Privacy policy

Version in force: 2026-05-18. Time for Fun keeps every prior version on file and re-asks for consent each time the text changes in a way that affects you.

1. Who is responsible

Time for Fun is published and operated by personne, the data controller within the meaning of Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679, \"GDPR\") and of the French Data Protection Act of 6 January 1978 as amended.

Every request related to your personal data is handled by the data controller. The contact channel is the in-app \"Manage my consent\" page once you are signed in, and the contact form available from the footer for visitors who do not have an account.

2. What we collect

We collect only what running the service requires:

  • Account: e-mail address, encrypted password, the languages you speak, the city you operate from, and the social-account identifier when you sign in with Google or another provider.
  • Contributions: the activities you create, the comments you post, the participations you record, and the language you wrote them in.
  • Security: the IP address used at sign-up, at consent grant or withdrawal, and at login, kept strictly for abuse prevention and audit.
  • Cookies: a session cookie that keeps you logged in, a CSRF cookie that protects every form, and a language cookie that remembers your interface language. No third-party tracker, no advertising cookie.

3. Why we process it

  • Operating your account, authenticating you, and showing the activities relevant to you.
  • Publishing the contributions you mark public so the community and search engines can find them.
  • Detecting and stopping abuse (spam, links, impersonation, hate speech).

4. Legal basis

  • Operating your account: performance of the terms of use you accept at sign-up — GDPR Article 6(1)(b).
  • Publishing your public contributions: your explicit consent at sign-up and on every policy update — GDPR Article 6(1)(a). You can withdraw it at any time, with effect for the future.
  • Abuse prevention and security logs: our legitimate interest in keeping the service safe — GDPR Article 6(1)(f).

5. What is published

Only the contributions you marked public are shown on the open pages and to search engines. They appear under a generated pseudonym derived from your account identifier, never your real name and never your e-mail. Your real name, your e-mail address, your IP address and your social-account identifier are never displayed publicly and never sent to any third party for advertising.

6. AI-assisted text help

A moderator may run an AI provider on your text strictly to correct spelling and grammar, or to translate it, when (a) you have ticked the matching permission in your account, and (b) you have ticked the specific engine you allow. Both opt-ins are independent and revocable. Engines are listed in your account; an engine you did not tick is forbidden. The provider receives only the text needed for the correction or the translation, never your real name or your e-mail. The providers we use are contractually configured to keep zero copy of your text after the response is returned.

7. Recipients

Public contributions are accessible to anyone visiting the site and may be indexed by search engines. Account data stays with the data controller and the technical hosting provider that runs the servers. AI providers only see the text fragments you have explicitly authorised in section 6, and only when a moderator triggers the action. We never sell personal data to anyone.

8. International transfers

The servers that run Time for Fun are located in the European Union. If you opt into an AI engine whose provider operates outside the EU, the text fragments submitted for correction or translation are processed in that provider's country (typically the United States). The transfer is based on your explicit consent under GDPR Article 49(1)(a) and on the standard contractual clauses approved by the European Commission. The list in your account states each engine's provider so the decision is informed.

9. How long we keep it

  • Account data: for as long as the account is open. When you close the account, the rows are versioned closed, hidden from the live service, and kept in the audit history for three years to handle any dispute, then deleted from the archive.
  • Public contributions: as long as your consent is active. Withdraw the consent and they stop being shown immediately; the rows themselves are versioned closed in the same audit history.
  • Consent records: the granted-and-withdrawn ledger is append-only and is kept for three years after the account closes, as proof of the consent given.
  • Security logs (IP addresses): one year, then automatically purged.

10. Your rights

Under GDPR Articles 15 to 22, you can at any time:

  • access the personal data we hold on you;
  • have any inaccurate data corrected;
  • have your data deleted, within the limits set by section 9;
  • export your data in a portable format;
  • object to processing based on our legitimate interest;
  • restrict processing while a request is being handled;
  • withdraw your consent, with effect for the future.

Withdrawal removes your public contributions from the open pages immediately. The audit history keeps the closed rows but the public site no longer shows them and search engines stop seeing them on their next crawl.

11. How to exercise them

Use the 'Manage my consent' page in your account for the one-click withdrawal and the policy version status. For every other request, write to the data controller via the contact path published in the footer; the response is sent within one month under GDPR Article 12(3).

12. Automated decision-making

Time for Fun does not take any decision producing legal effects or significantly affecting you on a solely automated basis. Moderation, account suspension and content removal are reviewed by a human moderator. AI assistance is limited to spelling, grammar and translation, as described in section 6.

13. Children

The service is not aimed at children under 15 (GDPR Article 8 as transposed by French law). If you are under 15, do not sign up; if a parent or guardian becomes aware that a child has signed up, the account is closed and the data is deleted on request.

14. Complaint

If you believe your rights are not respected, you may lodge a complaint with the supervisory authority of your country of residence. In France this is the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, https://www.cnil.fr/.