1. The principle
On this site a data leak is not a technical incident: it can expose someone to blackmail, to a broken family, or to prosecution depending on the country. So we collect the minimum and keep it for as short a time as possible.
We sell no data. We pass none to any advertising broker. There is no third-party advertising tracker anywhere on this site.
2. What we collect
Account: username, email address, hashed password, account type, language.
Listing: the content you publish yourself, including your date of birth, your city and your contact details.
Verification: a check photograph and an identity document, only if you ask for your profile to be verified.
Technical: IP address and connection logs, kept for security and abuse limiting.
Messages: what you write in the site's messaging, kept so that each party can read their own conversations.
Activity: your favourites, the reviews you leave, and the reports you file. A report keeps the address it was filed from — filing one needs no account, but it is not anonymous towards us, and that is what limits coordinated false reporting.
3. Legal bases
Performance of the contract, for everything needed to run the account and publish listings.
Legal obligation, for retaining material connected to reports of illegal content.
Legitimate interest, for preventing fraud and abuse.
Consent, for identity verification, which you are free not to request.
Some of this is special-category data in the GDPR's sense, because a listing — or a favourite, or a message — can say something about sex life. For the content of a listing, the basis is that its author has manifestly made it public by publishing it. For favourites and messages, the basis is your explicit consent: those features do nothing until you choose to use them, serve nothing else, and can be emptied at any time.
4. Who receives it
The people doing moderation and support see what their task requires, nothing more.
Technical providers — hosting, email delivery, payment processing — act as processors under contract and receive only what their function needs.
If data leaves the European Economic Area, it does so under safeguards the GDPR recognises: an adequacy decision or standard contractual clauses.
5. Location
A listing shows a city and possibly a district. No precise address is ever asked for, stored or published.
The coordinates attached to a listing are those of the city centre, never those of the person.
Every photograph is re-encoded on upload, which strips all of its metadata, including the GPS position recorded by the camera.
6. Retention
Active account: for as long as it is in use.
Deleted account: the account is closed and the record of it is kept. Your listings come off the site and you can no longer sign in, but nothing is erased.
Identity documents: erased as soon as the verification decision is made. They are never kept just in case.
Technical logs: twelve months at most.
7. Your rights
You can ask for access to your data, its correction, its erasure, and an exportable copy in a readable format.
Deleting your account closes it: your listings come off the site, you can no longer sign in, and your email address becomes free to register again. The record itself is retained, to establish and defend legal claims and to meet our obligations regarding illegal content. You can still ask us to erase it, and we will tell you what is kept and why.
You may complain to the data protection authority in your country.
You can also object to any processing based on our legitimate interest, ask for processing to be restricted while a disagreement is examined, and withdraw a consent at any time — withdrawal does not undo what was lawfully done before it.
8. Security
Passwords are stored as hashes computed with a tunable-cost algorithm. They are never readable, including by us.
Traffic is encrypted in transit. Access to verification material is restricted to the people carrying out the review.