This policy explains how jokello.com handles personal information when you browse, create an account, personalise jokes, receive deliveries or share content. The operator of jokello.com is responsible for this processing. Contact the operator about privacy or your information at oetoni@gmail.com.
1. Information we handle
- Account details: your email address, display name, verification status, a protected password hash, sign-in or recovery records, and when you confirmed that you are 18 or over during signup. We do not ask for your date of birth.
- Your choices: humour categories and level, excluded topics, names and interests you supply, timezone, and delivery settings and consent.
- Your activity: selected and delivered jokes, favourites, ratings, history, gift drafts, share links, invitations, coupon redemptions and access entitlements.
- Service and security records: request and connection information such as IP addresses in hosting logs, short-lived hashed rate-limit identifiers, delivery status, and administrative audit records.
- Messages to us: the information you include when requesting help or exercising your rights.
If someone invites you or prepares a gift, they may provide your email address, name or a personal message before you have an account. Contact us if you receive an invitation you did not expect. Please avoid entering sensitive information about yourself or others.
2. Why we use it
We use account details and preferences to provide the service you request: secure access, personalise and select jokes, save your activity, manage complimentary access, and support gifts or sharing. Scheduled deliveries use the choices you explicitly enable.
Where data protection law requires a legal basis, providing your requested account features relies on performing our agreement with you; optional scheduled messages rely on your consent; security, abuse prevention and troubleshooting rely on our legitimate interests in running a safe service; and records required by law rely on the relevant legal obligation.
You can withdraw delivery consent by pausing messages or unsubscribing. Withdrawal does not affect processing already carried out lawfully. Essential verification and recovery messages support your account.
Personalisation uses a reviewed joke collection and your selected preferences. We do not send your details to a generative AI provider to create jokes. Joke selection does not make decisions with legal or similarly significant effects about you.
3. Who receives information
Our hosting and database infrastructure processes information to operate the website. Amazon Simple Email Service (SES), configured in the EU (Ireland) region, processes email addresses and message content to send account and delivery emails. Cloudflare Turnstile checks sign-in and signup requests to help prevent automated abuse and processes browser and connection information for that security check. Domain, network and security providers may also process connection information as part of routing and protecting requests.
The site administrator can access account, access, invitation and delivery records to support users and operate the service. We may disclose information when legally required or where necessary to address fraud, abuse or security incidents.
We do not sell personal information or use third-party advertising trackers. Paid checkout is currently unavailable and we do not collect card details. If payment processing or other material data uses are introduced, we will update this policy before those features start.
Providers may process support, security or service information in countries other than yours. Where a restricted international transfer occurs, applicable data protection law requires an appropriate transfer mechanism. Contact us for details about the providers and safeguards relevant to your information.
4. Public links and other recipients
A public share link lets anyone who has it read the content you chose to share. That can include a name or other personalisation. Revoking a link stops future access through Jokello, but cannot recall copies saved elsewhere. An invitation or gift can disclose the sender’s supplied name and message to the recipient.
5. Cookies and browser storage
We use an essential session cookie to keep you signed in. Sessions expire after seven days, and signing out invalidates the session. A temporary, essential cookie remembers your age confirmation for up to 20 minutes while you complete signup and is cleared after account creation. Disabling necessary cookies prevents account features from working.
A service worker may cache public page assets on your device to help the site load. It does not cache API responses or private account, invitation, gift or share pages. You can clear cookies and website storage in your browser. We do not currently use optional analytics or advertising cookies.
6. Retention and deletion
Account information and saved activity are kept while needed to provide your account. You can change your preferences and delete your account in Account settings. Account deletion removes the account and its linked records as defined by the service; some administrative, security, invitation or delivery records may remain where needed for their original purpose or legal obligations.
Expired sessions and temporary authentication and rate-limit records are cleaned up by the service. Authentication and invitation message bodies are removed from delivery records after delivery or their cleanup period. Routine database backups are retained for 14 days, so deleted information may remain in restricted backups until they expire.
Retention of remaining operational records depends on their purpose and any applicable legal requirements. Contact us to ask about or request deletion of information that remains outside your account.
7. Your choices and rights
You can edit your profile and preferences, pause deliveries, unsubscribe, revoke share links and delete your account. Depending on applicable law, you may also request access, correction, erasure, restriction, a portable copy of your information, or object to certain processing. We may need to verify your identity before responding.
Contact oetoni@gmail.com to make a request. You may also complain to your local data protection authority. For an explanation of rights under the GDPR, see the European Commission’s guidance.
8. Children and policy changes
Jokello accounts are for people aged 18 or over. Signup asks you to confirm this before displaying the account form. If someone under 18 has created an account, contact us so we can investigate and remove it where appropriate.
We will revise this policy when data practices change and update the effective date. Material changes will be brought to your attention through the service or by email where appropriate.