Privacy at a glance: We collect the information needed to create and secure your account. We do not store plain-text passwords, use advertising trackers, or sell personal information.
1. Information we collect
Information you provide
When you register, we collect your display name, email address, confirmation that you are an adult, and acceptance of our legal terms. If additional profile or communication features are introduced, this Policy will be updated before those features are launched.
Authentication information
Your password is transformed using PBKDF2-SHA-256 with a unique random salt and is stored only as a derived hash. We cannot retrieve your original password. We store hashed session identifiers so you can remain signed in.
Security and technical information
Our infrastructure may process IP address, browser information, request time, and security signals to deliver the service, prevent abuse, diagnose failures, and protect accounts. Login throttling uses a one-way hash derived from the email and network address rather than storing those values together in the rate-limit record.
2. How we use information
- create, authenticate, and maintain accounts;
- provide requested features and communicate service information;
- protect members, investigate fraud, and enforce our Terms;
- maintain reliability, troubleshoot problems, and improve the service;
- comply with applicable legal obligations.
3. Legal bases
Depending on where you live, we process information to perform our contract with you, pursue legitimate interests such as account security and service improvement, comply with law, and obtain consent where consent is required.
4. Cookies
We use a strictly necessary session cookie to keep you signed in. It is marked HttpOnly and SameSite=Lax and is marked Secure on the production HTTPS site. The current release does not use advertising cookies or browser Local Storage for authentication.
5. How information is shared
We may share information with infrastructure providers acting on our behalf, including Cloudflare for hosting, database, network, and security services. We may also disclose information to comply with valid legal process, protect rights and safety, investigate abuse, or complete a business transaction subject to appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.
6. International processing
The internet and our service providers operate internationally. Information may be processed outside your country. Where required, we use appropriate legal mechanisms and safeguards for international transfers.
7. Retention
We retain account information while your account is active and for a reasonable period afterward when needed for security, dispute resolution, legal compliance, or enforcement. Expired sessions may be deleted automatically. Rate-limit records are temporary. Retention periods may be shortened where deletion is legally required.
8. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, and to object to or withdraw consent for certain processing. To make a request, contact us using the address below. We may need to verify your identity before completing a request.
9. Security
We use encryption in transit, password hashing, prepared database queries, hashed session tokens, security headers, and login throttling. No system is perfectly secure, so you should use a strong, unique password and notify us if you suspect unauthorized access.
10. Adults only
SUGARDADDYDATE is not directed to anyone under 18, and minors may not create accounts. If we learn that a minor has provided personal information, we will take steps to remove the account and information as appropriate.
11. Changes to this Policy
We may update this Policy as the service or applicable laws change. We will publish the new effective date and provide additional notice when required.
12. Contact
Privacy questions and requests may be sent to privacy@sugardaddydate.net.