Privacy Notice

01Who I am

The data controller is Noxum Media & Consulting PVV, a sole proprietorship registered in the Netherlands (KvK: 42066188). You can contact us at privacy@emzihypno.com for any privacy-related matters.

02What I collect

I collect the following personal data when you use the commission form or book scheduled and immediate sessions: preferred/legal name, email, billing/tax fields, Discord/VRChat choice, booking/payment state, Stripe identifiers, and AES-256-GCM encrypted optional intake notes.

Live Checkout reserves the session amount before queue entry and charges completed individual service. Unserved authorizations are canceled; pending cancellation may still appear as a bank hold. Authorization is not payment. Existing paid invoices retain their refund process. Stripe handles card details; this site stores authorization, capture, cancellation and invoice identifiers and outcomes to reconcile your booking.

For a concrete booked session, I may store Discord or VRChat access details. Those access details are encrypted at rest, delivered only through the private booking page and capability/email workflow, and retained only while operationally needed to arrange and perform the session.

Alongside this, I retain the commission selections you make (length, format, voice, spice level, exclusivity, delivery, revisions, and personal-touches flags), your agreement to the legal terms, and the pricing breakdown you were shown.

If you join the commission waitlist, I store commission capacity/waitlist fields, 24-hour promotion links so I can operate the waitlist. You must check a box explicitly asking and consenting to be contacted about waitlist openings. That checkbox is validated when you submit the form, but I do not keep a separate consent history for it.

I use a pseudonymous IP-address hash only for rate limiting. Waitlist identities are not public, and I do not use them for advertising.

When an opening is offered or a session is booked, the access to manage it is provided via accountless scoped bearer links. Anyone with the link may be able to use it. You must observe its purpose, per-link expiry, and link care.

Hypnosis commissions and sessions are 18+ only. Adult verification is handled by Didit in a hosted flow. I store only the local proof that the 18+ threshold passed: provider, hashed Didit session reference, threshold, status, method category, timestamps, and expiry. I do not store your DOB, identity documents, selfie images, biometric templates, or Didit's raw decision payload. The system relies entirely on Didit proof minimization.

03Why I collect it

I collect this data based on the following legal grounds:

• Contract performance: To process and fulfill your commission requests and scheduling appointments.
• Consent: To manage the commission waitlist and contact you about your place or an available opening. You can ask me to remove your waitlist entry at any time by emailing privacy@emzihypno.com.
• Legitimate interest: To enforce the adult-only hypnosis policy while minimizing the data stored on this site.
• Legitimate interest: To prevent fraud and abuse (via IP hashing for rate limiting) and to maintain a tamper-evident audit log of operator access to your submission, supporting accountability under Article 5(2) GDPR.
• Legal obligation: To retain invoices as required by Dutch tax law.

Submissions and appointments are reviewed by me (the data controller) through an authenticated administrative interface. Each access and status change is recorded in an append-only audit events log so that any unauthorised access could be reconstructed if a security incident occurred. I maintain a private operator calendar feed and exact event minimization is enforced. There is no service/operator recording unless separately and explicitly agreed.

04Who I share with

I use the following third-party processors to operate this service. Each is bound by a Data Processing Agreement:

• Supabase (database hosting). See their privacy policy.
• Render (hosting). See their privacy policy.
• Cloudflare (DNS, CDN, WAF). See their privacy policy.
• Resend (email delivery). See their privacy policy.
• Sentry (error tracking). See their privacy policy.
• Didit (adult verification). See their verification privacy notice.

05International transfers

My primary hosted compute runs in Frankfurt (EU). Some of my processors may still transfer or process your data outside the European Economic Area (EEA), including control-plane data and operational logs that may transit the United States. These transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission, as documented in each processor's Data Processing Agreement linked above.

06How long I keep it

I retain your data for the following periods:

• Invoice and tax records: 7 years where Dutch tax law requires that record. This does not make every scheduling field a tax record.
• Other booking records: Kept while needed to arrange and perform the session, reconcile payment, cancellation or refund state, answer support requests, and handle a dispute or legal claim. The operator reviews the remaining personal fields for manual deletion when those purposes end.
• Encrypted session intake: Kept while needed for the session and any related support or dispute. It is reviewed separately from invoice and tax records and manually cleared when that operational need ends.
• Commission requests: A 90-day review date is recorded when a request is submitted. That date is an operator review trigger, not automatic anonymization or deletion. Accepted work, payments, disputes, and legal obligations can require a longer period.
• Commission waitlist entries and promotion links: Name and normalized email remain operational while an entry is waiting or promoted. A promotion link expires after 24 hours. Entries then become claimed, expired, or removed. Terminal waitlist rows remain until operator privacy review and manual deletion; closing the waitlist does not itself delete them. You can request removal at any time.
• Rate-limit buckets and IP hashes: Pseudonymous bucket state is kept for abuse prevention and reviewed for deletion when it is no longer operationally useful. A commission submitter IP hash follows the associated commission record.
• Age assurance proof: Usable so authentic browser proof can remain reusable without routine re-verification. The browser cookie renews for up to 400 days on use. Approved minimal proof records are preserved; expiry does not cause their automatic deletion. Expired unapproved checks with no booking or commission reference are deleted in bounded maintenance batches after 90 days without an update. Linked proof rows remain with business records while needed to demonstrate the adult-only access check.
• Audit events: Kept while needed for security, accountability, fraud, or legal claims, then reviewed by the operator for manual deletion. The application does not currently impose a fixed automatic expiry.
• Email outbox rows: Kept while a message is pending and afterward while needed for delivery troubleshooting and accountability. They are manually reviewed and deleted; they are not automatically removed with another record.
• Sentry error events: 30 days.

This is the cancellation/no-show privacy boundary: cancelling or missing a session does not immediately erase its booking, payment, calendar, or audit state. Cancellation and refund terms are shown on the booking surface; privacy retention follows the operational and legal criteria above. Where no fixed period is stated, there is no automated deletion guarantee. You may still request erasure, subject to legal exceptions, by emailing privacy@emzihypno.com.

07Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, object to the processing of, and request the portability of your personal data. To exercise any of these rights, please email privacy@emzihypno.com.

You also have the right to lodge a complaint with a supervisory authority. For the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), reachable at autoriteitpersoonsgegevens.nl.

08Provision of data

Providing your personal data via the commission form is a contractual requirement. If you do not provide the required fields (name, email, billing address, concept), I cannot process your commission request.

09Automated decisions

I do not use automated profiling to decide whether to accept, price, or fulfill a commission. Didit uses automated and, where needed, review-based verification checks to decide whether the 18+ threshold is met before this site accepts a hypnosis commission. All commission requests themselves are reviewed and processed manually.

10Cookies

If you explicitly consent after entering an invited tester password, this browser may receive a temporary, host-only preview-access cookie. It contains no password or identity, is used only to show paused acquisition pages to that browser, and expires after eight hours. You can revoke it from the preview controls at any time.

These are the cookies used on this site:

I do not set any analytics, advertising, or tracking cookies. If I add analytics in the future, I will update this notice and ask for your consent first where required.

If you use the commission form, your in-progress form choices are also saved in your browser's session storage, which is tied to the current tab and is not a cookie (see §11 below).

11Browser storage

To help you resume an incomplete commission form within the same visit, I save your in-progress form choices in your browser's session storage. Drafts live only on your device, clear automatically when you close the tab or browser, and clear when you complete the form.

The following fields are saved:

• Length, format, voice selection, spice level, exclusivity, rush, and revisions.
• Hypnotic trigger and induction selections.
• Working title, voice description, and reference URL (if you provide them).
• Personal-touches toggles (the on/off flags only; the actual personal text is never saved).
• The state of your agreement checkboxes.

The following are never saved in browser storage:

• Preferred name, pronouns, legal name, email, country, billing address, VAT number.
• Concept text and off-limits text.
• Custom name text and any personal-touches detail text.

The free-text fields above (working title, voice description, reference URL) can in principle contain identifying material if you choose to type it. If you'd rather not have anything saved on your device, close the tab. The draft clears automatically.

12Changes

If this notice changes, I will update the date above.