Privacy Policy

profile.rocks is committed to protecting your privacy. This platform does not track users for advertising or analytics.

1. Data collected by the platform

• Account data: your email address, name, passkey data, and OAuth identifier, as applicable to the sign-in method you use.
• Google Sign-up and Sign-in: if you choose to register or log in using Google, only your Google account email address, full name, and unique OAuth ID are accessed, collected, and processed. No other Google account data or permissions are requested or accessed, including access to your contacts, files, or calendar. Your Google password is not received. These Google account details are used only for authentication, secure account creation, and verifying your identity. Google processes your data under its own Privacy Policy.
• Profile content: the links, text, and images you add to your profile.
• Reports: information about the profile being reported, the categories you select for the report, your email address and name as the reporter, and the message you submit with the report.

2. Data collected by third-parties

Technical data is processed by Cloudflare (IP and browser information for security purposes).

Microsoft Azure Email Communication Services is the service used to send transactional emails to users. They may process or even blacklist email addresses that resulted in a hard bounce or spam complaints.

Payments inside the platform are handled by Polar.sh.

Profiles may embed content from third parties (e.g., YouTube, Spotify). When you visit a profile containing an iframe and agree to display them, these third parties may process your IP address and set cookies. profile.rocks does not control these third parties; please refer to their respective privacy policies. For full details on cookies see the Cookie Policy page.

This website, profile.rocks platform and user profiles may display links to external websites, whose privacy practices profile.rocks is not responsible for.

3. Purpose and legal basis

• Contract performance (GDPR Article 6(1)(b)): account data is processed to create and maintain your account and provide the login method you choose. If you use Google Sign-up or Sign-in, your Google email address, full name, and unique OAuth ID are processed exclusively to authenticate you, create your account securely, and verify your identity. These Google account details are not used for advertising, profiling, or any other purpose. Profile content is also processed to provide the profile features you request.
• Legitimate interests (GDPR Article 6(1)(f)): technical information is processed for platform security, and reports are processed to investigate and address abuse, protect users, and enforce platform rules. These interests are balanced against your rights and freedoms.
• Legal obligation (GDPR Article 6(1)(c)): relevant information is processed where necessary to comply with applicable legal obligations, including tax and anti-fraud requirements.

4. Data storage and processors

• Hosting: Microsoft Azure - Spain Central and North Europe (Ireland)
• Images: Backblaze B2 - EU Central (Amsterdam)
• CDN: Cloudflare and jsDelivr
• Payments: Polar.sh

5. Your GDPR rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

Contact: support@contact.profile.rocks

6. Public profiles and external archiving

Profiles are public by default and they are accessible to anyone on the internet. As a result, their content may be:

• Indexed by search engines (Google, Bing, etc.).
• Archived by third-party services such as the Internet Archive (Wayback Machine) or similar public archiving tools.

profile.rocks does not control these external services and cannot guarantee that content will be removed from them, even if you delete a profile later. By creating a profile, you acknowledge and accept that its content may remain publicly available and archived indefinitely by the third-party services mentioned above.

7. Data retention

If your account was not active for 6 years, profile.rocks may email you to ask if you want to keep your account. If you do not respond within 30 days, the account will be deleted, along with all associated profiles with no other members.

After you delete or update content in your account or profiles, it may take a few minutes for those changes to become visible.

When an account is deleted, some data can remain in the profile.rocks systems for up to 15 days.

profile.rocks may blacklist email addresses that resulted in a hard bounce or spam complaints. If you think your email address was blacklisted by mistake, you can contact at support@contact.profile.rocks.

When a report is made to a profile, the report information will remain in the profile.rocks systems for up to 15 days after the report is resolved.

A user who has been banned remains in the system from 15 days to 180 days, depending on the severity of the ban.

8. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes or legal requirements. Material changes will be notified to registered users.

The data controller responsible for processing your personal data is Stefan Samson, with professional address at C. la Sirena del Mississippi, 1, 1ºI; 50019 Zaragoza, Spain. You can contact by sending an email to support@contact.profile.rocks or ss42701@outlook.com.

For full details on cookies see the Cookie Policy page.

For information regarding the governing law and jurisdiction, please refer to the Legal Notice page.

Last updated: October 2026