Privacy
Being a member of a site like this is sensitive information in itself. We treat every record that way.
Who holds your data
Hedonist is operated by Number One Son Software Development [[LEGAL_ENTITY_SUFFIX e.g. LLC]], a California business, [[BUSINESS_ADDRESS]]. Privacy questions go to [[SUPPORT_EMAIL]].
What we collect
- Browsing the directory, quiz and checklist needs no account. Quiz and checklist answers stay in your browser and are never sent to us.
- Members: email address, a password hash, display name, the profile details you choose to add, and a rough home area.
- Age verification: handled by an independent provider. We receive pass or fail, the method, the date and a reference number. Never the image, the document or your date of birth. Details below.
- Visits: like most sites we keep a traffic log so we can see which pages are found and used. It records the network address of the connection, the city it resolves to, the browser, the page that sent you here, and the pages and links you use during the visit, under a random browser id. It is never joined to a member account, it is deleted after 90 days, and clearing your browser's site data ends the id.
Age verification
Nothing about your age is checked until you do something that reaches another person. When you do, you pick a method — a face age estimate, a payment card authorization, a mobile carrier check, or an ID document — and the provider runs it.
For each check we store: whether it passed or failed, the method you chose, when it happened, and the provider's reference number for the session. That is the complete list. We never receive or store the image, the document, your name as it appears on it, or your date of birth. A face age estimate estimates whether a live image is over a threshold; it does not identify you and the image is not retained.
This record is the attestation log. It exists so that we can show a payment processor or a regulator that checks happen, without handing them anything about you personally. It is kept for as long as your account exists plus [[RETENTION_PERIOD]], the period card networks and the law require, and the link to your account is removed when the account is deleted.
Payments
Card payments are taken by our payment processor, [[PROCESSOR_NAME]]. Your card number goes to them, not to us: we never see it and never store it. The processor receives what it needs to take the payment and comply with its own obligations, under its own privacy policy.
What we keep is the plan you chose, its status, when the current period ends, and the processor's reference for the subscription. That is enough to run your membership and answer a question about a charge, and nothing more.
How billing, renewal, cancellation and refunds work is set out in the billing terms.
Location
We never store an exact location. If you share your position, it's rounded to a grid square of roughly three miles on our server before anything is saved, and distances are calculated only from that square. You can set your area by hand instead.
What we don't do
- No advertising trackers, no third-party analytics services, no data brokers. The traffic log above is ours alone and stays on our own server.
- We don't sell or share member data with anyone for marketing.
- We don't use member photos for face recognition or to train anything.
Emails come from a neutral sender name with neutral subject lines, so nothing on a lock screen gives the site away. Card statements use a neutral descriptor for the same reason.
Your controls
- See, correct and export your data from your account page.
- Delete your account at any time, free. Live data is erased immediately and backups within 30 days.
- Choose how visible your profile is, from hidden to discoverable.
Security
Passwords are hashed with a memory-hard function and can't be read by staff. Uploaded images have location metadata stripped and are stored privately. To report a vulnerability, write to the address in /.well-known/security.txt. We acknowledge reports within 72 hours.
If there's ever a breach
We'll tell affected members directly and promptly, along with what was exposed and what we're doing about it.