Privacy Policy

Last updated: 8 September 2026

BlindfoldDate ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Who is responsible for your data

The data controller is BlindfoldDate. You can reach us at info@blindfolddate.com for any privacy-related questions or requests.

2. What data we collect

Account data

Your email address, collected when you register. If you sign up via Google, we receive your email address and name from Google.

Profile data

Partner names, interests (up to 12 categories), budget preferences, date style preferences (outside home or at home), and date cadence. You provide this during onboarding and can update it at any time in Settings.

Location data

Your approximate location (city coordinates) and preferred search radius. This is only collected after you explicitly grant permission or manually enter a city. We store the latitude, longitude, and radius so we can suggest nearby venues on future visits.

Activity data

Date ideas generated for you, their status (revealed / completed), timestamps, your XP total, and any badges earned. The last 50 date ideas are retained to avoid repeating suggestions.

Photos

If you use the Memory Challenge feature, photos you choose to upload are stored on Cloudflare R2. Photos are private to your account, uploaded over encrypted connections, and deleted when you delete your account.

Push notification tokens

If you enable push notifications in the mobile app, we store a device push token (FCM/APNs) so we can deliver date reminders. Delivery goes through Google (Android) or Apple (iOS) push services. You can disable notifications at any time in your device settings, which invalidates the token.

Payment data

If you subscribe to a paid plan, payment is processed by Stripe. We never see or store your card number — we only receive your subscription status and a Stripe customer reference.

Store purchase data

If you buy a downloadable product from our store, we record the email address you entered at checkout, which product you bought, the amount and currency, and Stripe's references for the payment. We also store a one-way hash of the private link we email you, and a count of how many times the files have been downloaded. Card details are handled entirely by Stripe and never reach us.

You do not need an account to buy from the store. If you check out as a guest, the email address you provide is the only personal data we hold about you, and it is what your download link is tied to. If that address already belongs to a BlindfoldDate account, the purchase is linked to it so the files also appear when you are signed in.

Analytics & session data

If you accept non-essential cookies in the cookie banner, we use PostHog (EU region) to understand how the app is used. This includes page views, feature interactions, and session recordings that capture your on-screen activity (clicks, scrolls, and navigation). All form inputs are masked. We never record passwords or other text you type. PostHog stores a persistent anonymous identifier in your browser's local storage, and if you are signed in, analytics data is linked to your account ID. If you reject the banner, no analytics run at all. We also use Vercel's cookieless, aggregated analytics (Web Analytics and Speed Insights), which store no identifiers on your device.

Technical data

Session cookies (used to keep you signed in), IP address, and browser/device type. These are collected automatically by our hosting and authentication providers.

3. How we use your data

• To create your account and authenticate you
• To generate personalized date suggestions based on your interests, budget, and location
• To avoid repeating suggestions you have already seen
• To track your progress and award gamification milestones
• To send transactional emails (email confirmation, password reset)
• To deliver products you buy from the store and re-send your download links on request
• To keep records of sales as required by tax and accounting law
• To keep the service secure and prevent abuse
• To analyze how features are used and improve the product (PostHog analytics & session recordings)

4. Lawful basis for processing

• Contract performance (Art. 6(1)(b)): Account data and profile data are necessary to deliver the service you signed up for.
• Consent (Art. 6(1)(a)): Location data is only collected after you explicitly grant permission. You can withdraw this consent at any time by removing your location in Settings. Product analytics (PostHog), session recordings, and Google Ads conversion tracking are also only activated after you accept non-essential cookies in the cookie banner shown on your first visit. You can change or withdraw your choice at any time via the "Cookie settings" link in the page footer, which re-opens the banner.
• Contract performance (Art. 6(1)(b)) — store purchases: Your email address and purchase record are necessary to deliver a product you have paid for and to let you download it again later.
• Legal obligation (Art. 6(1)(c)): Records of sales are retained for the period required by tax and accounting law, which is why a purchase record outlives the deletion of an account.
• Legitimate interest (Art. 6(1)(f)): Technical data and error monitoring (Sentry) are processed to maintain the integrity, security, and quality of the service. Sentry does not record sessions or capture DOM/input data.

5. Who we share your data with

We do not sell your data. We share data only with the following service providers ("sub-processors") necessary to operate BlindfoldDate:

Transfers to the United States are protected by Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

6. How long we keep your data

• Account & profile data: Kept until you delete your account.
• Date history: The last 50 entries are retained to power the service; older entries are automatically pruned.
• Photos & push tokens: Deleted when you delete your account (push tokens also expire when you disable notifications on your device).
• Session cookies: Expire when you sign out or after 7 days of inactivity.
• Store purchase records: Retained for 5 years, the period Latvian accounting law requires records of a sale to be kept. This is the one exception to deletion: if you close your account, the purchase record and the email address attached to it remain, so that the sale stays documented and any download link you were sent keeps working. The record is unlinked from your account at that point. You can still ask us to erase it where the law allows.
• Backups: Purged within 30 days of account deletion.

7. Your rights

Under GDPR you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate data (most data is editable directly in Settings)
• Erasure: request deletion of your account and all associated data
• Portability: receive your data in a machine-readable format (JSON)
• Restriction: ask us to limit how we process your data
• Objection: object to processing based on legitimate interests

To exercise any of these rights, email us at info@blindfolddate.com. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority in your country. If you are in Latvia, that is the Data State Inspectorate (dvi.gov.lv).

8. Cookies & local storage

Strictly necessary: Session cookies keep you signed in, a small entry in your browser's local storage remembers your choice from the cookie banner, and local storage is also used for interface preferences (e.g. theme). These are always active and do not require consent.

Non-essential (only after you accept the cookie banner): PostHog stores an anonymous identifier in your browser's local storage to recognize repeat visits and records masked session activity (see Section 2, Analytics & session data). Google Ads sets conversion and remarketing cookies to measure ad performance. Both are gated behind Google's Consent Mode — the Google tag is not even loaded, and no ad or analytics cookie is set, until you click "Accept" in the banner. If you click "Reject", only strictly necessary cookies are used. You can change your choice at any time via the "Cookie settings" link in the page footer; withdrawing consent stops all analytics and ad tracking and removes stored identifiers.

9. Children

BlindfoldDate is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the app. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Questions or requests: info@blindfolddate.com