Who we are
Aleksandar DZAVRIC EI (entrepreneur individuel), registered in France under SIREN 944 710 755 (“BeMan”, “we”, “us”), decides how your data is used. Mail: 47 rue Vivienne, 75002 Paris, France.
Privacy questions and requests: privacy@beman.app
What we collect, and why
When you visit this site
Our host, Framer, receives what any website receives: your IP address, your browser type, the page you asked for and the time. Framer uses it to deliver the page and keep the site secure.
We count visits with Framer Analytics. It records the page address (with the campaign tags in the link; on the thank-you page it also includes your payment’s reference), the site you came from, which of our buttons you click, and your browser’s language and time zone. It uses no cookies. To count unique visitors, Framer scrambles your IP address and browser string with a key it deletes every day. We see totals, not people.
Every page also loads Framer’s site-editing tool from framer.com. It checks with Framer whether your browser is signed in to a Framer account, so the people who edit this site can see an editing bar. If you aren’t signed in, it shows nothing. We receive nothing from it.
Why we’re allowed to: our legitimate interest in running, editing and securing a working site, and in knowing how many people visit it (GDPR Art. 6(1)(f)).
When you join early access
Your email address. It puts you on the early-access list: a list of men who want to quit porn. The law treats that as sensitive, because it says something about your sex life. We add you only once you tick the box beside the form. We send you a welcome email. Any later email to the list is about BeMan’s early access and launch, or an offer such as the Founding Pass, as the box says. If someone signs up again with an address already on the list, that address gets a short note instead of a second welcome. Why we’re allowed to: your agreement, given with the box (GDPR Art. 6(1)(a) and 9(2)(a)).
Proof that you agreed. We keep the date and time, the exact wording of the box, the page, your IP address and your browser’s identification string, so we can show you agreed (Art. 7(1)). When you leave, we record that too. After you leave, we keep this proof to defend ourselves if your agreement is ever questioned (Art. 6(1)(f) and 9(2)(f)).
Where you came from. We count new sign-ups per day and per campaign link: the source, campaign and content tags of the link you arrived from (such as “tiktok” and which video), which version of our page you saw, and the page you landed on. We don’t store the tags with your sign-up or on your device; we keep only the daily counts, to see which channels work (Art. 6(1)(f)). Never anything about why you joined.
Anti-spam checks. A hidden field that only bots fill in, a check that the form wasn’t sent less than two seconds after you started on it, a check that your email’s domain can receive mail (only the domain is looked up, sometimes through Cloudflare’s public DNS), and a cap on sign-ups from one network. The cap keeps a scrambled form of your IP address for one day at most. We use no outside bot-check service. Why we’re allowed to: our legitimate interest in a list without bots (Art. 6(1)(f)).
Delivery events. Our email provider tells us whether each email was delivered, bounced or marked as spam. We record that, and whether you left. We use it to stop emailing addresses that don’t work and people who left, and to send announcements only to addresses that work (Art. 6(1)(f)).
Leaving the list. Every list email has an unsubscribe link, and many mail apps show their own unsubscribe button. Leaving stops every list email at once. After you leave, signing up again with the same address doesn’t put it back on the list. Emails about a purchase aren’t list emails: leaving doesn’t stop them.
When you open the checkout
We create a checkout for your browser. It holds a scrambled form of a random code your browser keeps, a scrambled form of your IP address (it caps how many checkouts one network can open at once) and, if the checkout page’s own link carries campaign tags (such as a link in one of our emails), that link’s source, campaign and content tags, the version of the page and the page itself. We hold them only until the checkout is paid or ends; after that we keep only daily counts per campaign of checkouts started and paid, to see which channels bring buyers. We don’t send campaign tags to Stripe.
If you typed your email on our sign-up form in the same tab, the checkout puts it in Stripe’s payment form so you don’t type it twice; you can change it there. The checkout and the payment check on the thank-you page also count requests per scrambled IP address, kept two days at most, so no one can flood them.
Why we’re allowed to: our legitimate interest in a payment page that can’t be abused, and in knowing which channels work (Art. 6(1)(f)).
When you buy the Founding Pass
Your payment. Stripe, our payment provider, collects your email address, your card, and your billing country and postal code. Your card details go to Stripe only: we never see them.
Your purchase. Stripe tells us your email address, the amount, its references for the payment and whether it went through. We keep them with your Founding Pass number and any refund or dispute, to deliver what you paid for, refund you, answer disputes and keep our accounts. Why we’re allowed to: our contract with you (Art. 6(1)(b)) and our accounting duties (Art. 6(1)(c)). A purchase also says something about your sex life: we keep it with your explicit agreement, given with the line above the Pay button (Art. 9(2)(a)), and the records the law makes us keep also to establish or defend legal claims (Art. 9(2)(f)).
Proof that you accepted the Terms of Sale. The line shown above the Pay button, including your agreement that we keep a record of the purchase, the version of the Terms of Sale it links to, and the time you pressed Pay.
Emails about your purchase. Resend sends you the order email, with the Terms of Sale attached, and, if you’re refunded, a refund email. They’re part of the sale, so they have no unsubscribe link, leaving the list doesn’t stop them, and buying never puts you on the early-access list. We’ll use the same address to email you when the app is available. These emails stop only if your address can’t receive mail, if you mark one as spam, or if you ask us to delete your data.
If you withdraw or ask for a refund. On our Withdraw page you give us the email you paid with, your pass number and a few words on why you ask. The page sends the withdrawal statement with them, and we note when we receive it, with a scrambled form of your IP address (it caps how many requests one network can send). Every request gets the same answer on the page, and we email a receipt to the email you typed. The receipt repeats what you sent, except your reason, and when we received it; it never says whether that email matches an order. If the pass number matches an order paid with a different address, we also send a notice to that address. When the email and the pass number match the same order, we refund it in full automatically and email you once Stripe confirms the refund. You can also withdraw by email: a reply to your order email works. We use all this to cancel your order, refund you and keep proof, and we keep it with your order. Why we’re allowed to: the law on withdrawal (Art. 6(1)(c)) and our contract with you (Art. 6(1)(b)).
When you email us
Replies to our emails, and emails you send to hello@, support@ or privacy@beman.app, land in our mailbox at Hostinger. We use them to answer you (Art. 6(1)(f)) and to handle your privacy requests (Art. 6(1)(c)). Please don’t send us details about your health or your habits.
Who handles your data
We use a few providers. Each one works on our instructions under a data-protection contract, except where we say otherwise.
Framer B.V. (Netherlands) hosts this site and counts visits. Its servers are at Amazon Web Services, in the US.
Supabase Pte. Ltd. (Singapore) runs our database in its Paris data center. The code behind our sign-up form, checkout, payment check, Withdraw page and unsubscribe page, behind the unsubscribe link in our emails and behind our scheduled jobs (such as sending queued emails) runs in Paris too. The code that receives Stripe’s and Resend’s notices (payments, refunds, email delivery) runs in the Supabase data center nearest to them, which can be in the US. Supabase’s support staff and some of its own providers are in the US.
Resend (US) sends our emails. It keeps each email and its delivery log for 30 days, plus backups for 7 days.
Stripe (Stripe Payments Europe, Ireland, part of the US Stripe group) takes payments. Stripe also uses payment and device data for its own fraud prevention and legal duties, as a separate controller under its own privacy policy.
If you pay with Apple Pay or Google Pay, Apple or Google handle that step under their own terms.
Hostinger International (Cyprus) hosts our mailbox.
We don’t sell or rent your data, and we don’t share it with advertisers. We disclose it only when the law requires it. If BeMan’s business moves to another company, we’ll email you before it happens. A Founding Pass and its records move only as the Terms of Sale say (section 9). You can leave the list from any of our emails, and the new company may use your data only as this policy says. [TO CONFIRM: whether the list can move to a new company without asking you again]
Transfers outside Europe
Resend and Stripe are US companies. Supabase is in Singapore, with staff and providers in the US. Framer’s and Hostinger’s providers include US companies.
Resend and Stripe’s US company take part in the EU–US Data Privacy Framework (both listed as active, as checked on October 21, 2026), with the European Commission’s Standard Contractual Clauses as a backup (GDPR Art. 45 and 46). For Supabase, and for Framer’s and Hostinger’s providers where needed, transfers rely on those Standard Contractual Clauses (Art. 46). For a copy of these safeguards, write to privacy@beman.app.
How long we keep it
The early-access list (your email address, the proof that you agreed, and the emails we sent you with whether they arrived): while you’re on the list, and at most 3 years after you last signed up; then we delete them. If you leave the list, we delete the emails we sent you 3 years after you leave, and your address with the proof that you agreed 5 years after you leave, in case we ever have to show that you agreed.
Do-not-email list: your address, kept for good. After you leave the list, it keeps the list from emailing you again. After you ask us to delete your data, or if your address stops receiving mail or you mark one of our emails as spam, it stops every email from us, except the receipt for a withdrawal or refund request you send us with that address.
Campaign counts: daily counts per campaign link, kept as counts.
Anti-spam data: the scrambled IP addresses that cap requests, one day at most for sign-ups, two days at most for the checkout, the payment check and the Withdraw page (a copy stays with each checkout and each withdrawal request, as said above).
Purchases (your order, its emails, refunds, disputes, and every withdrawal or refund request): 10 years after the end of the year you bought (for a withdrawal or refund request, the year we received it), as French accounting law requires (Commercial Code, art. L123-22). Then we delete your email address, your withdrawal or refund requests and the scrambled IP address; what stays (pass number, amount, dates and Stripe’s references) holds no name or email.
Checkout records (the line you accepted, the Terms version and the time; a scrambled IP address; campaign tags only until the checkout ends): with your purchase. A checkout that wasn’t paid holds no name or email; we delete it 30 days after it ends.
Emails you send us, and our replies: in our mailbox until 3 years after our last exchange. We clear older exchanges every January.
Our record of your privacy requests (the kind of request, when we got it and answered it, a scrambled form of your address, never the address itself): 5 years, to show we answered.
Our providers’ copies: Resend keeps sent emails and their logs for 30 days, plus backups for 7 days. Supabase keeps request logs for up to 7 days and, on its paid plan, daily backups for 7 days. Framer doesn’t publish how long it keeps server logs.
Cookies and device storage
Cookies. Only the checkout sets cookies, all from Stripe, our payment provider, to prevent payment fraud: __stripe_mid (kept 1 year) and __stripe_sid (30 minutes) on this site, and m (2 years) on Stripe’s own domain. On that page Stripe also reads device and browsing signals, and uses them for its own fraud prevention across its network. We treat them as part of a secure payment, so we don’t ask for consent (French Data Protection Act, art. 82). [TO CONFIRM: whether these Stripe cookies are exempt from consent under art. 82] No other page sets cookies.
In your browser’s session storage (cleared when you close the tab):
bm-entrance: “1”, so the opening animation doesn’t replay. It never leaves your device.
bm-signup: a random code and the time you joined. Never your address. It lets the next page confirm your sign-up.
bm-email: the address you typed, so the checkout can fill it in. When you open the checkout, it’s handed to Stripe’s payment form. It’s deleted when you reach the thank-you page.
In your browser’s local storage:
bm-ck-attempt: a random code and your checkout’s id, so a reload or a second tab never starts a second payment. It never holds your email or your card. It stays until you clear your browser’s data, so anyone using this browser can see that it opened a BeMan checkout.
Framer Analytics stores nothing on your device.
Your rights
You can ask us to show you your data and send you a copy, correct it, delete it, limit its use, or object to our use of it, including any marketing, at any time. Where we rely on your agreement, you can withdraw it any time; that doesn’t undo what we did before. Leaving the list from any of its emails withdraws your agreement to list emails at once.
How to ask. Write to privacy@beman.app, ideally from the address your request is about. We reply only to that address, so no one can get your data by asking in your name. We answer within one month. If a request is complex, we can take up to two more months; we’ll tell you within the first month, and why.
The person who runs BeMan handles each request by hand, with a script that finds, exports or deletes what we hold about an address.
What we may keep. When we delete your data, we keep your address on our do-not-email list, so we never email you again (except the receipt if you later send us a withdrawal or refund request with it), and the purchase records the law makes us keep. Until a Founding Pass is refunded, we also keep the email it was paid with on its order: the pass and its emails run on that address. If you bought a Founding Pass, deleting your data also stops every email about your purchase, including the one telling you the app is available.
You can also complain to a data protection authority: the CNIL in France (cnil.fr), or the authority where you live or work. These rights apply to everyone, wherever you live.
Giving your email is needed to join or to buy. No decision about you is made by automated means, except two built into the sale: a payment that comes after the last pass is gone, or that doesn’t match the price, gets no pass and is refunded in full automatically; and if the app isn’t available by the end of December 15, 2026 (Paris time), every pass is refunded in full automatically.
US state health-data laws
If you live in Washington, Nevada or Connecticut, our Consumer Health Data Privacy Policy explains your extra rights, how to use them and how fast we answer.
Adults only
BeMan is for adults 18 and over. If you’re under 18, please don’t join or buy. If we learn that someone under 18 joined the list, we delete their sign-up and keep only their address on our do-not-email list.
Security
Everything travels encrypted (HTTPS), including between our code and the database. Our database is closed to the public: only our own code reaches it. Your IP address is stored only in scrambled form, except in the proof that you agreed. Only the person who runs BeMan can open the database, plus our providers’ staff where their contracts allow it for support or security.
Changes
If we change this policy in a way that matters, we update the date at the top and, before the change applies, email everyone on the list and, from our mailbox, each buyer at the address they paid with. If a change needs your agreement, we’ll ask for it.
Contact
privacy@beman.app · 47 rue Vivienne, 75002 Paris, France