LoveBladi — Privacy Policy

1. Who we are and what this policy covers

LoveBladi is an independently operated service based in the United States, welcoming adults in Morocco and other countries where the service is available lawfully. This policy covers personal information handled through our website, accounts, music features, comments, wishes, games, and related support. Privacy contact: legal@lovebladi.com.

If an official mobile application is released, this policy will be updated to describe its data practices and any device permissions. Third-party services, including external sellers and WhatsApp, have their own privacy policies; this policy does not control their processing.

2. Adults only

LoveBladi is for people aged 18 or older. It is not intended for children, including with parental permission. We ask for date of birth to check eligibility. A self-reported date of birth is not independent proof of identity or age.

Do not register if you are under 18. If you believe an underage person has provided personal information, contact legal@lovebladi.com with enough information to locate the account, without sending unnecessary documents. We will review the report, restrict ineligible access, and handle the information as applicable law requires.

3. Account and profile information

Depending on the features you use, we process your email address, verification status, username, first and last name, date of birth, optional gender selection, language, chosen avatar, account preferences, and account creation and sign-in dates. We also keep records of Terms acceptance, certain name changes, account restrictions, and support or deletion requests.

When you set a password, we store only a one-way password hash, never your readable password. Sign-in, verification, and recovery use short-lived codes or links with expiry and attempt limits. Never share your password or a login code with anyone, including someone claiming to be from LoveBladi.

We use these details to create and protect accounts, check age eligibility, personalize features, keep your settings, respond to requests, and look after the community. Changing the account email requires ownership checks. Name-change waiting periods do not remove your right to correct inaccurate information; contact us if you cannot make a correction in your account.

4. Content and activity you choose to provide

We process comments and replies, reactions and blessings, reports, name requests, saved names and songs, playlists, saved shop recommendations, and game results where you use those features. Badges and rankings are calculated from eligible activity. Saved character choices are stored if you use character customization.

The “How do you feel?” feature can record the selected feeling, an optional name, the related song, the time, and your account when signed in. It is an entertainment feature, not a health service. Do not enter medical or other sensitive details into wishes, comments, names, or forms.

We process what you send us in support, copyright, security, advertising, or other messages. Advertising inquiries can include business name, contact name, email, optional phone or website, campaign category, budget range, and message. Never send payment card details or identity documents through ordinary forms or email.

5. Technical information and our own statistics

To run and protect the site, we process session identifiers, browser and device type, page addresses, timestamps, sign-in attempts, and security events. Approximate country and city may be derived from your IP address on our own server; we do not collect precise GPS location.

IP addresses: for signed-in members, the network address is stored encrypted and kept for 30 days after it was last seen, so we can stop abuse and enforce bans. A one-way scrambled form of the IP (a hash) links accounts on the same network and is used in our statistics. Only the site owner can see a member's IP address; other members and moderators cannot. Technical request logs are deleted automatically after 7 days.

Our own statistics run on our own server and record page views, songs played, playback events, shares, reactions, and searches with no result, linked to a session or signed-in account. Page-view statistics are kept for as long as they are useful to understand how the site is used and to improve it. These first-party statistics are part of running the service and are separate from the optional Google Analytics described in section 8.

6. Public profiles, comments, and community displays

Public comments can show your username or display name, avatar, badges, and activity such as contribution counts or how long you have been a member. A real name is shown only where you turn that option on. Do not assume that information you submit to a public feature is private.

Your email, date of birth, password hash, and security records are never shown on public profiles. Authorized administrators may see relevant account information to run the service, handle requests, or investigate abuse.

Other people can copy or share what is publicly visible. Removing it from LoveBladi cannot remove copies made by others. Contact us if private information was exposed without permission.

7. Wish cards, song greetings, and WhatsApp sharing

Creating a wish card records the sender account, displayed sender name, recipient name, message and design, a sharing token, and creation and expiry dates. We never need a recipient's phone number or your address book. Include only what is needed for the greeting.

Wish cards and song greetings are shared as links, including through WhatsApp or Copy link. Anyone who receives a link can open and forward it, so the recipient name and message are not confidential. Wish card links stop working 180 days after they are created, and song greeting links after 30 days. Expiry cannot erase copies a recipient already made.

Sharing through WhatsApp passes the share text and link to WhatsApp, whose own privacy policy applies. It does not give LoveBladi access to your WhatsApp contacts or conversations.

8. Cookies, local storage, and your choices

Essential cookies keep the site working and cannot be switched off: user_sess (your session) and csrf_token (protects your requests). If you choose to stay signed in, they last 90 days and are renewed while you keep using LoveBladi; otherwise a sign-in lasts 12 hours. Visitors who are not signed in receive the same cookies so the site can remember their session. The lang cookie remembers your language for up to 1 year. The analytics_consent cookie remembers your cookie choice for about 13 months.

Your browser's local storage keeps preferences on your device, such as light or dark theme, the last song played, saved name shortlists, avatar selections, and notices you closed. It stays until you or your browser clears it and is not sent to us automatically.

Optional analytics: we use Google Analytics only if you choose Accept in our cookie notice. If you choose Decline, or make no choice, Google Analytics is not loaded. When accepted, Google receives information about your visit (such as pages viewed, browser and device type, and a shortened IP address) and sets its own cookies whose names start with _ga, which can last up to 2 years. You can change your choice at any time with the Cookie choices link at the bottom of our pages; choosing Decline stops Google Analytics and removes its cookies from our site.

You can also clear or block cookies in your browser. This may sign you out and remove choices saved on that device, and the cookie notice will appear again. It does not erase records held on our server. On a shared device, use Sign out rather than only closing the window.

9. Automated filters and moderation

Comments and other text may be checked automatically against banned-word and contact-information rules. We may also use automated tools, which can include AI services, to help detect spam, abuse, and harmful content. These checks can allow, hide, flag, or block content. Moderation records can include the checked text or a hash of it, the language, the result, and the reason.

If an outside AI service is used to help check text, only the text being checked and its basic context are sent, and only for that check. Do not put sensitive personal information into comments or other submissions.

Automated checks can be wrong. Use the report controls or contact support@lovebladi.com to ask for a review. Badges never give members moderation powers. Not every comment is reviewed by a person, and no automated system detects everything.

10. Service providers and external services

Hosting: our website, database, email server, and encrypted backups run on servers we rent from IONOS in the United States. Email: account and login emails are sent from our own email server, not by an outside email company. Backups: encrypted copies of the database are kept so the service can be restored after a failure; when an off-site copy is set up, it is also encrypted and stored on a separate backup server that we control.

Google: if you accept analytics, Google Analytics processes visit information as described in section 8. Our home page also loads fonts from Google Fonts, which means Google receives your IP address and browser information when those fonts load.

Advertising and links: free access is supported by sponsor placements and affiliate links. We count views and clicks on our own placements, and sponsors receive totals, not your identity. If you click an external link or recommendation, the seller or affiliate service receives the visit and referral information and handles any purchase under its own policy. We do not take payments, and we never need your card number for LoveBladi.

We do not sell your personal information, and we do not share it with others for targeted advertising across other websites.

11. Other circumstances where information may be disclosed

We may disclose relevant information when required by law or valid legal process, to protect people and the service against real threats or fraud, or to establish or defend legal rights. We check that such requests are valid and limited to what is needed.

If ownership or operation of the service changes, information may be transferred as part of that change, subject to applicable safeguards and your rights. We also disclose information when you choose to, such as when you post publicly or share a wish link.

12. Purposes and legal grounds

Where the law requires a legal basis: we process account, playback, and feature information because it is needed to provide the service you ask for; we process security, fraud-prevention, statistics, and moderation information based on our legitimate interest in running a safe and working service; and we keep certain records when the law requires it.

Optional Google Analytics and optional marketing emails rely on your consent. Accepting the Terms or browsing the site is not that consent. You can withdraw consent at any time through Cookie choices or the unsubscribe link; this does not affect processing that happened before.

13. How long we keep information

Sessions: 90 days when you stay signed in (renewed while you use the site), otherwise 12 hours. Member IP addresses: 30 days after last seen. Technical request logs: 7 days. Login codes and links: minutes. Wish card links: 180 days. Song greeting links: 30 days. Page-view statistics: kept while useful for statistics. Account information, comments, and saved items: while your account exists, or until you delete them.

Backups are encrypted and older copies are replaced automatically as new ones are made, so deleted information can remain in a backup for a limited time until that backup is replaced. Backups are used only to restore the service, never for any other purpose.

14. Account deletion and personal-data requests

You can delete your account in your settings, and you have 30 days to change your mind. After that, we delete your account and personal information, including your email, profile, comments' text, plays, wishes, and saved items. We keep only: an empty “Deleted member” entry so other people's comment threads still make sense; our record that the account was deleted; anonymous totals such as play counts; and any ban placed for spam or abuse, so it cannot be avoided by deleting the account. We may also keep information when the law requires it.

For deletion, access, correction, or other privacy requests, use your account settings or contact legal@lovebladi.com. We may ask for reasonable proof that the account is yours so nobody else can access or delete your data. Your legal rights and deadlines are not reduced by the 30-day cancellation period.

Your account includes a personal-data export. This is separate from downloading music or other entertainment content, which we do not offer. Copies held by other people or outside services are outside our control.

15. Your privacy rights and email choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to its processing, and to withdraw consent. We will not penalize you for using a privacy right.

Contact legal@lovebladi.com to make a request or to appeal our answer. An authorized representative may act for you with proof of authority. We will respond within the time required by law and explain any lawful limits. You may also complain to your data-protection authority; people in Morocco may contact the CNDP.

Newsletter and other optional emails can be stopped with the unsubscribe link. Essential account, sign-in, security, and legal emails are still sent when needed.

16. Where information is processed

Our servers are in the United States, and the service is operated from the United States. If you use LoveBladi from Morocco or another country, your information is transferred to and processed in the United States. Google may process analytics and font requests in other countries under its own policies.

We protect information in the same way wherever you use the service, and we comply with the requirements that apply to us for international transfers.

17. Security

We protect information with encrypted connections (HTTPS), password hashing, encrypted storage of member IP addresses and backups, a database that is not reachable from the internet, limits on sign-in attempts, request-protection tokens, and restricted administrator access. No online service can guarantee complete security.

Use a strong, unique password, keep login codes private, and sign out on shared devices. Report a suspected account compromise or security problem to support@lovebladi.com, without including passwords. Where the law requires us to notify you of a personal-data breach, we will.

18. Changes and contact

The effective date at the top of this policy shows when it last changed. We will give appropriate notice of important changes, and we will ask for consent again where the law requires it before using information in a materially different way.

Privacy questions, corrections, access or deletion requests, and complaints: legal@lovebladi.com. General help: support@lovebladi.com.