AfterFlow360 · Faabulousstuff
Privacy notice
Updated 26 October 2026
Your choice to connect. Your choice about what you share.
Who is responsible?
AfterFlow360 is operated by Fabiana Mazzacani, working under the name Faabulousstuff. Fabiana is the controller for the community profiles and contact requests. Contact: info@afterflow360.com. This notice covers AfterFlow360; other websites and services have their own notices.
What is public?
The community map is public. Visitors worldwide can see your display name, town or general area, country, chosen activity and optional introduction, including reviewed translations when available. Your selected map point is rounded to approximately kilometre scale; it is a general area, not proof of a home address. Choose a town centre rather than your home. Public information may be copied or indexed by others.
Your profile and permission
Joining is optional. We use your consent under Article 6(1)(a) GDPR to store and publish your profile and to enable contact requests. You confirm publication through a link sent to your email address. We store the submission time, language and versions of the permission text and terms. A display name, general area, country, activity and email are required for this service; the introduction is optional. Browsing remains available without joining. Participation and contact requests are for adults aged 18 and over. Avoid medical information, diagnoses and other sensitive information in introductions or messages, and share only information you have permission to provide.
Contact requests
A request contains the sender’s name, email address, message, chosen profile, status and times. The sender first confirms their email address. The recipient then receives the first name and message. Email addresses are exchanged only after the recipient accepts. That sharing is based on each person’s affirmative permission. Choosing to place an email address in your message makes it visible earlier, so keep contact details out of the message. Fabiana can view requests in the private administration area to manage delivery and respond to problems.
Hosting, email and maps
OpenAI / ChatGPT Sites and its infrastructure providers, including Cloudflare, host and deliver the website and database. Hostnet processes email delivery; our mail forwarding sends messages to the Faabulousstuff mailbox. Email providers for both participants also process delivered messages. Public profiles are shared with all visitors; accepted contact details are shared with the other participant. Technical providers receive data needed to operate their service. Authorised technical support may access data where necessary.
External map choices
The external map loads only after you choose to open it. OpenStreetMap tile servers then receive your IP address, browser information and the map areas requested. Leaflet code and icons are served from this website. Town searches are sent through our server to Photon / Komoot with the town and country you enter, rather than your name or email. You can browse the profile list without opening the external map. More information: OpenStreetMap privacy policy and Komoot privacy policy.
International processing
The website and mail delivery use international service providers, so processing can occur outside the EEA. The ChatGPT Sites DPA describes OpenAI’s processor role and safeguards for international transfers, including standard contractual clauses or adequacy decisions. Information about applicable supplier arrangements and copies of relevant safeguards can be requested from Fabiana. Public profile information is accessible worldwide by your choice.
How long is information kept?
Published profiles remain while you choose to participate, until removal or closure of the service. Unconfirmed new profiles expire after 24 hours; expired records are cleared on the next profile-processing request. Publication links expire after 24 hours; removal links after one hour. Contact requests and their links expire seven days after creation and are cleared on the next contact-processing request. Older submissions awaiting manual review expire after 90 days and are cleared during submission or administration. Abuse-prevention counters expire after two hours; place-search cache entries after 30 days, with removal on subsequent use. Delivered emails, provider logs and backups follow the relevant provider’s retention settings; deleting a profile does not recall delivered emails or erase copies held by others. Contact Fabiana about associated mailbox records or provider-held copies.
Security and local storage
HTTPS, restricted owner administration, signed mail instructions, expiring hashed confirmation tokens and submission limits protect the service. Abuse prevention uses a salted, time-limited hash derived from an IP address. Necessary delivery and security processing relies on our legitimate interest in running a reliable service and preventing abuse, under Article 6(1)(f) GDPR. The practice page remembers completed days in this browser using local storage; clearing site data resets this. The site code contains no advertising or audience-tracking scripts. Hosting and sign-in providers may use necessary technical cookies and logs under their own policies. There is no automated decision-making with legal or similarly significant effects.
Your rights and withdrawal
You can withdraw profile consent and remove submitted profiles through profile removal. Email verification protects against removal by someone else. For corrections, access, a copy of your data, restriction, objection, applicable portability rights, legacy listings or withdrawal of a pending contact request, email Fabiana. Rights depend on the circumstances and legal basis. Requests are normally handled within one month; any permitted extension will be explained within that month. Withdrawal leaves earlier lawful processing unaffected. You can complain to the supervisory authority in your country of residence, work or the alleged infringement, including the Austrian Datenschutzbehörde or Dutch Autoriteit Persoonsgegevens.
Changes
The date above identifies this notice. Material changes to purposes or sharing will be explained before they apply; fresh consent will be requested where required.