David MARTINS EI, sole proprietor — GOHARA
Le Surcouf — Building C, 150 allée de la Marine Royale, 06210 Mandelieu-la-Napoule, France
SIREN: 913 872 412 — SIRET: 913 872 412 00022
Phone: 06 19 02 83 99
Email: support@gohara.store
Depending on the services you use, GOHARA processes:
Optional fields are identified in the relevant forms. Do not publish sensitive data or another person's data without a valid legal basis.
The main purposes and legal bases are:
The applicable basis therefore depends on the service. Creating and managing a purchased profile is necessary to perform the contract; it is not treated as marketing consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.
Your data is not sold. To the extent necessary for their role, it may be accessible to GOHARA and:
When address autocomplete is used, the characters entered and the technical connection data needed to answer the request are sent to Géoplateforme so that suggestions can be returned. You may ignore the suggestions and enter the address manually.
Some international providers may process data outside the European Economic Area. GOHARA then relies on the transfer mechanism stated by the provider and applicable to the processing, such as an adequacy decision or the European Commission's standard contractual clauses. You may request information about these safeguards at support@gohara.store.
Orders and invoices are retained for 10 years from purchase for accounting purposes. This requirement survives account deletion.
Profile data is retained until earlier deletion by the holder or, at the latest, until the end of the five-year contractual supply period starting on effective activation, unless an extension is expressly agreed. The holder may export it before deletion. Accounting records and data needed for a dispute or security follow their own retention periods. Raw scan statistics are kept for 13 months using a daily-rotating salted IP fingerprint; only daily aggregates remain afterwards.
B2B prospects are kept for no more than three years after the last contact. A newsletter address is kept until unsubscribe or, at the latest, three years after the last active contact.
Conversations and feedback remain available until deletion by the relevant account holder and are deleted after two years of inactivity, except content needed for a report or dispute. A Signal that stays outside any conversation is deleted 90 days after it is sent; once attached to a conversation, it follows that conversation’s duration and is deleted with it. The key of a visitor whose Signals the holder no longer wants to receive is kept for no more than 180 days after their last Signal or, if later, after that refusal, without its history. Technical and security logs are kept for no more than twelve months unless an incident or legal duty requires a documented longer period.
A notification subscription is kept until you remove the device, the notification service reports it as expired during a delivery attempt, or your account is deleted. The proof of a consent to notifications (its date, the version of the text and its end, without the full subscription endpoint) is kept for 12 months after its withdrawal, its replacement or the end of the subscription, then deleted. The alert log is purged every night of entries older than 48 hours, so an entry may remain for up to about 72 hours. The copy of an alert email is erased from it as soon as its sending is concluded; otherwise, the scheduled task erases it when it expires, and at the latest on its first run once 30 minutes have passed since the alert.
You may export your data and delete your account from My account in the customer area.
In accordance with the General Data Protection Regulation, you have the following rights:
Access, portability and account deletion are available from My account; the JSON export states what it contains and what it does not. Accounting records remain for ten years, and an account controlling an establishment page must first transfer or close that page.
For any other request, contact support@gohara.store. We normally respond within one month, subject to extensions permitted by the GDPR. Identity evidence is requested only where there is reasonable doubt.
You may also complain to the CNIL. GOHARA does not make decisions producing legal effects solely through automated processing.
In accordance with Article 82 of the French Data Protection Act and the ePrivacy Directive, we use different types of cookies on our site. The placement of certain cookies requires your express consent, which you can grant or refuse via our consent banner.
These cookies are strictly necessary for the site to function and cannot be disabled:
These cookies may only be placed after your agreement. At the date of this update, GOHARA identified no active third-party audience-measurement cookie in the audited code. Internal scan statistics do not use an advertising cookie and rely on a fingerprint renewed daily.
These cookies may only be enabled after your agreement. At the date of this update, no active third-party advertising cookie was identified in the audited code.
A profile's YouTube and Spotify players are loaded as soon as the page is displayed, from those services' servers, which may then set their own cookies; their policies apply. YouTube is called in its privacy-enhanced mode (youtube-nocookie.com), without autoplay. Opening an external link then sends the usual browsing technical data to the selected service, whose own policy applies.
You can modify your preferences at any time by clicking the "Manage cookies" link in the footer of every page. You can also configure your browser to refuse all cookies, but this may affect the operation of the site.
For more information on cookies and your rights, you can visit the CNIL website: cnil.fr
A Signal lets a profile holder know that someone has noticed them, with no message and no identity; it is attached to a random key specific to your browser and to that profile.
Legal basis. Performance of the contract for sending, replying and following up, including without an account; our legitimate interest in keeping, after the holder has refused, only the key and that refusal, so that the refusal is respected.
Retention. As stated above: 90 days; 180 days for a key whose Signals the holder no longer wishes to receive.
Catch Me lets someone viewing a profile page suggest a hint exchange to the holder, wherever they are: the page opens through the profile’s QR code, wherever it is shown, and through any shared link. No hint is sent before both agree; if the holder accepts, each may then, if they wish, choose a hint about themselves from a short list during the hint exchange, and change or remove it. No conversation. GoHara does not automatically reveal the visitor’s identity; the hint may allow them to be recognised. The visitor sees the holder’s public username. GoHara measures no location and doesn’t check where people are; a meeting is only one possible use of the hint, which both choose or not. Catch Me is for people aged 18 or over and is off by default; only the holder can turn it on. Its rules are in article 12 of the terms of sale.
Data. It comes from your actions in Catch Me: a random visitor key, specific to one browser and one profile, kept in a cookie (we keep only its fingerprint), with the date of the latest request, block or revocation; the dates and states of hint exchanges; for each request, the age rule applied: no verification, its time and version; it is not proof of age; hints, optional, after both agreements: a single choice from a closed list of twelve sentences about what you are wearing (no free text; a choice outside the list is kept nowhere); the holder’s setting (date, version of the text accepted); reports (who reports, a reason from a closed list, states, two numbers about the key, then the decision, its date and author; no hint and no free text); challenges (a reason from a closed list and, if you choose, new information of up to 300 characters); a log of actions, with no content; your IP address, as a fingerprint in a 10-minute counter, to limit the number of requests from the same connection; if you allow it, your device’s notification subscription, to notify you of an answer; it is deleted with your key.
Purposes. Running the hint exchange and its follow-up; keeping a record of the age rule applied (no verification), so that we can prove it; limiting repetition and allowing blocks; reviewing reports, deciding, giving reasons and handling challenges; preventing abuse and protecting people; proving agreements; informing the authorities where the law requires.
Legal basis. The request, the hint exchange and its follow-up, and the holder turning Catch Me on, are necessary for the performance of the contract, including for a visitor without an account. The following rely on a legal obligation: handling information you consider illegal, notified to support@gohara.store, and giving reasons for our decisions, which the EU Digital Services Act requires (articles 16 and 17); informing the authorities; answering your requests to exercise your rights. The following rely on our legitimate interest: the additional measures to prevent abuse (the repetition limit, blocking, reviewing reports made in Catch Me, the decisions that follow and challenges to them); security; keeping the agreements and the age rule applied, so that we can prove them. The follow-up cookie is strictly necessary for the service you ask for.
Recipients. GOHARA; Hostinger, our host; Catch Me notifications go, without content, through your browser’s notification service; no email is sent for Catch Me; no age-check provider; the competent law enforcement or judicial authorities, if a report or any other information raises a suspicion of a criminal offence threatening the life or safety of a person, committed, ongoing or likely: GOHARA promptly informs them and provides the relevant information available.
Retention. These are the periods chosen for Catch Me; they are not imposed by law. A hint stops being shown as soon as the hint exchange ends (at its deadline, or on withdrawal, refusal, block, report or shutdown); it is then deleted from our database, at the next page view, action or run of our scheduled task, with no guaranteed delay; what the other person saw cannot be erased. A finished hint exchange, with its four timestamps, and the log of its actions, with no content: 14 days. A visitor key: 14 days from its latest request or the end of its latest hint exchange; revoked, 14 days; blocked, 6 months; a key still held by a hint exchange or a report is not deleted. The cookie: 30 days, renewed each time the follow-up is viewed. An open report is handled within 7 days; if still open, it is reviewed on the seventh day, then at least every 14 days; it is never deleted while open. After closure, the reduced decision is kept for 6 months. A challenge gets an answer within 14 days; the decision is then kept for at least 30 days after that answer; keeping it for a dated item never exceeds 90 days; new information added to a challenge is deleted at the latest 30 days after the answer. Sensitive information is not needed for the review: if you write any, the person reviewing, the only one who reads this text, deletes it as soon as they notice it, and your challenge is still reviewed on its other elements. The setting lasts while Catch Me stays on. Deleting the holder’s account or resetting their item deletes the profile’s hint exchanges, keys and log; its reports and reduced decisions are detached from it and follow their own periods. The application’s technical logs, which contain no hint, are kept for at most twelve months; our host’s access logs follow its own rules. Messages received at support@gohara.store about Catch Me are deleted at the latest: a request to exercise your rights, one year after our answer; a notice of information you consider illegal, or a message about a danger, six months after its review is closed; a challenge, 30 days after our answer; any other message, six months after the last exchange; a message with no purpose, when it is read. We keep a message longer only where a legal obligation or the defence of our rights requires it: only the useful parts, for a recorded reason, until a review date.
Backups. Our daily database copies have contained no hints since 20 October 2026. Each daily backup run deletes the copies whose age, counted in whole days, is more than seven days, that is those at least eight days old: a copy is therefore kept for eight days, sometimes nine depending on the exact time of the runs, and longer if a run does not take place; this is not a strict seven-day limit. Our host’s automatic copies contain the whole database, including the hints of a hint exchange in progress when the copy is made; their retention, as announced by the host, is 7 days for daily copies and 6 weeks for weekly copies; on 21 October 2026 we nevertheless found a copy 45 days old; we have verified neither their content nor any maximum period, and their location has not been confirmed to us. We never restore our database directly from the host’s panel; this does not make those copies inaccessible. Copies taken during our updates are kept until 30 days after the following update is closed, then deleted.
Your rights. You can exercise them at support@gohara.store, as set out above; Catch Me data is not included in the My account export. A visitor is linked to this data only by the key kept in their browser: without that cookie, we cannot find it.
The site is protected by an SSL certificate (HTTPS). Payments are processed by Stripe, PCI DSS certified. We implement the necessary technical and organizational measures to protect your data.
Elements you enable in your profile are publicly accessible through its URL and QR code and may therefore be copied or shared by visitors. Check your settings before publication. You may hide, edit or delete this information from your dashboard.
Version dated October 30, 2026.