GirlTalk GirlTalk (“we”, “us”, “our”) is a community for sharing outfit and beauty looks and personal stories. This Privacy Policy explains what data we collect, why, who we share it with, and your rights. It applies whenever you use GirlTalk at girltalk.social. If you don’t agree with how we handle your data, please don’t use GirlTalk.
1. Who we are
GirlTalk is operated by Selin İhtiyar (Türkiye), an independent developer. For any privacy-related question or request, email [email protected]. We aim to comply with the GDPR (EU), KVKK (Türkiye), and CCPA (California).
Self-hosted by design. GirlTalk does not run on a third-party “backend-as-a-service”. Your account, content, and photos live on servers we operate ourselves, so your data is not handed to an external platform vendor. The only third parties involved are the sign-in provider you choose (Google) and, for human moderation, Telegram (see §4).
2. What we collect
We only collect what we need to run the community.
When you sign in (via Google)
- Your email address
- Your Google user identifier
- A default username derived from your email (you can change it during onboarding)
Google may also pass along your name or profile picture; we discard these — only your email address and the identifier are stored. GirlTalk has no password of its own.
Information you give us
- A username, and an age bracket you choose at onboarding. Your age bracket is used internally; it is not displayed on your public profile.
- Optionally a bio and a profile photo
- Outfit / beauty posts: a photo, a caption, a category tag, an optional “urgent” flag
- Stories: a title, a body, a category, an optional “anonymous” flag
- Comments, votes, saves, reactions
- Reports you file against other users or content, and blocks you apply
- Acceptance of our Kindness Contract, with a timestamp
Automatically generated
- A unique user ID we assign to your account
- Timestamps for account creation, profile updates, posts, comments, and votes
- Basic technical logs (e.g. when an action fails) for debugging and abuse prevention
We do NOT collect
- Your precise location or GPS coordinates (GirlTalk has no location features)
- Your phone number, contacts, or advertising / tracking identifiers
- Browsing history outside GirlTalk
- Payment information (the service is free)
- Analytics or behavioural tracking — GirlTalk contains no advertising, analytics, or third-party tracking
3. Why we collect it
- To create and run your account (legal basis: performance of a contract)
- To enable community features — posting, commenting, voting, saving, blocking, reporting
- To keep the community safe — automated content checks, reviewing reports, enforcing the Kindness Contract, preventing abuse (legal basis: our legitimate interest in a safe space, and legal obligations)
- To respond to your support requests when you contact us
- To comply with legal obligations (e.g. lawful requests, mandatory reporting of child-safety material)
We do not use your data for advertising or for any purpose unrelated to running GirlTalk.
4. Who we share it with
GirlTalk’s database and photo storage are operated by us, not a third-party platform. We share data only with the limited providers below, each bound by their own privacy and security obligations.
| Provider | What is shared | Purpose |
|---|---|---|
| Google (Google LLC, USA) | Your email address and user ID, at sign-in only | Sign in with Google |
| Telegram (Telegram FZ-LLC) | Reported content, plus the related username and report details, when human review is needed | Lets our moderator review reports on a private, operator-only channel |
We do not sell your data, and we do not share it with advertising networks or data brokers.
5. Photos and anonymity
Profile and post photos are stored in our own (self-hosted) object storage and served to signed-in GirlTalk members. Photos are re-encoded on upload, which removes embedded metadata such as EXIF / GPS.
- Profile photo: optional. Change or remove it any time from Edit Profile.
- Outfit / beauty photos: posted by you and visible in the feed. Whether to show your face is entirely your choice. You can delete a post (and its photo) any time from the post menu.
- Anonymous stories: when you mark a story anonymous, your username and avatar are hidden from other users; you remain identifiable to us for moderation only.
6. Automated content checks
To keep the community safe, images and text you submit are scanned automatically before or as they are posted:
- Images are checked for explicit / pornographic content.
- Text (captions, comments, bios, stories) is checked for hateful or abusive content.
These checks run on our own servers — they are not sent to any third-party moderation service. Content that fails a check is blocked; the rest is published normally.
7. How long we keep it
- Account data (profile, posts, comments, etc.): kept while your account exists.
- Account deletion: when you delete your account, every database row tied to your user is removed within a few seconds (cascade delete). Your photos are removed from storage during a periodic cleanup, within 30 days.
- Reports: kept for up to 12 months after review, for safety auditing.
- Backups: rolling 30-day backups of the database may briefly contain deleted data; they expire automatically.
8. Your rights
Under the GDPR, KVKK, CCPA, and similar laws you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data (you can edit most fields directly in GirlTalk)
- Delete your account and all related data
- Object to processing or restrict it
- Withdraw consent at any time (e.g. by deleting your account)
- Data portability — receive a copy of your data in a structured format (email us)
- Lodge a complaint with a supervisory authority (e.g. the KVKK Authority in Türkiye; your local DPA in the EU)
For any of these, email [email protected]. We respond within 30 days.
9. Children
GirlTalk is intended for users 18 years of age and older. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us and we will remove the account.
10. Security
- All data is transmitted over HTTPS / TLS.
- Sign-in is handled through Google; GirlTalk stores no passwords of its own.
- Access is governed by application-level authorization — each member can only read what they’re allowed to; blocked users are filtered from each other everywhere.
- We will notify affected users without undue delay if a security incident affects their personal data.
11. International transfers
GirlTalk’s servers are operated from Türkiye. If you sign in with Google, or if your reported content is reviewed via Telegram, some data is processed by those providers in other countries (e.g. the United States). Those transfers rely on the providers’ own safeguards, such as Standard Contractual Clauses approved by the European Commission.
12. Updates to this policy
We may update this Privacy Policy as GirlTalk evolves. Material changes will be announced before they take effect. The “Last updated” date at the top reflects the most recent revision.
13. Contact
Privacy questions, data requests, complaints:
[email protected]
Selin İhtiyar — Türkiye