Privacy Policy

Last updated 17 June 2026

What we collect

• Your email address (kept private, used for sign-in and notifications).
• Profile information you choose to provide.
• Photos you upload (public photos are moderated; verification photos are private).
• Limited technical data (hashed IP for abuse prevention and view de-duplication).

What is never public

• Your email address.
• Verification photos (face and full-body) — these are admin-only and never published.
• Your full birthday, unless you explicitly choose to display it.
• Internal admin notes and logs.

How we protect your data

• Sign-in codes and email tokens are stored hashed, never in plain text.
• Verification photos are stored outside the public web root and streamed only to authorised admins.
• Image metadata (EXIF) is stripped on upload.
• Uploaded files are renamed and validated.

Your rights (GDPR-friendly)

You may request access to, correction of, or deletion of your personal data at any time. Use the deletion option in your dashboard or the content removal page. When processed, your profile is removed from public view and your personal data is anonymised.

Cookies & local storage

We use a session cookie for sign-in and local storage to remember your age confirmation and favourites. We do not sell your data.

Contact

For privacy requests, use the removal / data request page.