Privacy Policy

Last updated: 12 November 2026.

This policy describes how Buttmatch (“we”) handles personal data on this website and, when the Buttmatch app launches, in the app. The app is not live yet, so we do not currently collect account or photo data. This coming-soon site itself uses no tracking, no analytics, and no advertising cookies.

1. Who we are

The operator of Buttmatch is Buttmatch. Formal company details and a postal address will be added here when they are published. For privacy requests, write to privacy@buttmatch.com or hello@buttmatch.com.

2. Data we collect now (this website)

This website is a static information site. We do not run analytics, advertising pixels, or other trackers. We do not set tracking cookies. Your browser may store a short-lived flag in session storage so we do not show the 18+ entry screen again in the same visit. If you email us, we receive the content of your message and your email address. Our hosting provider may process standard technical logs (such as IP address and user agent) to operate and secure the site.

3. Data we will collect when the app launches

When you create an account, we expect to process:

• Account details you give us, such as an email address and profile information you choose to add.
• Photos you upload. These photos can show a nude or underwear-clad body and are therefore sensitive personal data (data concerning sexual life or similar special-category data under the GDPR).
• An age-verification result from a third-party provider (pass or fail), plus limited technical session metadata such as a session identifier and a timestamp. See section 5.
• Messages you send after a match, reports you submit, and basic technical logs needed to run and secure the service.

4. Legal basis and explicit consent

We will only process your photos with your explicit consent. You will have to give that consent before a photo is uploaded, and you can withdraw it and delete your photos or your whole account at any time. We also rely on other lawful bases where they apply, such as performing our contract with you (to operate your account) and our legal obligations (for example, to handle reports of illegal content and to keep limited records of age verification).

5. Age verification and what we do not store

Age checks will be carried out by a third-party provider. We are currently completing provider onboarding, including with GO.CAM. The provider, not Buttmatch, handles the verification methods (for example a government ID, a payment card, or another permitted method).

We will store only the pass or fail result and limited technical information needed to confirm that a check took place (such as a session identifier and timestamp). We will not receive or store your identity document, selfie, date of birth, card number, or other identity data. The provider’s own terms and privacy notice also apply to the check. Please read the GO.CAM end-user terms and the GO.CAM privacy policy. More detail is on our age-verification page.

6. How we will protect photos

• Private storage. Photos will be stored privately, not in a public bucket or an open folder.
• Short-lived signed URLs. When a photo needs to be shown to a permitted user or reviewer, it will be served through a short-lived signed URL, not a permanent public link.
• EXIF stripping. We will strip EXIF and similar metadata (including location data) when you upload a photo.
• Every photo will be reviewed by a person before it can be shown to other users.

7. We do not sell your data

We do not sell personal data. We do not share photos or account data with advertisers. We will share data only with service providers who process it for us under contract (for example hosting, email, and the age-verification provider), or when we are required to by law, or to report illegal content to the proper authorities (including NCMEC for CSAM).

8. Deletion

You can ask us to delete personal data we hold about you, and when the app launches you will be able to delete your whole account. That will remove your profile, photos, and messages from the live service. We may keep a limited record where the law requires it — for example, a record that an age check was completed, or information needed to handle a report of illegal or non-consensual content.

9. Your GDPR rights

If the GDPR or UK GDPR applies to you, you have the right to access, correct, or delete your data, to restrict or object to certain processing, to withdraw consent, and to data portability. You also have the right to lodge a complaint with your data protection authority. To exercise these rights, email privacy@buttmatch.com.

10. International users

Buttmatch is intended to be used internationally, with a focus on the United States. If we transfer data out of the EEA or UK, we will use an appropriate safeguard, such as standard contractual clauses, and we will say so here when those transfers begin.

11. Changes

We will update this policy as the product develops. The date at the top will change when we do.