Privacy Policy

Short version: no account, no cookies, no ad trackers. Your answers are encrypted with a secret that only exists in your link.

Who is responsible

Mag. (FH) Florian Neuhuber, Obere Höllstraße 20d, 4451 Garsten, Austria. Email: hello@ourmaybe.com. This policy follows the EU General Data Protection Regulation (GDPR).

Your lists

While you answer, everything stays in your browser. Nothing is sent until you choose to make a link. When you do, we store both first names, the list and level you picked, and your answers, so that they can be compared with the second person's answers.

• The stored file is encrypted with a key derived from a secret in the link. That secret sits in the part of the address after the #, which browsers do not send to servers when they load the page. Our server keeps only a hash of it. Without the link, nobody can read the file, including us.
• Anyone who has the link can answer as the second person or read the overlap. Share it only with your partner.
• The page only ever shows the lines where neither of you said no. Individual answers are never shown to anyone.
• The file is deleted 30 days after it was made. Either of you can delete it sooner from the results page.

Legal basis: your consent (Art. 6 (1) (a) GDPR). Answers on the After Dark list say something about a person's sex life; for those we ask each of you for explicit consent (Art. 9 (2) (a) GDPR). You can withdraw it at any time by deleting the list.

Your shared space

If you pair up in a space, we store both first names and, for every list you answer there, each person's answers. Everything is encrypted with a key derived from a secret that only your two browsers hold; our database keeps only hashes of that secret and of each person's key. Each of you can hand in answers only for yourself, and only once per list.

• Your browser stores the secret and your key on your device, so the space opens again on your next visit.
• The space stays until one of you deletes it. Either of you can delete a single list or the whole space, for both, at any time.
• A space that nobody has opened for twelve months is deleted automatically.
• Each of you has a personal access link that opens the space on another device. You can copy it from the settings or have it emailed to you; in that case we use your address for that one email and store neither the address nor the link.
• If you lose your key and your browser data, your partner can free your seat and send you the invite link again. We cannot restore access.

Legal basis: your consent (Art. 6 (1) (a) and, for the After Dark list, Art. 9 (2) (a) GDPR), which each of you gives when joining and before each After Dark list.

Purchases

If you buy something, the payment is handled by Mollie B.V. (Keizersgracht 126, 1015 CW Amsterdam, Netherlands). You enter your payment details there; we receive the payment's reference, amount and status. With the payment we keep which space it unlocks and the email address you gave for the receipt, which we use for that receipt only. Legal basis: performance of the contract (Art. 6 (1) (b) GDPR); accounting records are kept for as long as the law requires.

Age

The After Dark list is for adults aged 18 and over. We ask you to confirm this and do not verify it further.

No cookies, no ad trackers

We set no cookies and load no advertising or social media scripts. Your browser remembers, on your device only, which lists you started and the keys to your shared space, if you have one.

Audience measurement

We count page views with Plausible Analytics, which we run ourselves on our own servers. It uses no cookies and does not recognize visitors beyond the current day. We also count a few events, such as a list being started or a link being made. Names, answers and overlaps are never part of that. Legal basis: our legitimate interest in knowing whether the site is used (Art. 6 (1) (f) GDPR).

Server logs and hosting

Our web server logs requests with IP address, time, page and browser type in order to keep the service running and fend off attacks. The secret part of your link is not in those logs. Logs are deleted after a short period. The site runs on our own servers in data centers of Hetzner Online GmbH in Germany and Finland, under a data processing agreement.

Email

If you write to us, we use your address and message to answer you and delete them when the matter is settled, unless the law requires us to keep them longer.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Because we cannot read stored lists and cannot link them to a person, the quickest way to erase one is the delete button on its results page. You may also complain to a data protection authority; ours is the Austrian Datenschutzbehörde (dsb.gv.at).