Privacy
2026-10-24. Short, and binding on the code.
What we keep. Your email (to sign you in), your pseudonym and profile, your photos, your metro, your connections, your messages, which events you said you’re going to, and the age band from the birth date you entered. The date itself is never stored.
What we never keep. Your real name unless you type it at stop 3. Your location beyond the metro you chose. Photo metadata: your phone strips it before upload. A list of who is going to an event: only counts, and the people who both chose to be findable.
Who sees what. The deck sees your first stop: pseudonym, age band, vibe, interests, boundaries, and one cover image you chose (or a pineapple). Everything else is shown per connection, at the stop you set for that person, and can be taken back.
Not public. Profiles are never public pages, never indexed by search engines, never searchable by name. The public parts of this site are the landing page, About, the standards, and the events calendar, which shows venues, dates and counts.
Email. Sign-in links, and, if you turn them on, three bland notices: a new connection, someone wants to connect, a new message. Never a name or a photo in an email.
Cookies. One session cookie and one “I’m over 18” cookie. No ads, no trackers, no analytics beyond counts.
Deleting. You tab → Delete account. Gone within 24 hours; a hash of your email kept 90 days.