IN DEVELOPMENT

Privacy

Spotydate stores account details, profiles and member conversations in its private server database. Verification and password-reset emails are processed by the configured mail relay and downstream mail providers. Local development can show test links instead of sending email. Optional AI demo profiles are fictional and use scripted replies; member messages are not sent to a generative AI provider. Optional Google services on public pages are described below. No third-party translation integration is active.

First-party visitor statistics store daily aggregate page counts, estimated visits, broad referral-source categories and, only when a trusted proxy supplies it, country codes. We do not store IP addresses, account identifiers, full referring URLs, page query strings or member/conversation IDs in these statistics. These internal statistics do not use tracking cookies and are separate from optional Google Analytics. A timestamp in your browser tab's session storage estimates a new visit after 30 minutes of inactivity; these are not unique-person counts. Do Not Track and Global Privacy Control signals are respected. Daily aggregates cover up to 90 days; older rows are removed when another event is recorded. Statistics are visible only to administrators.

Optional Google services

Google Analytics (G-XC010MY1SW) loads only after you choose Allow analytics, and only on the homepage, Privacy, Terms and Contact pages. It may set analytics cookies and Google receives technical connection data such as your IP address. We send only fixed public page addresses and names, not query strings, referring URLs, account identifiers, profile details or chat contents. Google signals and advertising personalization are disabled for analytics. Member, authentication and administrator pages do not load these scripts.

Google AdSense (ca-pub-4081178715920784) is prepared for public-page advertising but remains disabled until the operator enables it after setting up Google's certified consent message. When enabled, advertising also requires your advertising opt-in and Google's separate consent flow. AdSense may access cookies/device information and process technical data for advertising under those choices. This site's cookie settings are not a Google-certified consent platform.

Your optional-service choices are stored in your browser's local storage. Use Cookie settings at the bottom of any public page to change or reject them; the page reloads to unload optional scripts. Previously created Google cookies and provider records are not erased by changing this choice; you can remove cookies through your browser. Do Not Track and Global Privacy Control prevent both integrations from loading. Google's provider retention and international processing are subject to its policies and the operator's configuration. Read Google's privacy policy and how Google uses information from partner sites.

Feedback submitted through the member menu is emailed to [email protected] with your display name and verified email so support can reply. Feedback bodies are not stored in the site database; the receiving mailbox and mail providers may retain them. Failed submissions are not queued.

This page describes application behavior. The operator still needs to complete the legal notice with processing purposes, lawful bases, retention periods, user rights and contact details.

Member chats and shared photos are stored on the server, not end-to-end encrypted. Photo access requires a current authorized conversation membership. Chat photos are included in private account exports and database backups, and are deleted when their messages or conversations are deleted. Deletion cannot remove copies already saved by another participant or stored in existing backups.

Chat photos are automatically checked for potentially explicit content using a local model; photos are not sent to an external AI service. Flagged and unchecked photos are hidden until you choose to view them. Automated checks can make mistakes and cannot guarantee that a photo is safe. The stored verdict is included in exports and backups. Personal chat backgrounds are stored privately for your account and are included in your export and removed with your account.

Location and profile preferences

City suggestions are enabled by default. After three typed characters, the city query is sent through our server to Photon/Komoot, an external OpenStreetMap provider. The provider receives the query and server IP, not your account identifier. Normalized city queries/results are cached on our server for up to 24 hours to reduce repeated requests. City data © OpenStreetMap contributors.

Focusing or clicking City can ask your browser for location permission once per tab session. You may refuse and type instead. A session-storage flag prevents repeated requests; it contains no coordinates. If allowed, your position is rounded to 0.1 degrees before it is sent to the server and Photon to suggest towns. Rounded coordinates may be reused in memory until reload, but are not saved in browser storage. Confirm a result yourself. Only the selected town centre is saved privately, and members see approximate straight-line distance, never your city or coordinates. You can change your city once every 24 hours; an administrator can correct it sooner. The last change timestamp is retained with your profile.

Identity visibility is your choice. Who you want to meet and your search radius stay private; optional smoking, drinking and children-wish answers are shared on your profile. Your birth date is private; other members can see your age.

Profiles must contain at least two accepted photos and the required details before they appear in discovery. New valid profile photos publish without routine prior staff approval. Uploads are technically checked and stripped of source metadata, but these checks do not verify identity or authenticity. Upload-rate limits apply. Avoid putting your home address or private contact details in public answers. Homepage portraits are illustrative licensed stock photography, not actual members or endorsements.

Authorized administrators can search accounts and manage safety restrictions. Opening account management displays stored profile photos and photos that account sent in chat. For safety moderation, administrators can also review the account's current direct and joined group conversations, including messages and photos from all participants. Every message-page and private image read is audited; review does not mark messages read for members. Administrators can remove individual profile/sent chat photos or permanently remove ordinary accounts and their associated profile, sessions, media and conversations from the live database after confirmation. Immutable safety history and existing backups can retain identifiers or historical information. Chats and photos are not end-to-end encrypted. Removed messages/media are not recovered by the account-review tool, but copies saved by others may remain.

This is not a complete legal privacy notice.