1. Data controller
The data controller is Jérémy Baslé, 14 impasse des Vallées, 50450 Gavray-sur-Sienne, France. Email: assistance@noodle-dating.com. Telephone: +33 6 38 41 29 02. The operator’s member profile has a Creator label; personal activities and administrative functions are distinct.
2. Data processed
Noodle processes your account identifier, verified email, supplied identity details, birth date, profile and private gallery, messages and shared photos, reveal decisions, Daily Life text, photos and audiences, location settings, blocks, reports, moderation records and technical security data.
Questionnaire answers include gender, sought genders, relationship intentions, lifestyle, interests and values. Preferences may reveal sexual orientation; their processing is explained and covered by separate explicit consent. The optional zodiac sign does not affect correspondence. Uploaded photos are checked and re-encoded to remove embedded metadata.
3. Purposes and legal bases
Account operation, introductions and conversations are provided to perform the requested service. Explicit consent covers sensitive preferences and location authorisation. Security and fraud prevention rely on legitimate interests where appropriate; legal duties can justify limited evidence. No data resale or behavioural advertising is planned.
Internal usage measurement records the screen visited, local hour and time zone for aggregate activity counts; it does not add message content, photos or location to those events.
4. Location and matching
Location is requested when you update your position or enable automatic updates, with browser or system permission. You can withdraw that permission. A difference from your main place of residence may display a travel label. Updates depend on application activity and system permissions, not permanent background tracking.
Received coordinates are reduced on the server to the centre of a public cell about 28 km per side; the exact location is not stored in the profile or shared with other members. Personal points disappear at a 5 km map scale. The similarity percentage compares answers equally and does not predict relationship success; it requires five comparable criteria. Age, sought genders and distance are separate filters.
5. Who receives data
Content is available according to its audience. Private gallery access requires mutual reveal consent. Private Daily Life posts require an open conversation and mutual reveal; public posts are accessible to members. Support and moderation may access the elements needed to handle a request or report.
The website uses OpenAI Sites and Cloudflare. The Noodle API, authentication and PostgreSQL database run on two separate OVHcloud servers in France; private media use Scaleway Object Storage in Paris. Brevo sends transactional emails. ImprovMX forwards support email to the operator’s Orange mailbox. Apple provides iPhone distribution and system services. Email providers do not need your gallery or conversations to deliver a login code.
6. Retention
Active account, profile and content are retained during the life of the account, until deletion by the member or service. The Daily Life World bubble lasts 24 hours, but this does not delete the journal history.
Security and moderation logs: 180 days. Reports: while open, then 365 days after closure. Support requests: 365 days after their last update. Consent and deletion evidence: 1,825 days after account deletion, without a direct account identifier. Internal usage events: up to 180 days. Temporary abuse counters are subject to technical cleanup after 24 hours.
Automated database backups are encrypted before transfer to separate OVHcloud storage and protected against modification or deletion for at least 30 days. These recovery copies are used only for incident recovery, are not accessible to members and do not disappear immediately after active-data deletion. Restoration must take account of subsequent deletion requests.
Authenticated account deletion removes the active profile and content and queues media deletion. Support requests are deleted. Retained safety reports have direct identifiers, message excerpts and details removed; logs are de-identified. Limited consent and deletion evidence remains for the periods above. The Creator account is protected against accidental deletion through the ordinary member interface.
7. Your choices and rights
You can edit your profile, export account data, manage blocks and request account deletion. Depending on applicable law, you may request access, correction, erasure, restriction, portability, objection or withdrawal of consent. Contact assistance@noodle-dating.com. You can complain to the French CNIL at cnil.fr or another competent supervisory authority.
8. Security and international access
Private routes require authentication and server-side access checks. Media are stored privately. Noodle does not claim end-to-end encryption of conversations. No service can promise absolute security. Public or shared content can be viewed by members in other countries.
Delivery and communication providers may process data outside the European Economic Area. Transfers are subject to applicable GDPR safeguards, including adequacy decisions or standard contractual clauses depending on the provider and processing. Contact support for information about recipients and safeguards.
The public website uses no advertising or profiling cookies. Authentication requires session storage. Last updated: 2 October 2026. Material changes will be explained and renewed consent requested where needed.