In plain English
We aim for the highest standards with respect to your privacy. These are the general rules that govern how we operate:
- We don't sell your data or share it with other companies — your data is used only for the purpose of providing the service you have signed up to receive.
- All web site access is encrypted via the secure HTTPS protocol (the same as used by banks), and your password is only stored on our servers in encrypted form.
- You can delete your profile and data at any time; we don't keep your information indefinitely if you decide to leave the site.
Please read the fine print to understand the full details of our privacy and any possible exception to the above.
Introduction
We are committed to safeguarding the privacy of our website users.
This policy applies where we are acting as a data controller with respect to the personal data of our website users. In other words, where we determine the purposes and means of the processing of that personal data.
This website does not use tracking cookies or any form of cookie-based analytics. No consent banner is shown because none is required: no tracking, advertising, or analytics cookies are set.
Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can control which optional emails you'd like to receive and limit the publication of your information. You can access the privacy controls in your Account settings.
In this policy, "we", "us" and "our" refer to DudesNude, a Theme Park AG brand.
How we use your personal data
In this section we have set out:
- the general categories of personal data that we may process;
- in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
- the purposes for which we may process personal data; and
- the legal bases of the processing.
We may process data about your use of our website and services ("usage data"). The usage data may include geographical location (country level only), browser type, device type, and the page path visited. We do not store IP addresses, full URLs with query parameters, or raw user-agent strings. The source of the usage data is our own cookieless analytics system, described in detail below. This usage data may be processed for the purposes of analysing the use of the website and services and improving our content. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
We may process your account data ("account data"). The account data includes your email address provided by yourself and information about your use of the website recorded by our administration team. The account data may be processed for the purpose of operating the website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
We may process your information included in your personal profile on our website ("profile data"). The profile data provided by yourself may include your profile text, profile pictures and videos, date of birth, physical attributes and sexual preferences. The profile data may be processed for the purposes of providing our services, enabling your use of the website and maintaining back-ups of our databases. The legal basis for this processing is consent. Insofar as such data can be considered "special category data" under article 9.2 of the EU GDPR, our condition for processing is that processing relates to personal data which are manifestly made public by you choosing to publish said data in your public profile on our website.
We may process information contained in or relating to any communication that you send us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We may process any of your personal data identified in this policy where necessary for the purposes of managing risks. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
In addition to the specific purposes for which we may process your personal data set out above, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person's personal data to us, unless we prompt you to do so.
Site analytics (cookieless)
This website uses a self-hosted, cookieless analytics system operated by Theme Park AG. It records anonymous page views and link clicks for the purpose of understanding how our content is used and improving the site.
What is recorded: page path, HTTP method, response status, referrer domain (query string and fragment stripped), browser type (e.g. Chrome, Firefox), device type (desktop/mobile/tablet), country (two-letter ISO code derived from request headers), and page load duration. For link clicks: the source path, destination domain, and whether the click was directed to a DudesNude property.
What is not recorded: IP addresses, raw user-agent strings, full referrer URLs with query parameters, full click destination URLs, any cookie, session, or persistent identifier.
No cookies, no fingerprinting: the system sets no cookies, uses no localStorage, and performs no cross-site tracking. No third-party analytics scripts are loaded.
Data storage: analytics data is stored in a self-hosted data warehouse on servers located in Europe, operated by Theme Park AG. No third party receives or has access to this data.
Retention: analytics records are automatically purged after 14 months.
Legal basis: legitimate interest (GDPR Art. 6(1)(f) / Swiss revFADP). Because no personal data or persistent identifiers are collected, this processing does not require consent under ePrivacy Art. 5(3).