← Back to home

Privacy Policy

Last updated: August 2026

fem-boy.com ("we", "us", "our") is committed to protecting the privacy of our users, especially LGBTQ+ individuals whose identity information is sensitive personal data. This policy explains what we collect, how we use it, and your rights.

0. Eligibility

fem-boy.com is for adults aged 18 and over. By using this service you confirm you are at least 18 years old. If we become aware that a user is under 18, the account will be suspended immediately.

1. Information We Collect

  • Account data: Email address, hashed password, age consent timestamp, Terms of Service consent timestamp.
  • Profile data: Display name, date of birth (used to compute age only — full date not shown to others), city/country, bio, optional identity fields (gender identity, pronouns, sexual orientation, looking for, show me preferences).
  • Photos: Images you upload for your profile. Your first photo can appear immediately; additional photos require moderator approval. Community-visible photos are available to signed-in members, subject to your profile visibility and blocking settings.
  • Messages: Text messages sent within matched conversations. Soft-deleted messages are retained for moderation purposes and purged on the same schedule as deleted accounts (see Section 5).
  • Usage data: Swipe actions (like/pass), match events, last-seen timestamps, and Would We Vibe? picks, guesses, participation and profile-opening events. Game picks are shared only when you opt in, with eligible members; you can stop sharing from the game at any time.
  • Technical data: IP address (for rate limiting and security), browser user-agent (stored with session tokens).
  • Push notification subscription: If you enable push notifications, your browser push endpoint URL is stored to deliver notifications (see Section 8).

2. Sensitive Identity Data

All identity fields (gender identity, pronouns, sexual orientation, etc.) are optional, nullable, and removable at any time. We treat this data as sensitive personal information. We do not sell, share, or use identity data for advertising purposes. Aggregate analytics never break down data by individual identity categories.

3. How We Use Your Data

  • To operate the platform: authentication, profile display, discovery, matching, messaging.
  • To enforce safety: moderation, report handling, fraud detection.
  • To send transactional emails: verification, password reset, match notifications.
  • To improve the service: aggregate usage analytics (no individual identity breakdowns).
  • To comply with legal obligations.

4. Who Sees Your Profile

By default, your profile is visible to other registered users within the discovery feed. You can change your visibility to matches only or hiddenin your privacy settings. Your precise location is never stored or shown — only approximate location (city/country) if you choose to share it.

5. Data Retention

  • Active account data is retained while your account is active.
  • When you delete your account, it is anonymised immediately: your email address is replaced with a placeholder and your display name is cleared. The anonymised account record is soft-deleted and will be permanently purged after 90 days. During this 90-day window your data is inaccessible to other users and to you, but is retained internally for legal and safety purposes (for example, to preserve moderation evidence if a report is under investigation). To request immediate permanent deletion before the 90-day period, contact support@fem-boy.com.
  • Moderation evidence (reports, admin action logs) is retained for 12 months for safety and legal compliance.
  • Soft-deleted messages follow the same 90-day purge schedule as deleted accounts.

6. Your Rights

  • Access: Download a full export of your personal data via Settings → Your Data.
  • Deletion: Delete your account via Settings → Delete Account. Your account will be anonymised immediately and permanently purged within 90 days. For immediate hard deletion, contact support@fem-boy.com.
  • Correction: Update or remove any profile fields at any time.
  • Portability: Your data export is in JSON format.
  • Objection: Contact us at privacy@fem-boy.com to raise concerns.

7. Cookies & Sessions

We use httpOnly session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Third-Party Services

  • Stripe: Payment processing. Stripe receives only payment data, not your profile or identity data.
  • Resend / SMTP: Transactional email delivery.
  • Jitsi (jitsi.org / 8x8 Inc): Used to facilitate video and voice calls between matched users. When you initiate or receive a call, connection metadata is processed by Jitsi's servers. No audio or video content is stored by fem-boy.com.
  • Web Push (VAPID): If you enable push notifications, your browser's push subscription endpoint (provided by your browser vendor, e.g. Google or Mozilla) is stored to deliver notifications. You can withdraw consent at any time by disabling notifications in your browser settings.

9. Security

Passwords are hashed with bcrypt (12 rounds). All data is transmitted over HTTPS. Access tokens expire after 15 minutes. We conduct regular security reviews.

10. Contact

For privacy questions or requests: privacy@fem-boy.com