Privacy Policy
Last updated 28 October 2026
Yaba Fun is a demonstration social app run by Yabafun ("we", "us"). This policy explains what personal data we collect, why, and the choices you have. We don't sell your data, we don't show ads, and we don't use analytics or tracking tools.
1. Who we are
Yabafun is the controller of your personal data for Yaba Fun. Contact us at contact@yaba.fun about anything in this policy.
2. Data we collect and why
| What | Details | Why (legal basis) |
|---|---|---|
| Account details | Email address and password (stored and hashed by our authentication provider, never by us); your username. | To create and secure your account and let you sign in (contract). |
| Google sign-in | If you choose Google: your name, email address and profile picture, as shown on Google's consent screen. We use your name only to suggest a username. | To sign you in with Google at your request (contract). |
| Content you post | Posts, likes, and the time they were made. | To run the social features you use (contract). |
| Security data | Your IP address and the email you sign in with, only in one-way hashed form, counted for at most an hour to limit repeated attempts. | To protect accounts and the service from abuse (legitimate interests). |
| Reports and blocks | Posts you report (the reason and any note you add) and accounts you block. Moderators can see who reported a post; the reported person can't. People you block aren't told. | To keep the community safe and enforce our Terms (legitimate interests). |
| Security log | A record of account events (sign-ups, sign-ins and failed attempts, sign-outs, password resets and changes), with the time, a hashed IP address and your browser type. Attempts on unknown accounts store the email only in hashed form. Kept for 90 days. | To detect and investigate unauthorised access to accounts (legitimate interests). |
| Technical logs | Request logs kept by our hosting provider (such as IP address, browser and time), for a short period. | To keep the service running and secure (legitimate interests). |
Your username and posts are public to other users. Your email address is never shown to other users. Market, trading, wallet and presale screens show fictional, generated data only: we don't collect wallet addresses, keys, payment details or financial information.
5. How long we keep data
- Account data, posts and likes: while your account exists. When you ask us to delete your account, we delete it and your content.
- Posts you delete: removed straight away. If a post had open reports when you deleted it, we keep it hidden until a moderator has reviewed those reports, then delete it.
- Hashed security counters: about an hour, then deleted.
- Reports: until the reported post or your account is deleted. Blocks: until you unblock or delete your account.
- Security log of account events: 90 days, then deleted.
- Hosting logs: kept by our providers for a short period under their own retention settings.
6. Your rights
Under UK and EU data protection law you can ask to access, correct, delete or receive a copy of your data, and object to or restrict how we use it. Email contact@yaba.fun and we'll respond within one month. Account deletion is handled by email for now; an in-app option is planned.
You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
7. Security
Passwords are hashed by our authentication provider, sessions are signed and refreshed automatically, connections are encrypted (HTTPS), and repeated sign-in attempts are rate limited. No system is perfectly secure, so please use a unique password.
8. Age
Yaba Fun is for people aged 18 or over. We don't knowingly collect data from anyone younger; if you think we have, contact us and we'll delete it.
9. Changes to this policy
We'll update the date at the top when this policy changes, and tell signed-in users about significant changes. See also our Terms of Service.