Manufar sirri

This is the short version. The full policy below is what applies, but these are the promises the rest of it is built around.

• We collect what you give us to build a profile and meet people, plus the technical minimum needed to keep the service running and safe.
• We never sell your information, never share it for advertising, and do not use third-party advertising or tracking tools. The one exception is the YouTube player you open yourself in a Vibe: it may show YouTube's own ads.
• Dating can reveal very personal things, such as who you are interested in. We treat that with extra care and use it only to show you people and to show you to people.
• You decide who sees your posts, who can message you and who you match with. You can unmatch or block anyone at any time.
• Suggestions are ordered by rules we can explain, such as shared interests. There is no hidden attractiveness score.
• You can see, correct, download and delete your information, and you can contact us at any time.
• Flirtuso is for adults only.

Flirtuso is operated by [Company legal name], registered in [Country of registration], with its address at [Registered address] ("Flirtuso", "we", "us"). We are responsible for (the "controller" of) the personal information described in this policy.

This policy applies to the Flirtuso website and web app and to everything you do in them: your profile, the dating deck, likes, matches, Portals, messages, posts, Dimensions and notifications. It does not cover other websites you reach through links that people share.

Where the law requires one, our representative in the European Union is [EU representative name and address] and our representative in the United Kingdom is [UK representative name and address]. Data protection officer: [Data protection officer contact, if appointed]. For anything about your privacy, write to [email protected].

Most of what we hold comes directly from you, when you sign up and as you use the app.

• Account details: username, password (we store only a one-way cryptographic hash of it, never the password itself), your email address if you add one, a short public identifier we generate, and the version and date of the Terms and Privacy Policy you accepted.
• Profile: display name, date of birth (used to confirm you are 18 or over and to show your age), gender, up to five interests, a bio and a profile photo.
• Dating choices: the people you like or pass on, any short "hello" note you add to a like, your matches and unmatches, and your preferences for who you want to see (genders and an age range).
• Portals: the invitations you post and the interest attached to them, the hands you raise on other people's Portals with any note, and whether you accepted or declined the responses you received.
• Messages and media: direct and group chats, the photos, videos, voice notes and other files you attach, reactions, and message status such as delivered and read.
• Social activity: posts and who they are shared with, comments, reactions, bookmarks, friend requests, friendships, follows, the Dimensions you create or join and your role in them, and the people you block.
• Settings: who may message you (anyone, friends and matches, or matches only), and your language and display preferences.
• Reports and requests: what you tell us when you report someone or something, and what you write to us when you ask for help or exercise a privacy right.

Some information is created as you use the service, and some comes from what other members do.

• Session and security data: IP address, browser and device type (user agent), sign-in times, session identifiers and when a session was last used. We use this to keep you signed in, notice suspicious sign-ins and protect accounts.
• Activity and status: when you were last active, which also helps order the dating deck, and whether you are online right now, which the people you chat with can see.
• Service logs: technical records of requests and errors kept by our servers so we can run, fix and protect the service.
• File details: the name, type, size and a checksum of each file you upload. When you upload a photo (JPEG, PNG, WebP or AVIF), we re-encode it and remove all data your camera embedded in it, including when and where it was taken; we keep only a note of whether such data was present. GIFs and videos are stored as you upload them, so data embedded in them may remain inside. We recommend turning off location tagging before you record a video.
• From other members: other people create information that relates to you when they like or pass on you, match with you, message you, add you to a group chat or Dimension, respond to your Portal, or report you.
• We do not collect your precise location, your contacts or your device's photo library, and we do not buy information about you from data brokers.

Some information on a dating service is especially personal. Your gender and the genders you want to meet may reveal your sexual orientation, and your bio, posts, interests, Dimensions and messages may reveal things such as your religion, beliefs, health or sex life. Many laws treat this as sensitive or "special category" information.

Sharing any of it is your choice. Where the law requires a legal basis for it, we rely on your explicit consent, which you give by adding it to your profile or preferences. We use it only to provide the features you chose: to show you people who fit your preferences and to show you to people whose preferences you fit.

We never use sensitive information for advertising, never sell it, never try to infer it from your behaviour, and never label you with categories you did not choose. Your dating preferences are not shown on your profile. You can change or remove this information at any time in your profile and preferences, which withdraws your consent for the future; some features, such as the deck, may then show fewer people.

We use information only for the reasons below. After each one is the legal basis we rely on, explained in the next section.

• To create and run your account, sign you in and keep your session secure. (Contract)
• To show you a deck of people who fit your preferences and to show you to people whose preferences you fit; to record likes and passes, create matches and open the conversation that comes with a match. (Contract; explicit consent for sensitive information)
• To deliver messages, Portals, posts, comments, reactions, Dimensions and notifications to the people they are meant for. (Contract)
• To suggest people, Dimensions and posts that share your interests, and to show which interests you have in common. (Contract)
• To check that every member is at least 18. (Contract; legal obligation)
• To keep the community safe: preventing spam, scams, fake accounts and abuse, limiting how often some actions can be repeated, reviewing reports and enforcing our Terms. (Legitimate interests; legal obligation)
• To answer your questions and requests, including requests to exercise your privacy rights. (Contract; legal obligation)
• To keep the service working and make it better, for example by investigating errors and performance problems. (Legitimate interests)
• To comply with the law, respond to valid legal requests, and establish or defend legal claims. (Legal obligation; legitimate interests)
• To protect someone's life or physical safety in an emergency. (Vital interests)

Where laws such as the EU and UK General Data Protection Regulation (GDPR) apply, every use of your information needs a legal basis. We rely on the following:

• Contract: the processing is needed to provide the service you signed up for under our Terms.
• Consent: for sensitive information you choose to share, and for anything else where we ask you. You can withdraw consent at any time; this does not affect anything done before you withdrew it.
• Legitimate interests: keeping members and the service safe, preventing fraud and abuse, and fixing and improving the service, where those interests are not overridden by your rights. You can object to this processing, as described in "Your rights and choices".
• Legal obligation: when the law requires us to keep, disclose or act on information.
• Vital interests: in the rare case where we need to protect someone's life.

The dating deck shows you people who meet your preferences and whose preferences you meet, who are adults, whom you have not answered before, and with whom there is no block in either direction. Among them, people are ordered by how many interests you share, then by whether they have a profile photo, then by how recently they were active.

Suggestions of people, Dimensions and posts work the same way: they include only what you are allowed to see, they are ordered by shared interests, and the shared interests are shown alongside each suggestion. We do not use a hidden score, an attractiveness rating or machine-learning profiling, and no decision with legal or similarly significant effects on you is made by automated means alone. Decisions to restrict or suspend an account are taken by people.

• Your profile: your display name, username, profile photo, age, gender, interests and bio are visible to signed-in members. Your email address, full date of birth and dating preferences are not shown to them.
• Likes and passes: a person you like can see your like, and any hello note, in their list of likes. A pass is never shown to anyone.
• Matches and chats: when you match, a conversation opens with your hello notes as its first messages. People in a conversation see your messages, reactions and read status, and whether you are online. If either of you unmatches, the conversation closes.
• Portals: Portals are never anonymous. Other members see a Portal together with your profile card, and the author of a Portal sees everyone who raised a hand, with their notes. A declined response is not announced to anyone.
• Posts: "Everyone" means all signed-in members, "Friends only" means your accepted friends, and "Only me" means just you. A post inside a Dimension is visible to whoever can see that Dimension instead.
• Dimensions: a public Dimension and its posts are visible to signed-in members; a private Dimension is visible only to its members. Members of a Dimension can see who else belongs to it.
• Blocking: when you block someone, neither of you can see the other's profile or content, message the other, or appear in the other's deck.
• Anything you share can be copied by the people who can see it, for example with a screenshot. Please share with that in mind.

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and Flirtuso's own pages contain no third-party advertising or analytics trackers (the YouTube player in a Vibe is explained separately below). We share information only in the following cases:

• With other members, as described above and according to your settings.
• When you open a Vibe to listen to a song together, your browser loads YouTube's player (from youtube-nocookie.com), and from then on YouTube's own terms and privacy policy apply to what happens in that player, including any ads it shows.
• With service providers that host our servers, store files and provide network, security and content-delivery services ([Hosting and infrastructure providers]). They act only on our instructions, under contracts that require confidentiality and security.
• With police, courts, regulators or other authorities when the law requires it, in response to a valid legal request, or when we believe in good faith that it is necessary to prevent fraud or to protect someone from serious harm. We check each request and disclose only what is needed.
• With a buyer or successor if [Company legal name] is involved in a merger, acquisition, reorganisation or sale of assets. This policy will continue to protect your information, and we will tell you before it becomes subject to a different policy.
• With anyone else only when you ask us to or give your consent.

Our servers are located in [Server location(s)]. If you use Flirtuso from another country, your information will be transferred to that location and stored and processed there, and our service providers may process it in other countries too.

When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland to a country that has not been recognised as providing adequate protection, we use recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, with additional measures where needed. You can ask for a copy of the safeguards that apply by writing to [email protected].

We keep information only for as long as we need it for the purposes in this policy. In practice:

• Account and profile: for as long as your account is open.
• Sign-in sessions: up to seven days unless renewed by using the app. A session ends immediately when you sign out, and changing your password ends all your other sessions.
• Unfinished uploads: discarded after 24 hours.
• Portals: shown to others only until they expire (at most 24 hours after posting) or until you withdraw them. The record stays with your account until the account is deleted.
• Content you delete: removed from view for everyone straight away and permanently erased within [Deletion period, e.g. 30 days], unless it must be kept for one of the reasons below.
• When your account is deleted: your profile, content and messages are hidden from everyone at once and all your sessions end. For 7 days you can take it back simply by signing in; after that your information is erased or anonymised — your account is reduced to an anonymous placeholder so other people's conversations keep their shape, with your messages' content removed. Backup copies are overwritten within [Backup retention period, e.g. 35 days].
• Messages: a message stays visible to the people in a conversation until you delete it, the conversation's history is cleared or the conversation is deleted, or your account is deleted.
• Reports, moderation decisions and audit records: for [Moderation record retention period, e.g. 3 years] after the decision, so we can deal with repeat abuse, appeals and legal claims.
• Server logs: for [Server log retention period, e.g. 90 days], unless they are needed to investigate a specific security incident.
• Information we are legally required to keep, or that we need for an ongoing dispute or investigation, is kept until that need ends.

We protect information with measures suited to the risk, including encrypted connections (HTTPS), one-way password hashing, short-lived access tokens, a sign-in cookie that page scripts cannot read, sessions that end when you sign out or change your password, permission checks on every request, rate limits, restricted staff access and an audit log of moderation actions.

No online service can be perfectly secure. Use a strong password that you do not use anywhere else, and tell us straight away if you think your account has been compromised. If a breach affects your information in a way that puts you at risk, we will inform you and the relevant authorities as the law requires.

Depending on where you live, the law gives you some or all of the rights below. We offer them to every member wherever they live, although their exact legal scope can vary.

Many choices are available in the app: edit your profile, interests and dating preferences; choose who may message you; unmatch; block; leave a Dimension or group; and delete posts, comments, messages and Portals. You can also download a copy of your data and delete your account yourself, under Profile → Security. For anything else, write to [email protected] from the email address on your account or tell us your username. We may ask you to confirm it is really you, so that nobody else receives your data. We reply within one month (extendable where the law allows), free of charge, and we never treat you differently for using your rights.

• Access: ask whether we hold information about you and receive a copy of it.
• Portability: receive the information you gave us in a structured, commonly used, machine-readable format, or have it sent to another service where technically possible.
• Rectification: correct inaccurate or incomplete information. You can edit most of your profile yourself.
• Erasure: ask us to delete your information or your whole account.
• Restriction: ask us to pause using your information while a concern is being checked.
• Objection: object to uses based on our legitimate interests. We will stop unless we have compelling grounds, such as someone's safety, that override your interests.
• Withdrawing consent: change or remove sensitive information and settings at any time.
• Complaint: complain to a data protection authority, in particular in the country where you live or work or where the issue happened. We would appreciate the chance to put things right with you first.

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia, Texas or Oregon, this section applies in addition to the rest of this policy.

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above: identifiers (username, email address, IP address, account identifiers); characteristics of protected classifications (age, gender); internet or other network activity (sign-ins and activity in the app); audio, visual and similar information (photos, videos, voice notes); and sensitive personal information (account sign-in credentials, the contents of messages, and information that may reveal sexual orientation). We disclose these categories for business purposes only to the recipients described in "When we share information".

We do not sell personal information or share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We use sensitive personal information only to provide the service and keep it safe, which the law permits without an opt-out. We do not knowingly collect personal information from anyone under 18. Because we neither sell nor share, an opt-out preference signal such as Global Privacy Control has nothing to switch off, but we honour it.

You have the right to know about, access, correct and delete your personal information and to receive it in a portable format, and you will not be discriminated against for exercising these rights. You may use an authorised agent, whom we may ask to show your signed permission. If we decline a request, you may appeal by replying to our decision; if you are still not satisfied, you may contact your state attorney general.

Flirtuso stores only what it needs to work. We set no advertising, analytics or cross-site tracking cookies, which is why we do not show a cookie banner. When you open the YouTube player in a Vibe, YouTube may use its own cookies or similar storage, under its own policy. If that ever changes, we will update this policy and ask for consent where required.

• Sign-in cookie: keeps you signed in securely. It is HttpOnly (page scripts cannot read it), is sent only to our servers, and lasts up to seven days.
• Language cookie: remembers the language you chose, for up to one year.
• Theme setting: your light or dark theme is remembered in your browser's local storage, on your device only.
• Visit flag: a value in your browser's session storage so the loading animation plays only once per visit. It is removed when you close the tab.
• You can clear all of these in your browser settings at any time. Clearing the sign-in cookie signs you out.

Flirtuso is only for people aged 18 or over, or the age of majority where they live if that is higher. We check age from the date of birth given at registration and do not knowingly collect information from anyone younger. If we learn that an account belongs to a minor, we close it and delete its information, keeping only what we need to stop the person from returning and to meet legal duties. If you believe a minor is using Flirtuso, please report the profile or write to [email protected].

We will update this policy when the service or the law changes. The date at the top of this page shows when it last changed. If a change is significant, we will tell you in the app before it takes effect and, where the law requires it, ask for your consent again.

Questions, requests or complaints: [email protected], or by post to [Company legal name], [Registered address].