Privacy Policy

Version: 2026-09-10
Last updated: 10 September 2026
This Privacy Policy explains how MyFavLy processes personal data when you use the MyFavLy website, mobile application, creator storefronts, account features, analytics features or content-reporting tools.

1. Data controller

MyFavLy is currently operated by Zoltán Varga as an individual during its initial free MVP and Founding Creator phase.

For purposes of applicable data-protection law, including the General Data Protection Regulation (GDPR), the controller is:

Zoltán Varga
Address: Odorheiu Secuiesc, str. Fierari nr. 3, Romania
Email: hello@myfavly.com

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through the MyFavLy website, mobile application, creator accounts, public storefronts, analytics functions, account-management functions, communications and content-reporting system.

It does not govern the independent processing activities of third-party retailers, brands, affiliate networks, social-media platforms or websites that users may access through external links.

3. Account and creator profile data

When you create and use a MyFavLy creator account, we may process:

• your name;
• your username;
• your email address;
• your securely hashed password;
• your creator profile information;
• your profile image or avatar, if you choose to upload one;
• categories, product recommendations, product links and other storefront content you choose to publish;
• account-related technical and administrative information necessary to operate the service.

We do not store your account password in plain text.

4. Public creator content

Information that you intentionally publish on your creator storefront is made publicly available through your MyFavLy storefront URL.

This may include your creator name, username, avatar, categories, product recommendations, descriptions and external product links.

Creators should not publish personal information that they do not want to make publicly available.

5. Product and affiliate links

Creators may submit normal product links or their own affiliate links to MyFavLy.

MyFavLy stores and displays those links as part of the creator storefront and may technically process them in order to operate the product recommendation and outbound-click functionality.

When a visitor follows an external product link, the third-party website may independently collect personal or technical information under its own privacy policy.

6. Storefront analytics

MyFavLy currently provides basic first-party analytics to understand storefront activity and provide creators with information about the use of their storefront.

The current analytics system may record:

• a storefront view;
• an outbound click on a product recommendation;
• the relevant creator or product identifier;
• the time of the activity;
• limited referrer information where it is technically available.

The MyFavLy application-level analytics system is not designed to create individual visitor profiles and does not use device fingerprinting for storefront analytics.

MyFavLy does not intentionally store full visitor IP addresses as part of its storefront-view or product-click analytics records.

Network and infrastructure providers may nevertheless temporarily process technical information such as IP addresses in server, security or network logs where this is technically necessary to deliver and protect their services.

7. Content reports

MyFavLy provides a mechanism that allows people to report potentially illegal, infringing, fraudulent, misleading or otherwise prohibited content.

A content report may include:

• the URL or content being reported;
• the reason for the report;
• the relevant creator or product identifier, where applicable;
• the reporter's name, where provided or required;
• the reporter's email address, where provided or required;
• a confirmation that the report is submitted in good faith;
• administrative information relating to the review and outcome of the report.

Report information is processed for the purpose of reviewing reported content, enforcing the MyFavLy Terms, protecting users and third-party rights, and complying with applicable legal obligations.

8. Legal-document acceptance

When you register for MyFavLy, we record information showing which version of the Terms of Use and Privacy Policy applied to your registration.

This may include:

• your user identifier;
• the type of legal document;
• the document version;
• the date and time of acceptance or acknowledgement.

These records help MyFavLy demonstrate which legal information was presented when an account was created.

9. Password reset and account security

If you use the password-reset functionality, MyFavLy may process your email address and temporary security information necessary to verify and complete the reset request.

Security information associated with password-reset requests is used only for account-security and authentication purposes and is not intended for marketing.

10. Communications

When you contact MyFavLy by email or another supported communication channel, we may process:

• your name;
• your email address or account identifier;
• the content of your message;
• any additional information you voluntarily provide in the communication.

This information may be used to respond to your request, provide support, manage creator participation or resolve technical, legal or account-related issues.

11. Founding Creator communications

If you participate in the Founding Creator or testing program, we may contact you about onboarding, access to MyFavLy, important service changes, testing, feedback and matters directly connected with your participation.

Creating a MyFavLy account or participating in the Founding Creator program does not automatically subscribe you to unrelated promotional marketing.

Where separate consent is required for optional marketing communications, such consent will be requested separately.

12. Purposes of processing

We process personal data where necessary to:

• create and manage MyFavLy accounts;
• authenticate users and protect account security;
• create and display creator storefronts;
• store and display creator recommendations;
• operate product-link and outbound-click functionality;
• provide basic creator analytics;
• respond to support requests and communications;
• administer the Founding Creator program;
• receive, review and resolve content reports;
• detect, prevent and respond to misuse or security threats;
• improve and maintain the MyFavLy service;
• establish, exercise or defend legal claims where necessary;
• comply with applicable legal obligations.

13. Legal bases for processing

Where the GDPR applies, MyFavLy relies on the appropriate legal basis depending on the processing activity.

• Performance of a contract or steps requested before a contract: where processing is necessary to create and operate your MyFavLy account, provide your storefront, authenticate you and deliver requested platform functionality.
• Legitimate interests: where processing is reasonably necessary to secure and improve the service, provide limited platform analytics, prevent abuse, respond to enquiries, maintain records and protect MyFavLy, its creators, visitors or third parties, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: where processing is necessary to comply with applicable legal or regulatory obligations, including obligations relating to content reports or lawful requests from competent authorities.
• Consent: where applicable law requires consent for a specific optional processing activity, such as certain marketing communications or non-essential tracking technologies.

14. Service providers and recipients

MyFavLy relies on selected third-party providers to operate the service. These providers may process limited personal or technical information where necessary to provide their services.

Current infrastructure may include:

• hosting and server infrastructure used to operate the MyFavLy API and database;
• website hosting and deployment services;
• domain and email-service providers;
• mobile application distribution services provided by Apple and Google;
• technical infrastructure providers necessary for security, networking and application operation.

MyFavLy does not sell personal data to third parties.

Personal data may also be disclosed where required by law, a valid legal process or a competent authority, or where reasonably necessary to protect legal rights or security.

15. International data transfers

Some service providers may process personal data in countries outside Romania or the European Economic Area.

Where such a transfer is subject to GDPR transfer restrictions, MyFavLy will rely on an applicable lawful transfer mechanism, such as an adequacy decision, appropriate contractual safeguards or another mechanism permitted by applicable data-protection law.

16. Data retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it is processed.

Account and creator-profile information is generally retained while the account remains active.

When an account is deleted, MyFavLy deletes or removes account data from the active service in accordance with the account-deletion process, subject to limited retention where technically necessary for backups, security, dispute resolution or compliance with applicable law.

Communications and content-report information may be retained for as long as reasonably necessary to handle the relevant request, report, dispute, security issue or legal obligation.

Technical and security information may be retained for periods reasonably necessary to maintain system security, investigate incidents and operate the service.

Where a specific legal retention period applies, information may be retained for that required period.

17. Account deletion

Creators may request deletion of their MyFavLy account using the account-deletion functionality provided by MyFavLy.

Account deletion removes the creator account and associated active account information according to the technical deletion process.

Some limited information may remain temporarily in backups or may be retained where required for security, legal compliance, fraud prevention or the establishment, exercise or defence of legal claims.

18. Your data-protection rights

Where the GDPR applies, you may have the right, depending on the circumstances, to:

• request access to personal data concerning you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the competent data-protection supervisory authority.

Requests concerning these rights may be sent to hello@myfavly.com.

MyFavLy may request information reasonably necessary to verify the identity of a person making a data-protection request.

19. Supervisory authority

If you are in Romania, you have the right to lodge a complaint with the Romanian data-protection supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

You may also have the right to contact another competent supervisory authority where applicable under the GDPR.

20. Security

MyFavLy uses reasonable technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss or misuse.

These measures may include authenticated access, encrypted network connections, password hashing, access controls and security measures applied by infrastructure providers.

No online service can guarantee absolute security.

21. Automated decision-making

MyFavLy does not currently use personal data to make decisions that produce legal effects or similarly significant effects solely through automated processing.

Content-moderation decisions are not currently made solely by a fully automated decision-making system.

22. Children

MyFavLy creator accounts are currently intended for adults who can legally enter into agreements.

MyFavLy does not knowingly offer creator accounts to children through the current Founding Creator program.

23. Cookies and similar technologies

MyFavLy may use technologies that are technically necessary to provide website or application functionality.

Details of cookies, browser-storage technologies and similar technologies used by the MyFavLy website are described separately in the Cookie Policy.

MyFavLy will not intentionally introduce optional advertising or non-essential tracking technologies that require prior consent without implementing the required notice and consent mechanism.

24. Changes to this Privacy Policy

This Privacy Policy may be updated as MyFavLy develops, including where platform functionality, data-processing activities, service providers, the operating entity or applicable legal requirements change.

Each version will display its version date and latest update date.

Where a material change requires renewed acknowledgement or another action from registered users, MyFavLy may request that action before continued use of relevant services.

25. Contact

For privacy questions, data-protection requests or other matters relating to this Privacy Policy, contact:

Zoltán Varga
Address: Odorheiu Secuiesc, str. Fierari nr. 3, Romania
Email: hello@myfavly.com

Notă pentru utilizatorii din România

MyFavLy este operat în prezent de Zoltán Varga, ca persoană fizică, în cadrul etapei gratuite MVP și Founding Creator.

MyFavLy poate prelucra date necesare pentru crearea și administrarea contului, profilul creatorului, storefront-ul public, recomandările de produse, funcțiile de securitate, analiza de bază a vizualizărilor și clickurilor, comunicările și raportările de conținut.

Sistemul actual de analytics MyFavLy nu este conceput pentru crearea unor profiluri individuale ale vizitatorilor și nu utilizează fingerprinting pentru analiza storefront-urilor.

Creatorii își pot șterge contul utilizând funcționalitatea de ștergere disponibilă în MyFavLy.

Conform GDPR, poți avea, după caz, dreptul de acces, rectificare, ștergere, restricționare, portabilitate, opoziție și retragere a consimțământului atunci când prelucrarea se bazează pe consimțământ.

De asemenea, ai dreptul să depui o plângere la Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Pentru întrebări sau solicitări privind datele personale: hello@myfavly.com