant to your Flarum installations.
8. create better tools for developers, subscribers and users.
9. conduct research and development to improve Flarum B.V. and related services and develop future products that our users may be interested in by analyzing how you use it.
10. promote Flarum B.V. and offer insight into Flarum ecosystem growth by sharing statistics.
11. prevent fraud and abuse.

Information shared with the public

The following information is publicly accessible:

• Any posts, ratings, comments or other content you make on Flarum B.V. or its extensions.
• We may share aggregated or anonymized usage date in blog posts, press releases, or in other ways to share information about Flarum B.V.'s usage. Aggregated or anonymized data cannot be linked back to any individual user.

Children

Flarum B.V. is not directed at children under the age of 13, and they may not create an account or otherwise use Flarum B.V. and its related services.

Removal and access

You can request removal of and access to your user data from the account page. Please note that once your request is processed, account deletion cannot be undone.

Changes

We may sometimes make changes to this policy. If we make material changes that adversely affect your rights under this policy, we will let you know by posting an announcement on the site or sending you an email prior to the changes coming into effect. Your continued use of Flarum B.V. and / or related services after a change to this policy constitutes your acceptance of the changes.

Legal basis for collecting and processing personal data

Our legal basis for collecting and using the personal data described in this Data Protection Policy depends on the personal data we collect and the specific context in which we collect the information:

• Flarum B.V. needs to perform a contract with you
• You have given Flarum B.V. permission to do so
• Processing your personal data is in Flarum B.V. legitimate interests
• Flarum B.V. needs to comply with the law

Retention of personal data

Flarum B.V. will retain your personal information only for as long as is necessary for the purposes set out in this Data Protection Policy.

Flarum B.V. will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Data protection rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or to delete the information we have on you
• The right of rectification
• The right to object
• The right of restriction
• The right to data portability
• The right to withdraw consent