Privacy Policy

Last updated: 9 July 2026

Milapulse is a small, invite-only social platform for long-form writing. We collect as little personal data as we can get away with, we do not run advertising or engagement profiling, and we do not sell or share your data with anyone for their own purposes. This policy explains what we do process, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and equivalent laws.

1. Who is responsible (data controller)

The data controller for milapulse.com is:

Dalipeer Networks (DPN)
Contact: privacy@milapulse.com

2. What we collect and why

2.1 Account data

Sign-in is handled by our own identity service. When you first log in we store: a unique account identifier from the identity service, your chosen handle, and the time your account was created. We do not store your password; authentication happens entirely at the identity service.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We cannot provide an account without it.

2.2 Content you publish

Posts, profile information, and other content you choose to publish are stored and displayed as part of the service.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

2.3 Server logs and telemetry

Like every web service, our servers record technical logs (IP address, requested URL, timestamp, browser user-agent, response status) and operational metrics and traces. We use these solely to keep the service secure and working. Logs are retained for 14 days and then deleted automatically.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the security and reliability of the service.

2.4 Cookies

We set exactly one cookie: milapulse_session, a strictly necessary session cookie that keeps you logged in. It expires after 7 days of inactivity. We use no analytics, advertising, or third-party tracking cookies, so no cookie consent banner is required.

Legal basis: strictly necessary for the service you requested (Art. 6(1)(b) GDPR; ePrivacy exemption for essential cookies).

3. What we do not do

• No advertising, no ad networks, no data brokers.
• No behavioural profiling or engagement-ranking algorithms.
• No sale or rental of personal data, ever.
• No automated decision-making with legal or similar effects (Art. 22 GDPR).

4. Who processes data on our behalf

We host the service on servers operated by Hetzner Online GmbH in Germany (EU). Our DNS and network edge are provided by Cloudflare, Inc., which may process connection metadata (such as your IP address) to route traffic to us. The page currently loads one JavaScript library (htmx) from the unpkg.com CDN, which receives your IP address as part of that request.

These providers act under data-processing agreements and only on our instructions. We do not transfer personal data outside the EU/EEA except where a provider relies on an adequacy decision or Standard Contractual Clauses (Art. 44–49 GDPR).

5. How long we keep data

• Account data and content: until you delete it or your account is deleted.
• Server logs and telemetry: 14 days.
• Session cookie: 7 days of inactivity.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15);
• Rectify inaccurate data (Art. 16);
• Erase your data, the right to be forgotten (Art. 17);
• Restrict processing (Art. 18);
• Data portability: receive your data in a machine-readable format (Art. 20);
• Object to processing based on legitimate interest (Art. 21);
• Withdraw consent at any time, where processing is based on consent (Art. 7(3));
• Lodge a complaint with a supervisory authority (Art. 77), either in Germany, where our servers are located, or with the authority of your habitual residence.

To exercise any of these rights, email privacy@milapulse.com. We will respond within one month.

7. Security

All traffic is encrypted in transit (TLS). Access to production systems is restricted, passwords are never stored by this service, and we apply the principle of data minimisation throughout.

8. Children

Milapulse is not directed at children and, being invite-only, is not available to persons under 16.

9. Changes to this policy

If we change this policy in a way that affects you, we will announce it on the service before the change takes effect. The "last updated" date at the top always reflects the current version.