Privacy

The whole list, in the order it matters.

Most privacy policies are written so that nothing in them can ever be wrong. This one is written so you can check it. Where we hold something, it says so; where something is not built yet, it says that too.

Who is asking

GayLinkup is run by Piksel & Co Digital LLC, 8 The Green, STE B, Dover, DE 19901, United States. Under the UK and EU data protection laws we are the controller of what is described here. Write to hello@gaylinkup.com about any of it.

What we hold

• Your email address. It is the only way to sign in, and it is never shown on your profile or to another member.
• Your profile. A handle, a display name, an age, a headline, a description, who you are and who you are looking for — all of it written by you, all of it editable, none of it required beyond the handle, the name and the age.
• Your city, and an approximate point. If you let the browser share a location, it is rounded before it is written down — to about a kilometre, in a database trigger, so the precise point the browser reported never reaches the disk at all. Distances other members see are computed from the rounded point.
• Your photos. Kept in private storage. They are served to signed-in, verified members through links that expire after an hour, and to nobody else — not to search engines, not to a signed-out visitor, not to a member you have blocked.
• Your messages. Kept so the other person can read them. Stored in plain text on our database: we could read them, and so could anybody who compelled us to. This is not end-to-end encrypted and we are not going to pretend otherwise.
• The outcome of your verification — that it passed, and when. Not the selfie.
• Reports and blocks, including what was written in a report, so a pattern across several people can be seen.

What we never collect

Your legal name, your phone number, your exact location, your contacts, an advertising identifier, or anything about what you do on other sites. These are not settings that happen to be switched off — there is no column in the database for a legal name or a phone number, and there is no advertising or analytics code anywhere in the site. Nothing is sold to anybody, because there is nothing collected to sell.

The selfie

Verification takes a live selfie in a random pose and compares it to the photos on your profile. The comparison runs at Amazon Web Services (Rekognition, in Frankfurt). The image is sent in a single request and is not stored — not on our servers, where it is never written to disk, and not at Amazon, whose AI services opt-out policy is set on our account so that nothing we send is retained or used to improve their models. What survives the check is one row saying it passed.

Cookies

This site sets none. There is no consent banner because there is nothing to consent to. Your sign-in session is kept in your browser’s own local storage, which stays on your device and is never sent to us as a cookie; signing out clears it.

Who else touches it

• Supabase — the database, the sign-in system and the photo storage.
• Vercel — the hosting. Its edge tells us which country a request comes from, which is how account creation is limited to the countries we serve. We do not store it.
• Resend — sends the sign-in emails, from a region in Japan. It handles your address for that one purpose.
• Amazon Web Services — the face comparison described above.

That is the whole list. There is no advertising network, no analytics provider, no tracking pixel, no chat widget, no embedded font from somebody else’s server.

Getting rid of it

Signed in, go to Account. One button downloads everything we hold about you as a single file — your profile, your date of birth, the rounded point, your messages, your blocks, your reports, and hour-long links to your photos. Another deletes the account: the profile, the photos, the messages, including the ones sitting in other people’s conversations, the blocks and the sign-in itself. It happens at once, not in seven days, and it cannot be undone. Nothing is left behind saying an account was ever here — not even a row recording that somebody left.

Backup copies of the database are kept for a short window by our database provider and are never used to bring a deleted account back. If you cannot sign in to reach the button, write to hello@gaylinkup.com and a person will do it.

Your rights

If you are in the UK or the EU you can ask for a copy of what we hold, ask for it to be corrected, ask for it to be deleted, object to what we do with it, or complain to your data protection authority. The same address handles all of it. We do not charge for any of it and we do not ask why.

How long things stay

Your profile and messages stay while your account exists. A blocked pair is kept as long as both accounts exist, because forgetting it would let a block quietly lapse. A report is kept while the accounts it names exist; if the person reported deletes their account, the report goes with them, and if you delete yours, the reports you filed stay but stop naming you. The selfie is kept for no time at all.

Where it lives

The database and the photo storage are in Frankfurt, Germany. The face comparison runs in Frankfurt too. Sign-in email goes through a provider whose region is in Japan, so your address travels there and nothing else does. Our company is registered in the United States, which means your data reaches a US company; the standard contractual clauses in our providers’ terms cover those transfers.

Children

This site is for adults. An account requires a date of birth of eighteen or over, enforced by the database rather than by a checkbox. Anything sexual involving a minor is reported to the authorities, as the community rules say.

When this changes

If what we collect changes, this page changes with it before the change goes live, and the date below moves. Last updated 28 September 2026.