Privacy notice
Version 2026-10-20.1
Controller and contact
JACEK DZIURDZIKOWSKI, at the address below, is responsible for your personal data. For access, correction, erasure, restriction, objection, portability or consent withdrawal, contact support@transgender-dating-portal.com. We may request proportionate identity confirmation, not your password. We normally respond within one month; where law allows an extension, we explain it.
What we process and why
- Account and service: email, hashed password, display name, birthdate, language, account status, accepted document version and consent times; profiles, likes, introductions and conversations. We use these to provide the service you request (GDPR Article 6(1)(b)). Required fields are needed to create and operate an account; optional biography, photos and location permission remain your choice.
- Sensitive profile information: gender identity, relationship preferences and content can reveal sex life, sexual orientation or health information. We ask for separate explicit consent to process this information for dating discovery, profile display and communication (Articles 6(1)(a) and 9(2)(a)). Do not include medical records or other unnecessary sensitive details.
- Location: selected country/city and coordinates support geographic search. Optional browser location helps select your area. We do not display raw coordinates to other members; opted-in distance is approximate. Your city, searches and interactions can still reveal information about where you are.
- Safety and operation: session IP/device details, technical logs, reports, moderation evidence and decisions help secure accounts, investigate abuse and operate the service (legitimate interests, Article 6(1)(f)). We also comply with legal duties and lawful requests (Article 6(1)(c)); special-category evidence requires an applicable Article 9 condition, including explicit consent or legal claims where relevant.
Visibility, recipients and your choices
Authenticated members can see eligible profiles and approved photos according to visibility and blocking rules. Message recipients see what you send. Visits and likes may be disclosed according to the activity and incognito settings; incognito does not erase a message or information already received. Ordinary member visibility does not make your profile public on the open web. Other members can nevertheless copy or share what they see: no feature guarantees secrecy or physical safety.
Optional public-web profile
Where public sharing is available, you can separately choose to publish your display name and biography, optionally your selected country, city and one approved photo. This is based on your explicit consent (Articles 6(1)(a) and 9(2)(a)); it is not required to use the service. The preview and consent action explain which fields will become public. Search engines may index these pages and images and receive their URLs in sitemaps. Anyone can read a public page, including people you blocked if they visit without an identifiable session.
Saved edits to selected fields update the public page automatically. Choosing additional fields or a different public photo requires an explicit choice. We do not publish your date of birth, preferences, exact coordinates, distance, online state, activity history or messages through this feature. Public profile visits do not create member-activity notifications.
You can withdraw public sharing in profile settings without deleting your account. Hidden or incognito mode, deactivation and a deletion request also withdraw it; restoring your account does not automatically republish it. Withdrawal stops access through our public pages and photo endpoints, but cannot immediately remove copies already retained by search engines or other people. We retain a restricted record of the consent version, selected fields and grant/withdrawal times to document your choice, until account deletion unless a lawful hold applies.
Where community counts are shown, they include only currently public profiles whose owners chose to disclose their country. Groups below 20 are omitted and counts are rounded down to tens. We do not publish activity, preference or identity breakdowns. These counts do not represent everyone using the service.
Authorized support/moderation staff may access relevant records to operate the service and investigate reports, including reported messages. Messages are not end-to-end encrypted. We use hosting, email and technical service providers, and may disclose information when legally required. We do not sell member data or use advertising pixels in this release.
Hosting and international processing
At the final registration step we use Cloudflare Turnstile to prevent automated abuse, based on our legitimate interest in protecting the service. Cloudflare receives technical signals such as your IP address, browser information and the site you visit; our verification request does not send your email, password, photo or dating preferences. Cloudflare may process signals internationally and also uses them to improve bot detection. See the Turnstile Privacy Addendum. This is a security check, not an advertising integration.
The application and private media are hosted by Contabo in Singapore. Resend (Plus Five Five, Inc.) sends application email, receiving recipient addresses and necessary message content, including account-action links. Sending is configured in Ireland, but Resend also processes data in the United States; open and click tracking are disabled. Namecheap Private Email continues to handle the support mailbox, including processing in the United States. The operator administers the service from the Philippines and keeps encrypted recovery copies on an operator-controlled computer. Data is therefore not confined to the EEA.
Contabo offers a data-processing agreement and EU standard contractual clauses for non-EU hosting. Resend publishes a data-processing addendum incorporating standard contractual clauses; Namecheap publishes a data-processing addendum with transfer provisions. Contact support for the safeguards and contractual documents applicable to your data. These arrangements do not mean that foreign legal protections are identical to those in the EEA.
Retention and deletion
Account/profile information and conversations are retained while needed for the active account and service. Deactivation hides your account but does not erase it. A deletion request records withdrawal of sensitive-profile consent, immediately stops normal access and schedules account deletion after 30 days. Restoring your account requires accepting the current terms and explicitly renewing sensitive-profile consent. Photo-file cleanup runs asynchronously. Ask support for earlier erasure or withdrawal; we explain any lawful reason to retain limited records.
Profile activity is pruned after 365 days and closed introductions after 365 days. Downloadable exports expire after 7 days. Reports and moderation evidence are kept for safety review and applicable claims, with access restricted to authorized staff. Recovery copies are separate from live data and are not used for ordinary service access; erasure must also be applied when restoring a copy. Contact support for the status of an erasure request affecting backups or a legal hold.
Collected encrypted backups are normally retained for 30 days, with at least two verified recovery copies kept. Expiry runs after successful manual collection, so missed collections, verification failures or a documented legal hold can extend retention. Uncollected server copies are not removed before verified collection. Held copies are restricted to their documented purpose and reviewed separately.
Automated anti-abuse event records become eligible for routine deletion after 90 days and are removed in bounded maintenance batches. They are also removed when their account is permanently deleted. Failed background-job records become eligible for daily cleanup after 168 hours; expired password-reset records are cleaned hourly. These routines do not delete unresolved reports or appeals.
Browser storage
Necessary cookies and browser storage support authentication, security and preferences. A registration draft is held in this browser tab's session storage for up to 12 hours, without your password or precise coordinates; it is cleared on completed registration or when you reset the draft. No optional marketing consent is bundled with account creation.
Withdrawal, complaints and automated processing
You may withdraw sensitive-data consent by requesting account deletion in settings or contacting support. Withdrawal does not invalidate earlier lawful processing. We cannot continue the identity-based dating profile without the necessary consent; optional content can also be removed from your profile. You can export your data and correct your profile in settings. Rights can be limited where necessary to protect others or comply with law.
You may complain to the Polish supervisory authority, Prezes Urzedu Ochrony Danych Osobowych, or your competent local authority. Search filtering, quotas and automated anti-abuse checks operate in the service; you may contact support for human review of a restriction. We do not make solely automated decisions intended to produce legal or similarly significant effects about you.