Privacy Policy (Privacy Act 1988)

Last updated: 2026 · Privacy Act 1988 · Australian Privacy Principles

1. Data we collect

• Account: email, password (stored with a bcrypt hash), optional name and phone.
• Identity verification: government-issued ID and selfie, stored with restricted access and available only to moderation.
• Ads: texts and images submitted by the advertiser (image metadata/EXIF is removed automatically).
• Browsing: strictly necessary cookies (session and age verification).

2. Purpose and handling

We collect and handle personal information to operate the platform, moderate content, comply with legal obligations and prevent fraud and unlawful activity, in accordance with the Australian Privacy Principles under the Privacy Act 1988.

3. Image and data consent

By posting, the advertiser consents to the processing and public display of the images and confirms that they have the consent of the people depicted. Consent can be withdrawn at any time through our removal channel.

4. Your rights

You may request access to and correction of your personal information, and its deletion, and may withdraw consent, through our removal/contact channel. You may also complain to the Office of the Australian Information Commissioner (OAIC).

5. Sharing and retention

We do not sell your personal information. We may share information with authorities when required by law. Verification data is retained only for as long as necessary to meet legal obligations and is then deleted.

6. Security

We use HTTPS, password hashing (bcrypt), rate limiting, input sanitisation, removal of image metadata and regular backups.

7. Data contact

For privacy matters, contact us through our contact channel.

Initial template. Review it with qualified Australian legal counsel before operating in production.