The rules
Personal data
This page describes what this service actually records, field by field. It is written from the data model, not from a template.
What is recorded
| Your address | To open the account and to write to you. Never shown to other members. |
| Nickname, a few words about you | What you chose to show. Your legal identity is never asked for. |
| Country and declared city | Optional. Written by you, and never derived from your connection. |
| A pin on the map | Only if you ask to be on it. Rounded to a few kilometres before it is saved, so your exact position is never recorded — see below. |
| Tags on your profile | What you chose to declare about yourself. |
| Photos and videos | With their access level. Location data carried inside image files is stripped on arrival. |
| Conversations | Readable by their participants, and by moderation only when a report concerns them. |
| Technical records | The address your connection came from when publishing, kept because the law requires it of a hosting service. |
Sensitive data
What you publish here says something about your sexual orientation or your sexual life. Article 9 of the GDPR treats that as a special category, which may only be handled with your explicit consent. That consent is what you give when you create your profile, and withdrawing it means closing your account — the two cannot be separated, because the profile is made of that data.
The map
You are not on it unless you put yourself there. Nothing is read from your connection, nothing is derived from your postal address, and your device is never asked where it is.
Two ways to be on it. Your town is the one already written on your profile: we look the name up once — the name alone, from our server, never your address and never your connection — and keep the result so the same town is never looked up twice. Or you point at a place on the map yourself, which is what a temporary pin is for.
Your town shows as the centre of your town — the same point for everybody who lives there, and one that says nothing about where in it you are. The lookup only ever answers with towns and villages, never with a street or a building, so a full address written in that field finds the town around it or nothing at all.
A pin you place yourself is rounded off before it is saved. You choose how closely — about five kilometres, or about two — and the wider one is what you get without choosing. Whichever you pick, the exact point you clicked is never stored, so it cannot be read back out, by us or by anyone else.
There is no setting that shows exactly where you are, and that is a decision rather than an oversight. The map is read by every member, so a precise pin is shared with people you have not met, and it cannot be taken back once somebody has written it down. Telling one person exactly where you are is what a conversation is for.
A temporary pin also comes down by itself: you choose after how long, up to a month, and once it runs out the coordinates are erased rather than merely hidden.
The map itself is drawn from tiles served by OpenStreetMap. Your browser fetches them directly, which means your IP address reaches their servers, as it does for any site you visit. The address of the page you are reading is not sent with them, and the pins are never sent anywhere: they are drawn in your browser from data that came from here.
Who sees it
Nobody outside this service, other than the host that runs the machines. Nothing is sold, nothing is shared for advertising, and there is no audience measurement.
Inside the service, what another member sees is decided by the access level you set, and by nothing else. Moderation reads what a report concerns, and only that.
How long
Your profile and your content stay as long as your account does. Closing it removes them — the words on your profile, your photos and videos and their files, your pin on the map, the signals you sent and received, and your messages. What you wrote goes; what the other person wrote is theirs and stays with them, so a conversation you were in survives with your side removed.
| Profile, media, messages, pin | Removed when you close your account. |
| Your consent | Kept, marked as withdrawn. It is the proof that you were asked and that you answered — a proof that could be deleted would prove nothing. |
| Who published what, and from where |
Kept because a hosting service is required to, and held apart from your profile so that closing your account does not depend on it. Deleted automatically afterwards. 365 days |
| Reports and moderation decisions | Kept. They are also somebody else's account of what happened to them, and the Digital Services Act asks for the decisions to be kept. |
| A temporary pin on the map | Up to a month, and you choose. The coordinates are erased at the end, not merely hidden. |
| Backups | Removals reach them as they rotate. |
Your rights
You may ask what is held about you, correct it, have it deleted, receive it in a portable form, or object to its handling. Write from the address on your account, through the contact form.
You may also complain to your supervisory authority: CNIL
Cookies
Only what makes the site work: one cookie to keep you signed in, one to remember your language. No tracking, no advertising, no third-party measurement. Two requests leave this site for another, both described above and both to OpenStreetMap: the map tiles, which your browser fetches, and the town lookup, which our server makes with a town name and nothing else.