Privacy Policy

This policy explains what GildedDate collects about you, why, who can see it, and how to have it removed. We don't sell your information, and we don't use advertising trackers.

What we collect

• Account: your email address, first name, date of birth, city, which side you joined as (Mentor or Muse) and your password, which we store only as a scrambled hash we can't read.
• Profile: what you choose to add, such as your bio, occupation, education, height, interests and what you're looking for. Mentors may add a lifestyle budget and net worth range.
• Photos: photos you upload. We re-save each one in a standard format, which removes hidden details such as your phone model and GPS location. An automatic check on our own servers scores each photo for nudity, and a member of our team reviews every photo before other members can see it. Photos are stored privately and only shown to signed-in members allowed to see your profile.
• Verification: when ID and selfie checks open, they run through our identity provider, Didit. Your ID photo and selfie go to that provider, not to us. Didit checks the ID is real, that the selfie is a live person and matches the ID photo, and reads your date of birth to confirm you are 18 or older. We keep only the result (passed or not) and the date.
• Messages and activity: messages you send and receive, favorites, blocks, reports you file or that are filed about you, and anything you buy or sell with credits.
• Payments: our payment processor (Stripe) takes your card details on its own secure page. We never see or store your card number. We keep a record of what you bought and a customer reference from the processor.
• Contact form: your name, email and message.
• Technical: cookies that keep you signed in and remember that you passed the age check, and your IP address, which we use to limit repeated sign-in and sign-up attempts and clear out after about a day. Our sign-up, contact and password reset forms may show a short bot check from Cloudflare (Turnstile), which looks at your browser to tell people from bots. Our hosting provider also keeps short-lived server logs.

Why we use it

• To run your account, show your profile to other members and deliver your messages.
• To keep the site safe: confirming members are real adults, screening messages and profiles for solicitation, scams and threats, and investigating reports.
• To take payments and give you what you paid for.
• To answer you when you contact us.
• To meet legal duties, including reporting suspected child sexual exploitation to NCMEC and responding to valid legal requests.

Who can see what

• Other members see your profile: first name, age (not your birth date), city, bio and the details you add. They never see your email, birth date or member ID. They see your photos only after our team approves them.
• GildedDate staff can see your account to support you and keep the site safe. They read a conversation only to investigate a report, a message our filters flagged, or a legal request, and every time they do it's recorded in a log they can't edit. See the Terms for details.
• Service providers that run parts of the site for us, under contracts that limit their use of your data to that job: Vercel (hosting), Supabase (database), Stripe (payments), Didit (ID and selfie checks), Resend (sending account emails such as confirmation and password reset links), Google Workspace (our own email, when you write to us) and Cloudflare (domain and bot checks).
• Authorities, when the law requires it or when someone's safety is at risk, including NCMEC reports of suspected child exploitation.

We don't sell or rent your information, and we don't share it for advertising.

How long we keep it

• Your account, profile and messages are kept while your account is open.
• When you delete your account, we remove your profile so no one can see it and delete your account data, except what we must keep for safety or the law: records of reports, enforcement actions and payments. Your photos are deleted too, unless one is held as evidence for a report to NCMEC, which the law requires us to keep.
• Contact form messages are kept until your request is resolved and for a reasonable time afterwards.

Your choices and rights

• You can view and edit your profile at any time from Account.
• You can ask for a copy of your data, a correction, or deletion of your account through our contact form. You can also delete your account yourself at the bottom of the Account page.
• Depending on where you live, including California and other US states, you may have further rights to know, correct and delete your information and to not be treated differently for using them. We honor these requests for all members.

Security

Passwords are hashed, connections are encrypted, our database can't be reached from the public internet without credentials, and staff access is logged. No system is perfectly secure, so use a password you don't use anywhere else.

Adults only

GildedDate is only for people 18 and older. If we learn that someone under 18 has an account, we close it and delete their information.

Changes and contact

If we change this policy in a way that matters, we'll tell members on the site before it takes effect. Questions or requests go through our contact form or to aaron@gildeddate.com.