Skip to content
daddyboy.eu
Log inRegister now
This version is a translation for your orientation. The German version is legally binding.

Privacy policy

As of 25. Oktober 2026 um 17:30

This policy describes which personal data we process when you use DaddyBoy, why we do so and which rights you have. It applies to the web app at daddyboy.eu including the installable app version.

1. Controller

Bedrijf voor lekker internetten B.V., Markt 19, 6071 JD Swalmen, Niederlande. Email: info@bvli.nl.

Contact for data protection: Thorsten Norman Sommer, datenschutz@daddyboy.eu.

2. Principles

  • We do not sell data and do not show personalised advertising.
  • We do not use third-party tracking services. Visitor numbers, if we count them at all, are counted with our own software on our server and without cookies (3.34).
  • All servers are located in the EU (Eygelshoven, Niederlande). Service providers are based in the EU or are covered by an adequacy decision.
  • You use the platform under a pseudonym. Your real name is not required.

3. Which data we process

3.1 Account

Username (pseudonym), email address, password (as a hash only), date of birth, language setting, account status, time of the last login. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.2 Consents

We store which consents you gave, when and in which version, together with IP address and browser identifier. This serves as proof under Art. 7(1) GDPR. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

3.3 Special categories of personal data

Using a platform for gay men allows conclusions about your sexual orientation. Voluntary profile details may contain information about your sex life. Both are special categories under Art. 9 GDPR. We process them exclusively on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give separately for both purposes at registration and can withdraw at any time in your account. We need the consent regarding orientation because using the platform already allows that conclusion. The consent to details about your sex life is voluntary: you can register without it and give it later at any time under Account › Consents. Without it, preferences in your profile and search profile, intimate pictures, the moods “Getting a bit horny” and “Up for something erotic” in the chat and the note class “Turns him on” stay locked; if you withdraw it, we delete these details. The profile area “Outlook” (political outlook, worldview) is a special category too; you unlock it only with a separate, optional consent that we do not ask for at registration. These details are never a search filter and count in the matching only as something in common; on withdrawal we delete them immediately.

3.4 Security and login

Passkeys: we store the public key, an identifier and the name you gave it. Biometric data stays on your device and never reaches us. Two-factor authentication: encrypted secret and recovery codes. Sessions: session identifier, IP address, browser identifier and time of the last activity, so that you can see and log out logged-in devices. Logins: time, IP address, browser identifier and a checksum of the device cookie (section 4), so that we can warn you about a login from a new device and you can see your recent logins under Account › Security; deleted after 90 days. Legal basis: performance of the contract and legitimate interest in account security (Art. 6(1)(b) and (f) GDPR).

3.5 Log data

When you access the platform, our server processes IP address, time, requested address, browser identifier and status code in log files. They serve operational security and error analysis and are deleted after 14 days at the latest. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

To protect the platform, our server tells the country of a request from the IP address, using a country database stored on the server itself; the address is not passed to anyone for this. It turns away requests from individual countries from which almost only automated traffic reaches us, unless you use a device you have signed in with before (device cookie, section 4) or our app. A new account can currently only be opened from Europe. Addresses that probe for vulnerabilities are blocked temporarily. Requests turned away are kept with IP address, country, time, requested address and browser identifier in a log of their own, likewise for 14 days at the most. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

Shield in front of the server: every request to the platform passes through the network of Bunny (BunnyWay d.o.o., Ljubljana, Slovenia), which shields us from overload attacks and known attack patterns; Bunny is our processor (Art. 28 GDPR) and works for us exclusively at locations within the EU. Bunny accepts the connection, processes IP address, time, requested address, browser identification and the content of the request, checks it and passes it on to our server; the encrypted transmission ends at Bunny and starts afresh towards our server. Bunny keeps only logs with a shortened IP address for a few days and no content. Fonts, icons and the logo are delivered from its cache; pages, pictures, messages and anything else relating to a member are never cached and remain on our server only (3.7, 3.9). Our server still sees your real IP address, not Bunny's. Legal basis: legitimate interest in secure and available operation (Art. 6(1)(f) GDPR).

3.6 Profile details

Your profile consists of your pseudonym, your role (Daddy, Boy or both), what you are looking for, free texts and the traits you select from the offered categories (for example physical details, interests, personality). All traits are voluntary. Details about sexual preferences are data about your sex life (Art. 9 GDPR); we process them only on the basis of your explicit consent (3.3), which you can give and withdraw at any time. Without this consent the relevant fields are not shown. Details about gender identity and pronouns are also voluntary, visible only to you by default and appear to other members only when you switch them on; they are never used as a filter against people. During age verification we do not store ID data such as name or gender entry, only the result. We use your search profile (“I'm looking for”) to suggest matching profiles; other members do not see it in clear text. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for special categories, your consent (Art. 9(2)(a) GDPR).

3.7 Pictures

Pictures you upload are re-encoded by us; in doing so we remove all embedded metadata such as location, camera and timestamp. When uploading you must classify each picture (clothed, nudity without genital focus, explicit). We store this classification, the review status and a checksum with the picture. Pictures are stored outside the public web area and are delivered only via short-lived, signed addresses to entitled members; which members may see a picture depends on the classification, age verification, membership and your gallery releases. Pictures with nudity or sexual references allow conclusions about your sex life; the legal basis here is also your consent (Art. 9(2)(a) GDPR). Legal basis otherwise: performance of the contract (Art. 6(1)(b) GDPR).

No picture is visible before it has been reviewed. First our own software on our server checks it: it recognises nudity and assigns the picture to a category, and on recognisable faces it estimates the age to give the team a hint. Nobody is identified, no facial features are stored and no picture leaves our server. If the software is very sure, it releases a picture on its own, a picture with nudity only if your age has been checked; an explicit picture in the profile album, where it is not allowed, it declines on its own. If it is unsure, if the age check is missing for nudity or if you classified more strictly than it did, people look at the picture: borderline cases first by verified members of the community pre-review, the decision is made by our team. Every look the team takes at a picture is logged. If a picture is classified differently or removed, you receive the reason and can appeal. Legal basis: performance of the contract (Art. 6(1)(b) GDPR), the protection of minors as a legal obligation (Art. 6(1)(c) GDPR) and our legitimate interest in protecting members (Art. 6(1)(f) GDPR).

Picture description: so that members who cannot see learn what a picture shows, our own software on our server describes approved pictures without a caption in one or two sentences (for example posture, clothing, surroundings). It estimates neither age nor origin, recognises nobody and does not leave our server. The description is written only after approval, decides nothing and serves neither search nor matching nor moderation. Screen readers read it out as long as you have not written a caption of your own. You see it in your album, can take it over as your caption and change it, or remove it; if you remove it, we do not write a new one. We delete it together with the picture. Legal basis as for the picture itself: performance of the contract (Art. 6(1)(b) GDPR) and, for pictures relating to your sex life, your consent (Art. 9(2)(a) GDPR).

Short link and invitation page: if you create a short link under Account › Short link, anyone who knows it reaches, without login, an invitation page with your pseudonym, age, role, town and profile headline. Whether your main picture appears there is your decision: not at all, pixelated at one of three levels, or sharp (sharp only for a clothed picture). The picture is then visible without login to anyone with the link; we count visits to the page without IP addresses. You can withdraw the picture release and the link at any time, after which both are no longer reachable at once. Legal basis: your consent (Art. 6(1)(a) GDPR).

3.8 Location

Your postcode is required for the radius search. We map it to the geographic centre of the postcode area and store only this point and the place name, never an address. Other members see only the place. The mapping of postcodes to coordinates comes from the postcode data of GeoNames, licensed under CC BY 4.0. Optionally you can also share your device location. We round it to a grid of about one kilometre before storing; the exact position reaches our server but is not stored. You can remove the device location in your profile at any time. Legal basis: performance of the contract (postcode, Art. 6(1)(b) GDPR) and consent (device location, Art. 6(1)(a) GDPR).

3.9 Messages

Chats, chat requests and voice messages are stored on our server so that you can read and listen to them on all your devices. The moderation team sees the content of a chat only if a message from it is reported. Self-destructing pictures are removed from the server after viewing or after 24 hours at the latest. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); for content relating to your sex life, your consent (Art. 9(2)(a) GDPR).

Voice messages as text: if you have switched on "Voice messages as text" under notifications, our own software on our server writes down what is said in voice messages to you, so that you can read them. The text is stored encrypted with the message, is shown only to participants of the conversation who read voice messages as text, and is deleted together with the message. It serves neither search nor matching nor moderation. The other person sees in the chat that you read voice messages as text. The same applies the other way round: if the other person reads voice messages as text, your voice messages to him are transcribed; the chat says so next to the recording before you speak. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Whether you currently have a chat open we detect through your browser's live connection, so that you receive no push notification and no email for that chat. This is not stored.

Under Account › Settings you can decide that only members with a verified age may start a new chat with you. If someone without tries, we check only whether their age is verified and show them that you accept new chats only from verified members; you learn nothing about the attempt.

3.10 Age verification

We check it ourselves – there is no external service for it, and your recordings never leave our server. You take a picture of your identity document, a short video in which you tilt it, and a selfie video in which you make two given head movements. You cover the document number and the machine-readable zone yourself before uploading, with our tool; we do not need them. We strip the sound and every camera detail from the recordings, and they are stored encrypted in a separate area with its own key, outside the platform's pictures and outside the backups. Only someone who holds the review right personally can open them, and every access is logged.

If you cannot cover the numbers yourself, for instance because you cannot see, the page covers the usual places on request (the lower edge and the upper right corner). If that does not work either, you may send the picture uncovered as an exception after confirming this explicitly. The person who checks it then also sees the document number and the machine-readable zone; they note them down nowhere, the picture is deleted with the decision like all other recordings, and the number never appears in the record.

All recordings are deleted the moment the decision is made. What remains for good is only the record that a check took place: the time, the result, the verified date of birth, the kind of document and its issuing country, who decided, and a checksum showing that the entry was not changed afterwards. We never store the document number, a name or an address, and no image. We need this record to be able to show the authorities that we checked the age; it cannot be deleted while the check stands, and it is part of your data export. Legal basis: legal obligation to protect minors and performance of the contract (Art. 6(1)(c) and (b) GDPR); for the image of your face your explicit consent (Art. 9(2)(a) GDPR), which you give before recording and without which the check does not start.

3.11 Membership and payment

You pay for Premium membership through PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxemburg); the single verification is currently free of charge. You enter payment details and billing address there; they stay with the payment service provider, which processes them under its own responsibility. We receive the payment confirmation, a customer number, the amount and the country the provider reports for your payment, otherwise the country from your profile. For every payment we issue an invoice with the VAT legally due; it states your pseudonym, a member number and a neutral service description, no name and no address. The payment service provider and your bank statement show the operator, not DaddyBoy. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); for invoices the statutory retention obligation (Art. 6(1)(c) GDPR).

While Premium runs, a small “Premium” appears next to your name on your profile. This lets other members see that, for example, longer video calls are possible with you. You can hide it at any time under Account › Settings; while you are invisible it never shows. Legal basis: our legitimate interest in reliable contact between members (Art. 6(1)(f) GDPR), to which you object at any time with the switch.

3.12 Notifications and emails

Under Account › Notifications you choose which notices you receive about messages, requests, matches, likes, profile visits, resonance, handshakes and saved searches (instantly, in a digest or not at all). For this we store these settings, the time zone your browser reports once (for the hour of the digest), the time of the last digest and your reminder stage. Instant notices are sent as push notifications to devices on which you switched push on; for this we store the push address and the keys your browser gives us. The content is transmitted encrypted; the push service of your browser (Apple, Google or Mozilla) only sees that a notification arrives. Without a push device, and only while you are not signed in, we send an email instead, at most one per chat until you open it. Emails never contain message texts; other members’ profile pictures only if they allowed it, and your profile picture in emails to others only with your consent (default: off). With the switch “Keep e-mails neutral” or with camouflage switched on (Account › Settings › Camouflage) every email arrives neutral: from a different sender address, with a neutral sender name and subject, without names and pictures.

If you have not signed in for 3, 14 or 60 days we remind you of your account by email once each, then no more; you can switch these reminders off under Account › Notifications. When the weekly review is on, we show you your numbers for the week from Account › Statistics on Sundays in the bell and, if you allowed push, as a push; for this we store only whether you want it and when the last one came. News from us is sent only with your consent, which is not pre-ticked at registration and which you can withdraw at any time; the same goes for emails about new magazine articles, which have a consent of their own under Account › Notifications. Each of these emails contains an unsubscribe link that works without signing in. Notices about security, contract, payment and moderation are mandatory and cannot be unsubscribed. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); reminders: legitimate interest (Art. 6(1)(f) GDPR) with the right to object; news and magazine: consent (Art. 6(1)(a) GDPR).

Chat reminders: if a message to you in a chat has been unread for two and again for seven days, we remind you by email at 6 pm, with all waiting chats in one email and without message text; for a chat request we remind you only once. For this we store the reminder level and the time per chat. The other person learns nothing about it. If you end a chat kindly or decline a request kindly, the other person receives a notice in the bell. You switch the reminders off under Account › Notifications or via the unsubscribe link. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) with the right to object.

Delivery is handled by Eigener Mailserver; as with any mail delivery, your email address and the content of our emails to you pass through there. Pictures are attached as part of the email, nothing is loaded from our server when you open it; we use no tracking pixels and no click measurement, so we do not learn whether or when you open an email. The digest is assembled only at the moment of sending and is not stored; notices held back because of your quiet hours are deleted as soon as they are delivered. An unsubscribe link contains only an identifier of your account, the type of event and a signature, and is valid for 90 days.

3.13 Bug reports

If you report a problem via “Report a bug” we store your description, the address of the page, technical details of your browser (user agent, window size, language, display mode, last error message), your IP address and, if you are signed in, your account, otherwise the email address you give voluntarily. We store a screenshot only if you attach one yourself; it lies outside the web directory and is visible to the team only. Legal basis: legitimate interest in error-free operation (Art. 6(1)(f) GDPR).

Messages to the magazine editors go through the same form and are visible to the editors only. If you send us a guest contribution, we store the title, text, sources, the byline you chose and the moment you granted us the rights of use. If you withdraw it, we delete it at once; a declined contribution after 180 days; an accepted one stays with the article as proof of the rights. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Lexicon searches that find nothing are counted without any link to you.

3.14 Handshake (“known in person”)

With the handshake you can state on another member's profile that you know each other in person. It only counts once the other member confirms it. For this we store only who offered the handshake to whom and when it was confirmed or declined; no place, no text. Confirmed handshakes are visible only to the two of you, on each other's profile and in the chat. Publicly, your trust line shows at most the words “known in person” once at least two verified members have confirmed; never a number, never a list. You can hide the words under Account › Settings and withdraw any handshake at any time, after which it is gone for both of you. If you block a member or delete your account, we delete the handshake. Because a confirmed handshake documents a personal acquaintance on a platform for gay men, it counts as special category data; the legal basis is your consent, which you give by offering or confirming and revoke by withdrawing (Art. 9(2)(a) GDPR).

3.15 Voice hello

You can record a short voice hello (“Let me introduce myself”) on your profile. We store the recording on our server; other members can hear it only after our team has approved it. For this review our own software on our server produces a transcript and marks anything conspicuous (contact details, hints at minors or coercion, sexual content, insults or hate speech); the transcript is used neither for search nor for matching. Every listening by the team is logged. If the recording is approved, we delete the transcript at once. If it is declined, you receive the reason; the recording and the transcript are then kept for six months, audible only to you and the team, so that you can object and we can review the decision. After that we delete both. You can remove or replace the voice hello at any time, a declined one too; the recording is then gone at once. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); the review serves the protection of minors and of other members (Art. 6(1)(c) and (f) GDPR).

Text of the voice hello: so that members who cannot hear can read your voice hello as well, we show the wording of the transcript as text under the recording once it is approved. Differing from the paragraph above, we therefore delete only the markers on approval; the wording stays stored as this text until you change or remove it or delete the voice hello. You can correct or remove the text at any time; what you have changed we do not overwrite. The text serves neither search nor matching. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.16 Members of the old daddyboy.de

Anyone who had an account on the previous platform daddyboy.de was informed by us by email about the move at most once and can take over their pseudonym on the new platform. For this we took from the old data: the pseudonym, the email address, the role, the time of registration and of the last login, and the previous profile picture. We store the email address in plain text only until the invitation is sent, afterwards solely as a checksum with which we recognise you when you sign up. The old profile picture is held privately until you adopt or discard it after signing up; nobody else sees it. If you do not take over your pseudonym, we delete all of this once the reservation period has expired; a link in the invitation also lets you have it deleted immediately and without signing in. After the takeover only the time of your old registration (“with DaddyBoy since”) stays with your account. Legal basis: continuation of the existing contract on new technology (Art. 6(1)(b) GDPR) and our legitimate interest in informing existing members about the move (Art. 6(1)(f) GDPR).

3.17 Video and voice calls, walkie-talkie

A voice call works like a video call, only without picture; walkie-talkie is a voice call in which your microphone only sends while you hold the button. Everything in this section applies to both as well, and we additionally store whether it was a voice call or walkie-talkie. Nothing of the sound is stored.

Two members who chat with each other can make video calls once both have allowed them in that chat. Picture and sound are encrypted between your devices; we can neither see nor store them. Our server brokers the call: it records who called whom and when, whether the call was answered and how long it lasted, and it passes the technical connection data of the two browsers (network addresses, codecs) on once without keeping it. The encrypted packets travel either directly between the devices or through a relay server we operate. When the call runs through the relay server, the other person does not see your IP address; the relay server processes it for as long as the call lasts and keeps it in its log data (3.5). It cannot read the content either, and the content is not stored. At the end of a call your browser reports technical measurements of the connection to us: whether it came about, whether directly or through the relay server, how long it took to set up, data rate, packet loss and the browser family, without IP address and without content. This shows us where calls fail. Whoever does not have the chat open receives a push notification while it rings, if push is switched on. We cannot technically prevent a recording by the other side; we point this out before every call. You can report behaviour in a call from the call line in the chat; we then see only the connection data, no content. The possible call duration depends on the membership (terms of use). Legal basis: performance of the contract (Art. 6(1)(b) GDPR), for the measurements our legitimate interest in a reliable service (Art. 6(1)(f) GDPR).

3.18 Partner profile

You can name another member as your partner. The link only counts once the other member confirms it; each account has at most one partner. For this we store only who asked whom and when it was confirmed or declined; no text. A confirmed link appears as “Partner” with a link on both your profiles and is therefore visible to every signed-in member; under Account › Settings either of you can hide it, after which it disappears on both profiles. Either side can dissolve the link at any time, after which it is gone for both. If you block the member or delete your account, we delete the link. Because it documents a couple relationship on a platform for gay men, it counts as special category data; the legal basis is your consent, which you give by asking or confirming and revoke by dissolving (Art. 9(2)(a) GDPR).

3.19 Statistics

Under Account › Statistics you see how your profile lands: profile visits per day, sympathies, winks, reactions, ratings and handshakes received, how often your pictures were opened large and your voice intro played, visits to your short link and the way your profile was opened (such as search, feed, chat) and at what hour. For the way we read the address of the previous page within DaddyBoy when a profile is opened and store only the kind of way. We count the way and the hour separately; neither can be traced to a single visit. For this we increment one number per member, metric and day, per picture for pictures. We do not store who viewed; your own views and views by members who set themselves invisible are not counted. We also note on which day you changed something on your profile (such as main picture changed, profile text changed, pause), only the kind of change, so you see it in the daily bars next to the visits. The daily counters and these marks are deleted after 90 days. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.20 My shelf: music, books, films and games

In your profile you can put artists, bands, books, films, series and games on a shelf and say what they mean to you (“fan”, “seen live”, “reading now”, “favourite book”). This is voluntary. For each entry we store only which work you chose, what you said about it and when. Logged-in members see your shelf under the same conditions as your other interests. In the matching we compare your shelf only with the shelf of the member whose profile or search result you are looking at, and tell both of you what you have in common. We do not sort works into topics, we do not derive traits, views or preferences from your shelf, and we do not build recommendations from it. Please bear in mind that individual works may still allow conclusions, for instance about political or religious views; you decide what you add, and you can remove any entry at any time.

The works themselves come from open catalogues: artists from MusicBrainz, books, films, series and games from Wikidata and, if you do not find a book there and search further, from Open Library. Our server sends the search, not your browser; only the search term goes to the catalogue (see section 5). We keep the catalogues’ answers in a temporary store for up to a week, without recording who searched. From the catalogue we take only the identifier of the work, title, creator, year, the kind (such as film, series, video game or band) and, for artists, the country, no cover images or posters. The team can block a work that must not appear here; it then disappears from all shelves, while your entry stays stored. Your shelf is part of your data export. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.21 Profile visits and activity

When you open another member's profile, we store per pair who last visited whom, how often, on how many different days and when for the first time. Anyone who came on at least three different days within 30 days counts as “keeps coming back”; the member gets one notification about it (Premium with the name, free without) and sees the number under Account › Statistics. Premium members see who visited them under “Who visited my profile”, on the tiles under “Discover” and in the notification about it; free members see only the number. Visits from the last 30 days are shown, after that we delete them. If you have made yourself invisible (Premium), your visits leave no entry.

From your latest activity we show other members on cards, tiles, your profile and in the chat whether you are online right now (active in the last 15 minutes) or were active today. Premium members see “online now”, and so does everyone while you have set a status that invites contact. With “Hide activity” under Account › Settings you switch both off, free members too. Legal basis for both: performance of the contract (Art. 6(1)(b) GDPR).

3.22 Notes on other members

You can keep short private notes on every member, on the profile and next to the chat, sorted into classes (“He likes”, “He doesn’t like”, “General”, “Personal”, and with Premium a further one for preferences). They are your memory aid, so that after a break you know again who you are writing with. Only you see your notes: the member you write about learns nothing of them, and the team has no view of them. We store the text encrypted and do not analyse it, neither for the matching nor for suggestions. You decide what you note; treat details about others as carefully as you would want details about yourself treated. Other members can keep notes on you in the same way. Your notes are part of your data copy and stay until you delete them. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.23 Scene guide

In the scene guide you can say about a venue that you have been there, that you are a regular or “You can meet me here” (with a short note). We store the venue, your statement and the time; we never show others a date or time, at most the month. “You can meet me here” lasts 90 days; shortly before, we ask in the bell whether it still applies. Your tile is seen only by logged-in members who may see you anyway; guests and search engines see only numbers. Where you are a regular appears under “I’m often here” in your profile and can show up in matching as something in common. With “Don’t show me on city and scene pages” under Account › Settings you disappear from all these lists, including the feed and matching.

You can rate a venue once you have been there: with stars and one line of text. Everyone sees the average of the stars; the text with your pseudonym is seen only by logged-in members. Our software checks every text for contact details, names and insults; if it finds any, the team sees it first. You can delete a text but not change it. Photos of a venue sit in a separate gallery, go through the same review as all pictures (3.7) and appear with your pseudonym or as “a member”, only for logged-in members.

Venues show their dates (party series, regulars’ tables, group evenings). With “I’m coming” you say you are coming to one evening. We store the date, the evening and your account and delete the reply the day after the evening. Logged-in members see how many are coming as a number; who is coming is seen only by members who said they are coming to the same evening, and only if they may see you anyway. Three hours before the start we remind you in the bell, by mail and, if you have registered a device, by push; the lock screen only shows the time, never the place. You can switch the reminder off under Account › Notifications.

Some of the dates come from public event calendars: Eintopf (Stuttgart, eintopf.info), KarlsUNRUH (Karlsruhe, karlsunruh.org), Lueni.org (Lüneburg, lueni.org) and +plus KMS (Chemnitz, plus.wkb-ev.org); only queer dates at places listed in the scene guide. We store title, date, time, place, the address of the date in its calendar and a copy of its description as proof, which only our team sees; we remove e-mail addresses, phone numbers, links, social media accounts and named contact persons beforehand. The short description on the page is written in our own words by our own language model on our own computer, and a person approves it. The legal basis is our legitimate interest in an up-to-date scene guide (Art. 6(1)(f) GDPR). Anyone named in such a description can object to the processing (section 7); dates that are cancelled or removed there are hidden.

As a scout (only with a checked age) you suggest entries, corrections and photos; they become public only once the team accepts them. For photos, before removing the metadata, we only read how far from the venue and how old the picture is; we do not store your position. For accepted contributions you receive contribution points (3.33). You appear in the ranking (pseudonym and points, never venues) unless you switch it off under My account › Settings, and as sponsor of an entry only if you switch that on. Venue operators can link their account with a code; their profile shows this only if they want it to. For the annual letter to operators we store their business postal address, visible to the team only. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); all statements about places you visit are voluntary and can be withdrawn at any time.

3.24 Mood in the chat

In every accepted chat you can say what you are in the mood for, from “Just chatting” to “Up for something erotic”. We store the level and the time per chat. Only the other person in that chat can see it, not in search, profile, feed or statistics; the team does not evaluate it. Tapping the same level again deletes it. Because it says something about your sex life, the legal basis is your consent, which you give by setting it and withdraw by removing it (Art. 9(2)(a) GDPR); the two most explicit levels are available only with the consent to details about your sex life (3.3).

3.25 Feed and notices about new members

The feed “New from members” shows logged-in members what others newly share: approved pictures, voice hello, shelf entries, the age verification, scene guide statements and “New here”. For this we store one entry per member, type and day with a reference to the content. Only what the viewer could also see in your profile is shown. With “Appear in the feed” under Account › Settings, with “Hide activity” or in “Invisible” mode no new entries are created, and existing ones are hidden at once.

Once your profile is complete (main picture approved), during the day we tell at most ten members within 50 km whose search matches in both directions; they see your pseudonym and the rounded distance. This happens once, and once more if you chose the week before deletion. You yourself receive such notices about others at most once a day and can switch them off under Account › Notifications. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.26 Vouchers, invitations and founder programme

If you redeem a voucher code, we store which code, how many days and when they were credited; per code the team sees only how often it was redeemed. If you come via a member’s invitation link or give their short link when signing up, we store who invited you; once your age has been checked, you both receive Premium days and each learns the other’s pseudonym. The first members after the launch are founding members; a badge on profile and tile shows this to other members. For a confirmed bug (3.13) the team may give you Premium days. Gifted days extend your term; there is no invoice for them. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

3.27 Reports, moderation and blocking

If you report a profile, a picture, a message, a call or a review, we store you (as a guest your email address), your IP address, the reported member, the content, category and reason. The reported member does not learn who reported them. You receive a confirmation of receipt and the outcome. For reported messages the team sees the reported content. To detect abuse, the team sees how many of your reports were unfounded. We record decisions, measures (notice, warning, suspension) and appeals with the reason and the person who decided; you receive every measure with its reason and can appeal. If you block someone, we store only whom and since when; the other member is not notified, and you no longer see each other. Legal basis: legal obligation under the Digital Services Act (Art. 6(1)(c) GDPR) and our legitimate interest in protecting members (Art. 6(1)(f) GDPR).

3.28 Place pages and “Already here”

Public place pages state how many members live there and how many joined in the last 30 days. A place page appears from one member; in small places the number can therefore point to individual members. Names and pictures are seen there only by logged-in members. With “Don’t show me on city and scene pages” you remove your tile; you still count in the number, except in “Invisible” mode. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

On the home page we show pixelated pictures under “Already here”, without name and place, only with the role. This applies only to pictures from your profile album that you have released for it one by one, never to explicit ones. The pixelation happens on our server; a sharp picture never leaves it. You can withdraw the release on the picture at any time. Legal basis: your consent (Art. 6(1)(a) GDPR).

3.29 Automated decisions and profiling

We sort suggestions and search results by how search profiles, self-descriptions and things in common match; new members rank a little higher for seven days. The sorting excludes nobody; hard filters are set only by your own search. Our software classifies pictures (3.7); if it is very sure, it releases a picture or declines an explicit picture in the profile album without a person seeing it. You can appeal against every decline, and then a person decides. The age estimate is only a hint to the team and never decides on its own. If someone reports suspecting that a member is a minor, we take the account out of every list as a precaution and allow no new chats with it until the team has checked; ongoing chats continue. After too many login attempts we block further attempts for one minute. Beyond this we make no solely automated decisions that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).

3.30 Required information

For the contract we need pseudonym, email address, password, date of birth, acceptance of the terms of use, the age confirmation and the consent regarding sexual orientation (3.3); for the profile, role, sought role, country and postcode are added. Without this information we cannot create an account or offer the distance search. All other information and consents are voluntary; if they are missing, only the related features are missing.

3.31 Job applications

If you apply for a position through our “Jobs” page, we store what you enter in the form: name, email address, optionally phone number and where you live, when you are available, your answers to the questions in the posting, your message, the language of the form and the time. We only store a CV if you attach one yourself as a PDF; it is kept outside the web area. You do not need an account; if you are signed in, we link the application to your account. We do not ask for a photo, age, gender, origin or sexual orientation; please do not mention these or your health in the free text either.

The controller for your application is the employer named in the posting. If that is CMO Internet Dienstleistungen GmbH, Kaiserstraße 57/1, 72764 Reutlingen, Germany, we run the form and the servers on its behalf; otherwise we are the controller ourselves (section 1). Only the people deciding on the position see your application. Our address for applications receives a notice with your name, where you live and the position, without your message or CV; you receive a confirmation at the address you gave. There is no automated selection.

The legal basis is taking steps prior to entering into an employment relationship (Art. 6(1)(b) GDPR). After a rejection, or if you withdraw your application, we keep it for six more months so that we can defend ourselves against claims, for example under the German General Equal Treatment Act (Art. 6(1)(f) GDPR); after that we delete it, CV included. An application nobody decided on is deleted six months after it arrived. If you are hired, it becomes part of your personnel file. You can withdraw or ask for earlier deletion at any time by replying to the confirmation or through the address in section 1.

3.32 Help out: putting out cards

With a verified age you can order cards and stands under “Help out” and put them out in venues from the scene guide, or cards without a stand that you pass on to friends and acquaintances. For the order we store the parcel, the venues you have in mind, the time at which you confirmed the rules for putting out cards, and the delivery address. The address is stored encrypted and separate from your profile; only the people who pack the parcel can see it, and every look is logged. We delete it 30 days after dispatch, and at once if the order is declined or withdrawn. The parcel arrives in neutral packaging, without the name DaddyBoy on the envelope.

When you report a placement, we store the venue, the time, the spot, the number of cards, your note and the photo of the stand. If you share your location while doing so, we store only the distance to the venue, rounded to ten metres, never the location itself. If your phone has no network at that moment, the report stays stored on your device with photo and signature until it has been sent. The person of the venue who agrees gives their name and role and signs on your device; if the venue has an address in the scene guide, we send it a message with which it can confirm or object. We do not tell the venue your pseudonym. The team looks at every report; for accepted placements you receive contribution points (3.33). We keep count of how much material you have received, put up or reported lost. On the personal card “Get to know me” you write your short link yourself by hand; we do not print it and do not learn whom you give the card to.

If a stand has been standing for 30 days in a venue where you have been or are a regular, we ask you on the venue’s page whether it is still there. We store your answer with your account; only the team can see it. The legal basis for everything in this section is the contract (Art. 6(1)(b) GDPR), and for reviewing the reports and protecting against misuse our legitimate interest (Art. 6(1)(f) GDPR). We delete photos and signatures twelve months after the placement has ended, everything else together with your account.

3.33 Contribution points

Helping out earns you contribution points: for accepted contributions to the scene guide (3.23) and placements (3.32), for accepted corrections and confirmed bug reports. For each booking we store the occasion, the points, the time, the item it refers to and any reversal with its reason, as well as when you turned points into Premium days. For the weekly bonus we store on which days you used DaddyBoy, only the date, and delete it after two weeks. Only members whose age has been verified receive the bonus. The weekly bonus counts towards the overall ranking. You appear in the ranking (pseudonym and points, never places) and with the “Helps out” badge on your profile unless you switch this off under My account › Settings. Points cannot be bought, given away or paid out. The legal basis is the contract (Art. 6(1)(b) GDPR), and for protection against misuse our legitimate interest (Art. 6(1)(f) GDPR). We delete the statement and redemptions together with your account.

3.34 Visitor statistics

To see how many people visit DaddyBoy and how they find us, we count page views with Matomo, software running on our own server. All pages except the administration area are counted, including those you open while logged in. Except for published content such as news, magazine, places and the handbook, we only transmit the kind of page (for example “Profile” or “Chat”), never names, pseudonyms or numbers; who looks at whose profile or writes to whom is therefore not in the statistics. Matomo sets no cookies. It processes the page viewed and the previous page, time, browser, operating system, screen size, language and the IP address, which is shortened by its last two bytes before it is stored. We delete the individual records after 180 days; after that only aggregated numbers without reference to individual visits remain. Nobody but us receives these data. Legal basis: our legitimate interest in knowing the reach of our service (Art. 6(1)(f) GDPR); you can object at any time (section 7).

4. Cookies and local storage

We set only technically necessary cookies: a session identifier, a protection token against cross-site request forgery, a login token if you choose “Stay logged in”, a device cookie for one year after every login (a random value by which we recognise your browser, so that we only warn you about a login from a genuinely new device) and, only if you deliberately switch the language, a language cookie for one year. Your display setting (light/dark) and the tile size you chose are stored locally by the browser; they never reach our server. No consent is required for this (Art. 11.7a Telecommunicatiewet).

If the shield in front of our server (3.5) is fending off an attack, it may give your browser a short computing task and keep the result for a short time in cookies named bunny_shield so that you don't have to solve the task again with every click; these cookies contain no identifier of you, and no consent is required for them either.

5. Recipients

Within the company only people who need access for operation, support or moderation receive it. Every time a staff member opens your account in the administration, the person, time and purpose are logged; the administration never sees chats. Support staff do not see content with nudity or sexual references. The team may keep internal notes on your account, for example about a support request; they are factual, visible to the team only and part of your data export. A permanent ban or an immediate deletion of your account by us is proposed by one person and confirmed by a second one as soon as the team consists of more than one person; both are logged. External recipients are the payment service provider (PayPal (PayPal Europe S.à r.l. et Cie, S.C.A., Luxemburg)) and, if you switch push on, the push service of your browser (Apple, Google or Mozilla). The payment service provideris a controller in its own right. We carry out the age check ourselves (3.10); there is no recipient for it. In front of our server stands the network of Bunny (BunnyWay d.o.o., Slovenia) as a shield, our processor (3.5). Hosting and email delivery (Eigener Mailserver) we run ourselves on our own servers in Eygelshoven, Niederlande; there is no further external provider for them. Our servers are located in the EU; we ourselves do not transfer data to third countries. The push service of your browser may be located outside the EU and receives only the push address of your device and encrypted notifications. If you start a station under Radio, your browser connects directly to the station’s server; the station sees your IP address and your browser, nothing from your account, and is a separate controller. As long as you play nothing, it learns nothing. While you listen, our server only counts how many members are listening to the same station right now, so the feed can say “4 members are listening to … right now”: a number without names, which expires by itself after a minute without playback and is stored nowhere. If you search in your profile for artists, books, films, series or games for your shelf, our server queries the open catalogues MusicBrainz (MetaBrainz Foundation, USA), Wikidata (Wikimedia Foundation, USA) and Open Library (Internet Archive, USA). Only the search term you typed goes there: not your IP address, not your browser and nothing that points to you or your account. We store only what you put on your shelf. The catalogue cannot attribute the search term to any person; none of your data is transferred to a third country in the process.

6. Retention period

  • Account data, profile and pictures: until your account is deleted; you can remove individual details and pictures yourself at any time.
  • Messages and voice messages: until your account is deleted; self-destructing pictures after viewing or after 24 hours.
  • Age verification result and notification settings: until your account is deleted.
  • Push addresses: until you switch push off on the device or the push service declares the address invalid.
  • Paused account: indefinitely, until you reactivate or delete it.
  • Account whose email address was never confirmed: 14 days after sign-up, following a reminder with the exact date.
  • Account deletion: after a period of 14 days, during which you can revoke the deletion, all data is irrevocably deleted.
  • Invoices: seven years after the end of the financial year (Dutch retention obligation), kept separately from the account and without a link to the profile once the account is deleted.
  • Bug reports: the screenshot is deleted when the report is closed, the report itself 30 days later.
  • Job applications: six months after a rejection, a withdrawal or, without a decision, after arrival, CV included; if you are hired, in the personnel file.
  • Help out: the delivery address 30 days after dispatch, at once if the order is declined or withdrawn; photos and signatures twelve months after the placement has ended; orders, reports and material counts until your account is deleted.
  • Further exceptions: ongoing proceedings about reported legal violations.
  • Log data: 14 days.
  • Login history: 90 days.
  • Scene guide: statements, reviews and venue photos until you withdraw them or your account is deleted; “You can meet me here” is no longer shown after 90 days; accepted scout contributions stay in the entry without reference to your account.
  • Replies to dates (“I’m coming”): until the day after the evening.
  • Mood in the chat: until you change or remove it, at most as long as the chat.
  • Feed entries: 60 days.
  • Voucher redemption, invitation and founder status: until the account is deleted.
  • Reports: one year after closure, provided no further report about the same member or content is open and no suspension is in force; the reporter’s IP address and, for guests, email address 90 days after the report, at the earliest on closure. Decisions on pictures and voice hellos: as long as the content exists. Blocks: until you lift them or an account is deleted.
  • Release for “Already here”: until you withdraw it or delete the picture.
  • Visitor statistics: individual records 180 days, after that only aggregated numbers.
  • Backups: database backups overwrite themselves continuously after about 2 days; files you delete remain in the backup for up to 90 more days.
  • Notifications in the bell: 90 days; you can remove read ones at any time.
  • Handshake: until one side withdraws it, a block occurs or an account is deleted.
  • Partner profile: until one side dissolves the link, a block occurs or an account is deleted.
  • Voice hello: until you remove or replace it; the review transcript is deleted at once on approval, after a decline the recording and the transcript stay for six months for an objection.
  • Text of the voice hello and texts of voice messages: as long as the recording or the message they belong to; you can remove the text of your voice hello at any time before that.
  • Video calls: only participants, time and duration, for as long as the chat history; technical measurements of the connection 90 days; picture and sound are never stored.
  • Data from the old daddyboy.de: until the pseudonym is taken over or the reservation period expires.
  • Profile visits: 30 days after the last visit.
  • Internal team notes on your account: until the account is deleted.
  • My shelf (music, books, films, games): each entry until you remove it or your account is deleted; the catalogues’ answers for up to a week, without any link to you.
  • Notes on other members: each note until you delete it or until your account or that of the other member is deleted.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consents you have given at any time with effect for the future. Access and data export are available as self-service in your account; data of other people is pseudonymised in the process (Art. 15(4) GDPR). Otherwise contact datenschutz@daddyboy.eu.

You can lodge a complaint with a supervisory authority, in particular the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or the supervisory authority of your country of residence.

8. Security

Encrypted transmission (TLS), a shield against overload attacks in front of the server (3.5), encrypted storage of sensitive content, passkeys as the recommended login method, two-factor authentication, role-based access control and logging of every access to sensitive content by our staff.

9. Changes

We adapt this policy when functions or the legal situation change. The applicable version carries the date of its last change. In case of material changes we inform you in the app or by email.

This policy was written in German. Versions in other languages are translations for your orientation; where they differ from the German version, the German version prevails.