Privacy policy
Last updated 16 October 2026
What we collect, why we collect it, how long we keep it and what you can make us do with it. We have tried to write this in plain English.
Pending legal review. This document is a complete, good-faith draft written to match how PlayersPuff actually works. It has not yet been reviewed by qualified counsel in every market we operate in, and must be before launch. If anything here conflicts with your local statutory rights, your rights take precedence.
Who we are
PlayersPuff (“we”) operates playerspuff.com. For the purposes of the UK GDPR and EU GDPR we are the data controller for the personal data described here. Our data protection contact is privacy@playerspuff.com.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address and password hash | To create and secure your account | Contract |
| Date of birth | To determine your age bracket and refuse under-13s | Legal obligation; contract |
| Facial age estimate and liveness result | To confirm you are in the age bracket you claim | Legal obligation (child protection); legitimate interests |
| Profile content: name, pronouns, gender, bio, prompts, interests, photos | To let other people decide whether to play with you | Contract |
| Approximate location (country, region, and for adults a coarse grid cell) | To match you with people who are reachable | Contract |
| Game results, answers and compatibility scores | To run the games and show you results | Contract |
| Messages and reactions | To deliver your conversations | Contract |
| Filter hits and reports | To keep people safe and investigate abuse | Legitimate interests; legal obligation |
| Device and session data: IP address, user agent, session tokens | Security, fraud prevention and rate limiting | Legitimate interests |
| Payment records (via Stripe) | To process and support subscriptions | Contract |
| Guardian email and consent record, where required | To obtain and evidence parental consent | Legal obligation |
Location, specifically
We never store your exact coordinates. For adults we store a coarse grid reference (a five-character geohash, a cell of roughly five kilometres across) and a rounded approximation, and distance is computed between cell centres. That is accurate enough for “within 50km” and far too coarse to locate anyone.
For teen accounts we store country and region only. The database physically refuses to store anything finer for a teen account — it is a constraint, not a setting.
We strip EXIF metadata, including any embedded GPS coordinates, from every photo at upload. The original file with its metadata is not retained.
If you are under 18
We do not knowingly collect any data from anyone under 13. If an under-13 signup is attempted we refuse it and do not store the date of birth or anything else from that attempt. If you believe a child under 13 has an account, email safety@playerspuff.com and we will delete it.
For 13–17 year olds we collect less: no precise location, no payment data, and no images in chat because images cannot be sent. Where your country’s digital consent age is above your age, we obtain a parent or guardian’s verifiable consent before the account becomes active, and we record who consented and when. A guardian can withdraw consent at any time, which deletes the account.
How long we keep things
| Data | Retention |
|---|---|
| Account and profile | Until you delete your account |
| Messages | Until you delete your account or unmatch, then 30 days |
| Game history | 12 months, then aggregated and anonymised |
| Age verification records | 24 months, as evidence that we checked |
| Selfie submitted for an age check | Not retained by us after the check |
| Reports and moderation actions | 3 years, or longer where law requires |
| Audit logs of admin actions | 7 years, append-only |
| Session and IP logs | 90 days |
| Payment records | 7 years, for tax and accounting |
| Deleted account | Hard-deleted within 30 days; backups cycle out within 90 |
Your rights
Under the UK and EU GDPR, and comparable laws elsewhere, you have the right to:
- Access your data — Settings has a one-tap JSON export.
- Correct anything inaccurate — editable from your profile.
- Delete your account and data — Settings, and it is a real deletion rather than a flag.
- Restrict or object to processing based on legitimate interests.
- Port your data — the export is machine-readable JSON.
- Withdraw consent for anything we asked consent for, including analytics and notifications.
- Not be subject to a solely automated decision with significant effect. Our age checks are automated, but a disagreement or an inconclusive result always goes to a human, and you can appeal any outcome.
Email privacy@playerspuff.com to exercise any of these. We respond within 30 days. If you are unhappy with our response you can complain to your local data protection authority — in the UK, the Information Commissioner’s Office.
Security
Passwords are hashed with a memory-hard algorithm and never stored in a recoverable form. All traffic is encrypted in transit. Photos are stored in private object storage and served only through short-lived signed URLs, so a leaked link stops working. Access to production data is limited to staff who need it, requires two-factor authentication, and every administrative action is recorded in an append-only audit log.
If a breach occurs that is likely to affect your rights, we will notify the relevant authority within 72 hours and tell you directly.
Changes
If we make a material change we will email you before it takes effect. The date at the top of this page always reflects the current version.