Privacy notice

What we collect

• Account: username, email, password (stored hashed), profile type, ages, postcode district.
• Profile: what you choose to add — text, interests, photos. Photos have location data removed on upload.
• Activity: messages, forum posts, events, RSVPs, friends, blocks and reports.
• Technical: your IP address (for security and rate limiting) and a login cookie.

Some profile information may reveal your sex life or sexual orientation. We process it only to run the service you've asked for, based on your explicit consent when you choose to add it. You can remove it at any time.

ID and selfie check

The law requires us to confirm members are 18 or over (Online Safety Act 2023). Our provider, Didit, checks your photo ID and a live selfie on our behalf as our data processor, with processing in the EU. The face match uses biometric data, which we only process with your explicit consent given on the verification page.

We never receive or store your ID document or selfie. Didit tells us only whether the check passed. Didit's retention is set to the minimum needed to complete the check. Our lawful bases are legal obligation (age assurance) and explicit consent (biometric matching).

Who else processes data

• Didit — identity and age verification (EU)
• Brevo — sending account emails (EU)
• postcodes.io — turning your postcode district into an approximate location (we send only the district, e.g. "WV1")
• Our hosting provider — [HOST], servers in [LOCATION]

We never sell your data or use it for advertising.

How long we keep it

Until you delete your account, which removes your profile, photos, messages and posts immediately. Reports you've made may be kept for up to 12 months for safety reasons. Backups are overwritten within [30] days.

Your rights

You can access, correct, export or delete your data, withdraw consent, and object to processing. Email us to exercise these rights. You can also complain to the Information Commissioner's Office (ico.org.uk).