Safety4 min read

Discretion is a design decision, not a promise

Anyone can write 'we respect your privacy.' We'd rather show the mechanics: data minimisation, consent-gated reveals, and a delete flow that actually deletes.

privacydiscretiondata minimisationsafety
An antique brass padlock and key resting on dark oxblood leather

Privacy claims are cheap. What matters is what a system is structurally incapable of leaking. So we start by collecting as little as possible: an email, optionally a mobile, and optionally what you're seeking. That's the whole waitlist.

Consent-gated reveal

Photos, kinks, and preferences unlock only when both people say yes. A profile that nobody has matched with is, in practical terms, not visible.

Deletion means deletion

Handwritten agreement pages beside a fountain pen on a dark walnut desk
Say the quiet parts out loud, then write them down.

'Delete' is the site's safeword. Ask to be removed and we email a confirmation link to the address itself — so only the mailbox owner can act — then the row is gone, not flagged. No shadow copy, no 'inactive' state.

Billing you can explain

Statements carry a neutral descriptor. Nothing about a card charge should out anybody to a partner, a parent, or an accountant.

Brass house keys on a leather fob beside paperwork on a dark marble counter
Mortgages, in-laws, logistics — the unglamorous half of a dynamic.

Suggested reading