What we collect, how we use it, and the choices you have.
Last updated: October 2026
The data controller is PrimeStone Platform, CVR 46332415, Palægade 4C, 9740 Jerslev, Denmark ("Flirtacy", "we"). Email support@flirtacy.com, or use the Contact Support page (flirtacy.com/contact). This policy explains how we handle personal data under the EU General Data Protection Regulation (GDPR) and Danish data protection law.
• Account data: name, email, password (stored encrypted), date of birth, gender • Profile data you choose to add: photos, bio, interests, relationship intentions, height, education, profession, lifestyle details and preferences • Optional sensitive details you choose to add, such as sexual orientation, religion or ethnicity • Location: your country/region, and your precise location only if you turn it on • Activity: likes, matches, messages, profile views, reports and support requests • Payment data: what you bought, amounts and dates (card details are handled by Stripe, never stored by us) • Technical data: device and browser information, and cookies as described in our Cookie Policy
• To provide Flirtacy — your account, matching, messaging and purchases (performance of our contract with you) • To keep members safe — moderation, fraud and abuse prevention, enforcing our rules (legitimate interests, and legal obligations) • Sensitive profile details — only shown and used for matching because you choose to add them (your explicit consent, which you can withdraw anytime by removing them) • Analytics and marketing cookies — only with your consent • Accounting and legal records (legal obligation)
Your profile (photos, name, age, bio and the details you add) is visible to other logged-in members — that's how a dating service works. Your email, password, exact location and payment details are never shown to other members.
We don't sell your personal data. We share it only with providers who help us run Flirtacy, under data processing agreements: • Stripe — payment processing • Supabase — database hosting • Netlify — website hosting • Cloudinary — photo storage • Resend — sending emails • Google — "Sign in with Google", if you use it We may also share data with the authorities when the law requires it.
Some providers process data outside the EU/EEA (for example in the United States). When they do, transfers are protected by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
We keep your data while your account is active. When you delete your account, your profile and messages are removed, and remaining personal data is deleted or anonymised — except payment records, which Danish bookkeeping law requires us to keep for 5 years, and safety records about serious violations. See Account & Data Deletion.
You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. Contact support@flirtacy.com. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Flirtacy is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and accounts found to belong to a minor are removed.
We use encryption in transit (HTTPS), encrypted passwords, access controls and trusted infrastructure providers to protect your data.
We may update this policy from time to time. Material changes are shown by a new "Last updated" date, and we'll notify you of important changes.