DRAFT
Placeholder Privacy Policy. The final version will be reviewed by a lawyer before public launch.
Privacy Policy
Last updated: June 4, 2026
What we collect
When you sign up, we collect the email address and date of birth you give us, plus a securely-hashed copy of your password (never the plain text). When you use the site, we record the IP address and user-agent of your requests for security and abuse prevention. Once profile creation is live, we will also store the profile information you choose to share and any photos you upload.
What we do not collect
We do not use Google Analytics, Facebook Pixel, or any other third-party analytics tool that tracks individual users. We do not sell, rent, or trade your personal data. We do not embed third-party advertising. The site sets one cookie, which is required for keeping you signed in; we do not set tracking cookies.
How we use what we collect
We use your data to operate the service: to authenticate you, to show your profile to other users you have chosen to be visible to, to deliver messages between consenting users, to detect and prevent abuse, and to send the small handful of transactional emails you would expect (verifying your email, password resets, notifications about your account). We do not send marketing emails.
Who we share it with
We share data only with the small number of service providers we need to run the site: Amazon Web Services for hosting and email delivery; Cloudflare for DNS and email routing; a payments processor if and when we add paid features. We do not share your data with advertisers, data brokers, or anyone else without your specific consent or a lawful demand we are required to honor.
How we keep it safe
Passwords are hashed with argon2id; we never store plaintext passwords. All traffic between you and the site is encrypted with TLS. Database backups are encrypted at rest. We follow the principle of least privilege internally and audit access to user data. No system is perfect; if we ever discover a breach affecting your data, we will notify you promptly.
How long we keep it
We keep your account data for as long as your account exists. When you delete your account, we will deactivate it immediately; some data is retained for a short grace period (currently thirty days) in case you change your mind, and a smaller amount (such as audit logs and aggregated abuse signals) is retained longer for security and legal reasons.
Your rights
You can access, correct, export, and delete your data at any time from your account settings. If you live in California, you have specific rights under the CCPA and CPRA, including the right to know what categories of personal information we have collected and the right to delete it. If you live in the EU or UK, the GDPR gives you similar rights. To exercise any of these rights, write to privacy@necromance.love.
Children
The service is for adults. We do not knowingly collect data from anyone under eighteen. If you believe we have, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. If the change is material we will email registered users and post a notice on the site at least thirty days before it takes effect.
Contact
Questions about your data? Write to privacy@necromance.love.