Privacy policy

[TO COMPLETE: identity and contact details of the data controller]

[TO COMPLETE: data protection officer contact, if any]

We only collect what serves a visible feature: your email (login and notifications), your date of birth (age check; only your age is shown), your nickname, gender, role (Bad or Visitor), city (never an address or GPS location), photos, Record or Reason for visiting, questionnaire answers, visit requests, visits and messages.

The genders you are looking for may reveal your sexual orientation: this is sensitive data. It is only used to show you compatible profiles, with your explicit consent, which you can withdraw at any time (as the service can then no longer work, account deletion will be offered).

Photo metadata (including GPS location) is removed before upload and checked on our servers.

Once approved, your photos are served from a long, unguessable web address. That address is renewed when you delete a photo, after 30 days on pause and in case of a ban; everything is erased when you delete your account.

[TO COMPLETE: Your photo is cut out automatically and placed on the background of the site.]

We only use strictly necessary cookies (login session, language). No advertising trackers, no external analytics: that's why no consent banner is shown.

Notifications: if you accept them, we send you notifications (visit reminders, new requests) through your browser's notification service (Google for Chrome and Android, Mozilla for Firefox, Apple for Safari). Their content is encrypted and deliberately neutral: never a nickname, a photo or a message. These services only see that a notification is being sent to you. You can turn them off at any time in your settings or your browser's.

To send you these notifications, we keep, for each browser where you turn them on, the subscription address given by that service, two encryption keys and the language of the notifications. This data is erased as soon as you turn notifications off on that browser, or when the service tells us the subscription has expired. You can subscribe 5 browsers at most.

Your data is kept as long as your account exists. An account whose sign-up isn't completed is deleted after 30 days.

After a ban, only an encrypted fingerprint of the email is kept for [TO COMPLETE: duration, 12 months proposed] to prevent re-registration.

Database and files: Supabase, European Union region. Application: Vercel. Emails: Brevo. Anti-bot protection: Cloudflare Turnstile.

[TO COMPLETE: safeguards for transfers outside the European Union]

You can export your data (JSON) and delete your account from your settings. You also have the rights of access, rectification, objection and restriction, and may lodge a complaint with the CNIL.

[TO COMPLETE: contact address to exercise your rights]