Privacy Policy (UK GDPR)

Last updated: 2026 · UK GDPR · Data Protection Act 2018

1. Data we collect

• Account: email, password (stored with a bcrypt hash), optional name and phone.
• Identity verification: government-issued ID and selfie, stored with restricted access and available only to moderation.
• Ads: texts and images submitted by the advertiser (image metadata/EXIF is removed automatically).
• Browsing: strictly necessary cookies (session and age verification).

2. Purpose and lawful basis

We process personal data to operate the platform, moderate content, comply with legal obligations and prevent fraud and unlawful activity. Our lawful bases are your consent and compliance with legal obligations, under the UK GDPR and the Data Protection Act 2018.

3. Image and data consent

By posting, the advertiser consents to the processing and public display of the images and confirms that they have the consent of the people depicted. Consent can be withdrawn at any time through our removal channel.

4. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to processing, and to withdraw consent, through our removal/contact channel. You may also complain to the Information Commissioner's Office (ICO).

5. Sharing and retention

We do not sell your personal data. We may share information with authorities when required by law. Verification data is retained only for as long as necessary to meet legal obligations and is then deleted.

6. Security

We use HTTPS, password hashing (bcrypt), rate limiting, input sanitisation, removal of image metadata and regular backups.

7. Data contact

For privacy matters, contact us through our contact channel.

Initial template. Review it with qualified UK legal counsel before operating in production.