Privacy

Your account. Your email address and a password that is stored only as a bcrypt hash — we can’t read it and can’t tell you what it is. Also when you signed up and when you were last active.

Your profile. Your name as you give it, your date of birth, your gender and pronouns, who you want to be shown to and who you’re looking for, your town or city, your photos, your bio, your answers to prompts, your interests, and the lifestyle answers you choose to give — smoking, drinking, and children.

What you do here. Interests you send and receive, matches, messages, people you’ve blocked, and reports you make or that are made about you.

Technical. Our servers keep ordinary request logs, which include IP addresses. Your IP address is also used briefly to rate-limit sign-ins and sign-ups, which is what stops someone guessing passwords in bulk.

Some of this is sensitive by law. Who you’re looking for can say something about your sexual orientation, and being on a dating site at all is information about your personal life.

We use it for one thing: deciding who to show you and who you appear to. We don’t use it to infer anything about you, we don’t profile you with it, and we don’t disclose it to anyone for their own purposes. Under California law you may limit the use of sensitive personal information — here it is already limited to what the service itself requires.

We keep your location at the level of a town or city, not a street. The coordinates we store are the centre of the place you chose, which is what the distances on the site are measured from. We don’t read your device’s GPS and we never ask for it.

Photos are re-encoded the moment you upload them, which strips the metadata cameras attach — including the GPS coordinates a phone records in a photo file. That happens whether or not you know the metadata is there, because usually nobody does.

Other people using the site, which is the point: your profile is visible to signed-in members who match your filters and whose filters you match. Your email address is never shown to them.

Four companies that run the machinery. Fly.io hosts the site, Tigris stores the photos and database backups, Resend delivers the email, and Stripe takes the payments. They process this only to provide those services to us, not for themselves.

Stripe, only if you subscribe. Your card details go to Stripe and never to us — we could not show them to you if we wanted to. What we keep is a Stripe customer reference, whether the subscription is running, and when the paid period ends. That is the whole of it: enough to know whether to lift your daily limit, and nothing about what you bought or with what.

Nobody else. We do not sell or share personal information, and we never have. There is no advertising on this site and no third-party analytics. We would disclose information if the law required it, and we would tell you unless we were forbidden to.

One cookie, which keeps you signed in. It isn’t used to follow you anywhere and there are no cookies from anyone else, which is why this site has no cookie banner asking you to accept anything.

Alerts about interests, matches, messages and news are each switchable in settings, and every one carries an unsubscribe link that works in one click without signing in. Mail about the account itself — confirming your address, resetting a password, telling you an account has been suspended — has no switch, because it is the site talking to you about your own account.

Until you delete it. Deleting your account in settings is immediate and takes your profile, photos, messages, matches, interests and blocks with it. There is no grace period and no way for us to undo it, so be sure.

Two things outlive an account, and you should know about both. Messages you sent remain visible to the person you sent them to, because a conversation is not only yours to erase. And if an account is deleted while suspended, we keep a one-way hash of the email address so the same address can’t immediately sign up again — the address itself is not stored, and the hash can answer that one question and nothing else. It cannot be reversed or turned back into a mailing list.

Whatever your jurisdiction, you can ask us to show you what we hold about you, correct it, or delete it. If you are in California you have these rights specifically: to know what is collected and why, to delete it, to correct it, to opt out of sale or sharing — which does not arise, as we do neither — and to limit the use of sensitive personal information. We won’t treat you differently for exercising any of them.

Most of this you can do yourself and instantly in settings. For anything else write to support@anterosagora.com. We may need to confirm you control the account’s email address before acting, which is protection for you rather than an obstacle.

Traffic is encrypted in transit. Passwords are stored as bcrypt hashes and never in a readable form. Photos are served through the site rather than from a public bucket, so a deleted photo is gone rather than sitting on a content network. Sessions can be ended everywhere at once by changing your password.

No service can promise it will never be breached. If one happened and it put you at risk, we would tell you.

This site is for people aged 18 and over. We don’t knowingly hold information about anyone younger, and we delete it if we find it.

If we change this in a way that matters, we’ll say so on the site or by email before it takes effect. The date at the top is when it last changed.

The business responsible for this information is Anteros Agora LLC, a California limited liability company.

Write to support@anterosagora.com.