Privacy policy
Last updated 11 October 2026
This policy explains what we collect, why, and your rights under the New Zealand Privacy Act 2020.
What we collect
- Account details: email, username, password (stored as a one-way hash) and date of birth.
- The optional "about me" details you add: display name, region, a short bio.
- Your contact list, the messages you post in rooms, group chats and private messages.
- Your profile photo, if you upload one (re-saved at a small size without location or camera data), and your display name and username.
- Your settings, including whether you've switched R18 channels on and when.
- Payment records: amount, date, status, the coin you paid with and the invoice reference from our crypto payment provider. Crypto payments are recorded on a public blockchain, which we don't control.
- Photos you send in private messages (re-saved without location or camera data) and whether you've allowed photos from each contact.
- Basic technical data: IP address for security and rate-limiting, and when you were last active.
How we use it
- To run your account, the chat rooms, your contact list and private messages.
- To keep the site safe: checking ages, handling reports and preventing spam and fraud.
- To send account emails such as password resets. No marketing without your permission.
Who can see what
- Other members see your username, your "about me" card and what you post in rooms. Your email and date of birth stay private; only your age shows.
- Only contacts you've accepted can see whether you're online, and you can hide that completely.
- Nothing from inside the site is public or shown to search engines — the public site is just the login screen.
- A photo you send is visible only to the person you sent it to, while you're both in the conversation and until it expires or you unsend it.
- Moderators can read reported messages, and view reported photos, when reviewing them.
Who we share it with
We use service providers to host the site and database, send email, store photos and process crypto payments. They only process data for us. We share information with authorities when the law requires it or to report serious crime. We never sell your data.
How long we keep it
While your account is open. Photos in private messages are deleted automatically after 7 days (sooner if unsent). A reported photo that breaks the rules is kept, hidden, as evidence until it's no longer needed for an investigation. When you delete your account we remove your profile, contacts, photos and the messages you've posted. We keep payment records for as long as tax and accounting law requires (seven years in New Zealand), without your name or email attached.
Your rights
You can ask to see or correct the personal information we hold about you by emailing support@example.com. If you're unhappy with how we handle a request, you can complain to the Office of the Privacy Commissioner.
Cookies and Google tags
- Always: a sign-in cookie, a cookie that remembers you've confirmed you're 18+, and one that remembers your cookie choice.
- On our public pages and the sign-up and payment pages only, we use Google Tag Manager and Google Ads tags to see which pages and ads bring people to the site and how many go on to join. These tags never run inside the members' area — not in rooms, contacts, conversations or settings.
- Google can only set or read its cookies after you click Accept on the cookie banner. If you click No thanks, or ignore it, Google only receives basic, cookieless signals (for example, that a page was viewed), with ad click identifiers removed.
- We never send Google your name, email, username or anything you say on the site, and we don't use advertising profiles or remarketing based on your visit. When you join, we tell Google only that a sign-up or a payment happened (and the amount).
- To change your choice, clear the "consent" cookie for this site in your browser and reload. See how Google uses information from sites that use its services.