Privacy policy

Last updated 〔date〕. The controller is 〔legal entity, registered address〕. Questions and requests: 〔notice address〕.

This describes what the service actually stores, checked against the code. Where a section says we do not do something, that is a property of how it is built, not an intention.

1. What we collect

Because you gave it to us

Because the service ran

Age. You warrant that you are 18 or older when you create an account, and that warranty is what gates adult content — behind a paywall, with no separate age-check step. We do not run an age check, receive a document, or use a third-party assurance provider. Where the law where you are comes to require one, we will say so here before it applies to you.

2. What we do not collect

• No third-party analytics, advertising or tracking scripts run on this service today. None — not on the sign-in flow, not anywhere. This is a description of how it is built rather than a promise never to change it, and if it changes you will be asked before it does, because consent is what a tag would make owed (§7).
• We do not sell personal data, and we do not share what you talk about with advertisers or partners.
• No profile of you is built from what you say. We do measure the service — which link brought you, what worked, what broke — and that is §3's legitimate interest, not a portrait of you.

3. Why we are allowed to

We process your email, your conversations and your purchases to perform the contract you entered by using the service.

We process on our legitimate interests — ours and other users' — to keep the service working and safe, to prevent fraud and abuse, to debug it, to measure and improve it, to understand which marketing worked, and to establish or defend a legal claim. You may object to any of that, and where you do we stop unless we have grounds that override yours.

Your interests and appearance preferences are the one thing here we process on your explicit consent. What you are into, and who you want to see, can each say something about you that the law treats as sensitive, even when nothing you picked says it outright. You give that consent once, when you accept our terms on your first visit (Terms §1) — we do not ask for it again. Picking either is optional and the product works the same with none set, and you withdraw the consent by clearing them in your account.

4. How long we keep it

Closing your account deletes your conversations and your account data. Four things survive it, and each has a reason rather than a habit:

• what the law requires us to keep — the fact of a payment, not what it was for;
• a minimal record of the closure itself, so an account closed for fraud, payment abuse or a terms §6 refusal cannot simply be opened again the next day. That record is the identifier and the reason, not the content;
• the record of your consent — which version of the terms you accepted, when, and from where — so we can show that we had it. It names your account and nothing you wrote;
• anything we need to establish, exercise or defend a legal claim, for as long as the claim can be brought.

Aggregate and de-identified information — counts, rates and patterns from which you cannot be identified — is not personal data and is not deleted.

5. Who else sees it

Only who has to, and only what they need:

• The payment provider, to take a payment. They see the payment; they do not see your conversations.
• The infrastructure that runs the service — hosting, storage, the model that generates replies.
• The authorities, where the law obliges us and where the request is lawful.

A business transfer. If the business, or part of it, is sold, merged or reorganised, the data moves with it, under this policy or one at least as protective, and we tell you where the law requires it.

We do not sell personal data.

6. Your rights

You may ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Write to 〔notice address〕. We answer within one month, and where a request is complex or there are several of them we may take up to two months more — we will tell you inside the first month if we do. A request that is manifestly unfounded or excessive, including a repetitive one, may carry a reasonable fee or be refused, and we will say which. You may complain to the data protection authority where you live.

Deleting your account is in the product and does not require writing to us.

7. Storage on your device — and why there is no consent banner

We store four things in your browser, all of them ours and all of them functional:

Plus a session cookie that keeps you signed in.

None of this is tracking, and no third party sets anything. Consent is required for storage that is not necessary for a service you asked for; all of the above is necessary for one you did, which is why you are not asked to agree to it. If that ever changes, you will be asked before it does.

8. Where it is processed

Data is processed in 〔regions〕. Where it leaves the region you are in, it is transferred under the safeguards the law requires.

9. Children

This service is for adults. We do not knowingly hold data about anyone under 18. If we learn we have, we delete it. Report it to 〔notice address〕.

10. Changes

We will post changes here and update the date. Where a change materially reduces your protection, we tell you before it takes effect.