Privacy.

What we collect, why we collect it, how long we keep it, and how to make us delete it.

Last updated 22 August 2026

The short version

• Right now this site does one thing: it takes your email address for the invite-only beta list.
• It stores your email address, the time you signed up, your IP address, your browser's user-agent string, and a two-letter country code.
• There is no analytics on this site. No Google Analytics, no Plausible, no Meta pixel, no heatmaps, no session recording.
• We set no cookies. Not for tracking, not for preferences, not at all.
• We do not sell your data, rent it, trade it, or hand it to advertisers. There are no advertisers.
• Email hello@passion.dating and we delete you. No form, no login, no reason required.

This is a small project run by one person. The document reads that way because that is what it is.

What the beta list collects

When you submit the form on the home page, five things are written to a database:

Your email address

Lower-cased. This is the point of the form — it is how we tell you there is something to try. Stored once; submitting twice does not create a second record.

The date and time you signed up

So the list has an order, and so we can tell a normal week from a bot flood.

Your IP address

Recorded with the signup, and also held for one hour in a separate counter used to stop the same address submitting the form more than five times an hour. That counter deletes itself automatically after an hour.

Your browser's user-agent string

The line your browser sends identifying itself, truncated to 300 characters. Kept because a hundred signups from an identical never-seen-before user agent is what an automated attack looks like.

A two-letter country code

Cloudflare works this out from your IP address and passes it along. The beta admits US users only at first, so we need to know roughly where people are writing in from.

That is the complete list. Nothing else is stored. We do not ask for your name, your age, your phone number or your location, and the form has nowhere to put them.

We use it to email you about the beta and for nothing else. Specifically, we do not profile you, we do not enrich your address against any data broker, and we do not add you to any other mailing list.

No analytics, no cookies, no trackers

This is worth stating plainly because it is unusual.

The previous version of this site ran jQuery, Bootstrap, an Angular signup widget and Piwik analytics. All of that is gone. What replaced it is static HTML, some CSS, and about eighty lines of plain JavaScript that submits the form.

• No analytics of any kind. We do not know how many people visited this page, how far you scrolled, or what you clicked.
• No cookies set by us. Nothing is written to your browser's storage by this site.
• No advertising, no retargeting, no third-party pixels.
• No fingerprinting. The user-agent string described above is stored with a signup you chose to submit; it is not collected from people who merely read the page.

If you read this page and leave without submitting the form, we have no record that you were here beyond whatever appears in the web server's ordinary request logs, described below.

The three companies involved

We cannot run a website with nobody else involved. Here is everyone who sees anything, and what they see.

Cloudflare

Cloudflare hosts the site, stores the signup list, runs the bot check on the form, and sends the confirmation email. That means Cloudflare handles every request to this site, including this page, and keeps ordinary server logs of those requests — the URL, the time, your IP address and your user agent. Some of our own diagnostic log lines also include the IP address of a request that failed the bot check or hit the rate limit.

The bot check on the form is Cloudflare Turnstile. It is there because the form would otherwise fill with junk. It loads a script from challenges.cloudflare.com, and when you submit, a one-time token and your IP address are sent to Cloudflare to confirm the check passed. Cloudflare states that Turnstile does not use your data to build an advertising profile. Turnstile may set a short-lived cookie of its own as part of running the check; that one is Cloudflare's, not ours, and it is not used to track you around the web.

Google Fonts

The site uses the Montserrat typeface, loaded from fonts.googleapis.com and fonts.gstatic.com. Any request to another company's server reveals your IP address and user agent to that company, and this one is no exception. Google states it does not set cookies for font requests or use them for advertising. We would rather serve the font ourselves and remove this entirely, and intend to.

Your email provider

The confirmation email travels to whoever runs your inbox. That is unavoidable, and it is why the confirmation email says as little as possible.

That is the whole list. There is no fourth party. No CRM, no marketing automation platform, no analytics vendor, no advertising network, no AI company. Your email address is not used to train anything.

How long we keep things

Every piece of data has to earn its place, and it has to have an end date. Here is the reasoning per item rather than one blanket period.

Email address and signup date

Kept until you ask us to delete it, or until the beta list is retired, whichever comes first. Purpose: telling you the beta is open. Once that purpose is finished, the list is finished.

IP address, user agent, country code

Kept alongside the signup so that a wave of fraudulent signups can be told apart from a good week. This is the only justification for holding them, and it stops being a good one once a signup is months old.

Rate-limit counter

One hour, then deleted automatically. This one is enforced by the system, not by us remembering.

Cloudflare's server logs

Held on Cloudflare's own retention schedule for the plan this site runs on, not ours. We do not export them, aggregate them, or build anything from them.

Getting a copy, or getting deleted

Email hello@passion.dating and ask. You can ask us to:

• Send you everything we hold about you. For most people this will be one line of a database.
• Delete you. The whole record goes, including the IP address, user agent and country code — not just the email.
• Correct something that is wrong.
• Stop emailing you without deleting the record, if for some reason you want that.

We will do it within 30 days, and in practice within a couple of days. You do not need to give a reason, prove your identity beyond being able to receive mail at the address in question, or fill in a form. If deleting your record means we can no longer recognise a later request from you, that is the intended outcome.

You get these rights wherever you live. Not because a statute forces it on a project this size, but because there is no good argument for the other thing.

Deleting a beta account

The beta list and a beta account are two separate things, and deleting one does not delete the other.

• The beta list is what the form on the home page adds you to. Delete it as described above.
• A beta account, if you are invited and create one, is deleted from inside the product itself — the setting is in your account settings, it is self-service, and it does not require emailing anybody or talking to anybody first. Emailing hello@passion.dating also works if you would rather.

Deleting an account removes your profile, your passions, your photos and your connections from the product, and signs you out everywhere at once. Your photo files are deleted from storage, not merely unlinked.

Messages are the exception, and we would rather be plain about it than tidy. Messages you sent stay in the other person’s copy of the conversation. A conversation belongs to two people, and deleting your account should not reach into someone else’s and remove half of what they read. Your name is gone from those threads and they no longer open to anyone, but the words remain.

One other thing can survive. If a report about your account has been reviewed and upheld, we keep the minimum needed to stop the same person returning through the same door, and whatever a legal obligation requires us to keep. A report nobody has reviewed yet does not count — an accusation is not a finding, and treating it as one would let anyone lock a stranger out by filing one. Nothing else is kept.

Age

This is an 18-and-over service. Do not sign up if you are under 18. We do not knowingly collect anything from anyone under 18, and if we find out we have, we delete it. If you believe a minor has signed up, tell us at hello@passion.dating and we will handle it that day.

Legal requests

If we receive a valid legal demand for information about a specific person, we will comply with it — and we will tell the person affected, unless the law forbids us from doing so. We will not hand over anything voluntarily on an informal request.

The best protection here is the one already described: we hold very little. A demand for data we never collected returns nothing.

Changes

If this policy changes in a way that matters — new data collected, a new company involved, a new use for something we already hold — the date at the top changes and we email the beta list before it takes effect. Fixing a typo does not earn an email.

Contact

A person reads this address. Not a ticketing system.

Related: Terms of service · Safety and reporting