Privacy

MrHubbi is a personal platform that collects blog posts, content, membership and reading history. The data controller for the processing of personal data on this website is MrHubbi. [NOTE: Organization number and official address must be filled in before publishing.]

When you create an account, we process the following information: first and last name, username, email address and email verification status, profile image, date of birth, selected gender, as well as registration date and account status.

The date of birth is used to calculate age category (under 18 or 18+) and to enforce the platform's age policy. The full date of birth is not shown publicly on the user profile. The date of birth is available to the user themselves and authorized administrators with a legitimate need.

When purchasing a membership, we process: membership type and subscription status, start date, renewal date and any cancellation date, payment history with amounts and payment status, as well as relevant subscription information from PayPal.

MrHubbi does not store full card numbers or CVC codes. Payments are handled directly through PayPal, which processes payment data in accordance with its own security standards and applicable regulations. MrHubbi only receives limited information about the payment method from PayPal.

Profile images may be automatically analyzed using AI to check whether they meet the platform's requirements (real person, frontal face, sufficient resolution and lighting). The purpose is to prevent fake profiles and inappropriate images.

The AI analysis only assesses the image's suitability as a profile photo — it does not attempt to identify the person or infer gender. The image is sent to an external AI provider for analysis. The result of the check (approved/rejected and reason) is stored on your account. Profile images are stored in the platform's private file storage and are deleted when the account is deleted or the image is replaced.

The processing of personal data is based on the following legal grounds: performance of a contract (creating and operating an account, delivering membership), legitimate interests (security, prevention of misuse and fake profiles), and legal obligations (accounting and tax).

Consent is used only as a basis for processing that actually requires consent, such as newsletters. Consent is not a condition for ordinary account registration or membership purchase beyond what follows from the contract.

We use the following providers: PayPal (payments) and an AI service provider (profile image checks). [NOTE: Specify the AI provider name and any transfer outside the EEA with safeguards before publishing.]

Personal data is stored as long as you have an active account, and as long as necessary for the purpose. When the account is deleted, profile images, reading history and account information are deleted. Some information may need to be kept due to legal requirements (e.g. accounting obligations), even after the account is deleted.

Depending on the conditions in applicable privacy regulations (GDPR), you may have the right to: access your personal data, a copy of the data, correction of incorrect or incomplete data, deletion when conditions are met, restriction of processing, objection to processing, data portability where applicable, and to withdraw consent where processing is based on consent.

You can also complain to the Data Protection Authority. Some information may need to be kept when legal requirements apply, even if you request deletion. You can submit privacy requests directly from the account page.

If you have questions about privacy or how your data is processed, you can reach out through the contact page.