Privacy Policy

1. Controller

2. Core Principle: Anonymity

GayZz works without an account, email address or phone number. Your session is identified by a randomly generated ID stored only in your browser, which cannot be linked to a real identity. We don't know who you are — and we don't want to.

3. Hosting

Website and backend are self-hosted by us (website via Coolify, backend via self-hosted Appwrite, server location EU). No data is transferred to third countries. Fonts are served locally from our own server — no Google Fonts or other third-party resources are embedded.

4. What Data We Process

• Profile details: self-chosen name, age, optional profile photo and your filter settings — only for matching you with chat partners (Art. 6(1)(b) GDPR).
• Location: after you explicitly grant browser permission, we use your approximate coordinates to calculate distances for matching (Art. 6(1)(a) GDPR). Your location is deleted together with your queue entry.
• Chat content: messages and shared photos/videos are no longer shown to you or your chat partner in the chat after 15 minutes. On our servers we retain them for up to 30 days beyond that, so a report (see below) can still be reviewed even if that doesn't happen immediately (Art. 6(1)(f) GDPR — protection against illegal content and abuse). They are deleted automatically after that.
• Reports: if you report a user, we store the report including session IDs to fight abuse (Art. 6(1)(f) GDPR).
• Safety data while active and after a report: when you join the queue, we store your IP address and a technical device signature (a fingerprint derived from browser details like language and screen size — no camera or microphone data) against your session. If you're reported, this becomes a record that blocks further joins from the same IP address or device (Art. 6(1)(f) GDPR — abuse and repeat-offender prevention). This data isn't visible to you as a user.
• Location lookup (country): to show a country name in the distance filter, we send your coordinates to the external, unauthenticated service bigdatacloud.net (Art. 6(1)(b) GDPR). No account is created with us, no identifier is sent along, and we don't store the response.
• Usage statistics: we count page views with our own cookieless system (path, referrer, language, random browser ID). No IP addresses are stored, no profiles are built, and no data is shared with third parties (Art. 6(1)(f) GDPR).

5. Retention Periods

All data is deleted automatically after the following period:

6. Local Storage (No Tracking)

We don't use cookies. Your browser's localStorage only holds functional entries: your session ID and profile inputs (gayzz-session), a random ID for usage statistics (gayzz-vid), your language choice (gayzz-lang), your local block list (gayzz-blocked) and the technical device signature from point 4 (gayzz-fp). You can delete these at any time via your browser settings.

7. Third Parties

No data is sold or shared with third parties. No third-party advertising or tracking services are embedded. The one exception is the location lookup via bigdatacloud.net named in point 4. Data is otherwise only disclosed if we are legally required to do so (e.g. to law enforcement in cases of illegal content).

8. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please note: since usage is anonymous, we generally cannot attribute stored data to an individual (Art. 11 GDPR) — and most data is deleted automatically within minutes or days anyway. For requests, contact info@gayzz.de. You also have the right to lodge a complaint with a data protection supervisory authority — the competent one for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

9. Age Restriction

GayZz.de is strictly for adults aged 18 and over. We do not knowingly process data of minors; corresponding reports lead to immediate deletion.