Technology & transparency

This page explains in plain words how DaddyBoy runs technically: which cookies we set, where the platform is operated, which external services are involved and what happens to pictures and messages. The legally binding version is the privacy policy; this page is meant to be understandable.

Cookies

We set only technically necessary cookies. None of them tracks you, none is passed on to third parties, none serves advertising.

Because there are no cookies for advertising or statistics, we don't need a cookie banner. There is nothing you would have to consent to.

Browser storage

A few settings stay only in your browser and never reach our server:

• theme – Light, dark or device.
• hot.density – The tile size you chose in the picture zones.

Once, your browser also reports its time zone so the digest arrives at the hour you chose. It is shown under Account › Notifications where you can change it.

Where the platform runs

DaddyBoy runs on a server we manage ourselves, hosted by Bedrijf voor lekker internetten B.V. in Eygelshoven, Niederlande. Database, pictures, voice messages and chats are stored there and nowhere else. There are no content delivery networks and no embedded third-party scripts.

Backups are stored encrypted in Eygelshoven, Niederlande and overwritten after a short period.

Email delivery runs on a second machine of our own (news.daddyboy.eu) at the same location, separate from the platform server: it only knows the recipient address and the content of the mail and has no access to the database, pictures or chats.

A watchdog on that second machine asks every five minutes only whether the platform answers and reports outages to us. No member data is involved, only the status is transmitted.

The operator is Bedrijf voor lekker internetten B.V. in Swalmen. European law applies; the supervisory authority is the Dutch data protection authority.

External services

Four things we can't do ourselves: process payments, check IDs, deliver push notifications and send emails. For each service, here is what it sees and what it doesn't. On top of that there are two services that only come into play when you want them to: radio stations and the open catalogues for your shelf.

• Payment provider – Payment details and billing address stay with Payment provider. We receive only the confirmation, a customer number and the country for the VAT on our invoice. Sees no profile, no pictures, no messages. The statement shows the operator, not DaddyBoy.
• Your browser's push service (Apple, Google, Mozilla) – That a notification arrives, and the push address of your device. The content is encrypted; only your device can read it. With disguise mode we send only “New notification” without content. Never pictures, never message texts.
• Eigener Mailserver – Your email address and the content of our mails to you. Emails never contain chat content, only notices; pictures only with consent. More under “Emails from us”.
• Radio stations (only while playing) – Your IP address and your browser as soon as you start a station under Radio; the stream comes straight from the station, not through us. No account, no profile, nothing from us. As long as you play nothing, the station learns nothing.
• MusicBrainz, Wikidata and Open Library (only when searching for your shelf) – The search term you type in your profile for your shelf. Our server sends the query, not your browser. Artist data comes from MusicBrainz, data on books, films, series and games from Wikidata and, if you do not find a book there and search further, from Open Library. No IP address, no browser, no account, no profile: nothing that points to you.

We carry out the age check ourselves: there is no external service for it, and your recordings never leave our server. You take a picture of your ID, a short tilt video and a selfie video; the files are stored encrypted in a separate area that only the reviewing person can open, and they are deleted with the decision. What remains for good is only the record that a check took place — who, when, with what result and against which kind of document, without a single image.

Note: on this system payment, age verification or push delivery are still configured as a test environment.

Emails from us

You choose which emails you get under Account › Notifications. Instant notices about messages, requests, matches or likes go out only while you are not signed in, and at most one per chat until you open it. The digest arrives daily or weekly at the hour you pick.

If you have been away for 3, 14 or 60 days we remind you once each, then we stay quiet. News from us only if you ticked the box for it. Each of these emails has an unsubscribe link that works without signing in; mandatory notices about your account, payments and moderation remain.

Emails never quote chat content, only that something is waiting. Other members’ profile pictures appear only if they allowed it, and your profile picture in emails to others only with your consent (default: off). With camouflage switched on every email arrives neutral: a different sender, a neutral subject, no names and no pictures.

Our mail delivery sees your address and the content of our emails, like any mail server. Pictures are attached as part of the email, nothing is loaded when you open it; no tracking pixel, no click measurement: we do not know whether you opened an email. The digest is built at the moment of sending and not stored.

What happens to pictures

Every picture is re-encoded on upload: camera data, location and other metadata are dropped, and only the sizes the platform needs are created. We don't store the original.

Pictures are stored outside the web directory and are reachable only via short-lived, signed links. Who may see a picture is decided by the platform on every request: category, verification, membership and your releases. Before the first display, a process of software, community and team reviews every picture.

The software is our own and runs on our server; no picture goes to a cloud. It recognises nudity, assigns categories and, on recognisable faces, estimates the age, only as a hint for the team; it identifies nobody and stores no facial features. It may release only clearly clothed pictures on its own, everything else is decided by people. The same process listens to the voice hello: a transcript that serves the review only. On approval it is deleted at once; after a decline the recording and the transcript stay for six months so you can object, audible only to you and the team, and are deleted afterwards.

Messages and voice messages

Chats are stored on our server and are visible to the moderation team only when a message is reported. Self-destructing pictures are removed from the server after viewing or after 24 hours, not just hidden. Voice messages are delivered via signed links like pictures.

My shelf: music, books, films and games

The artists, bands, books, films, series and games on your shelf come from open catalogues: artists from MusicBrainz, everything else from Wikidata and, if you do not find a book there and choose “Not there?”, from Open Library. Our server sends the search. Only what you typed goes to the catalogue, never your IP address, your browser or anything from your account. We answer identical search terms from a temporary store for up to a week, without recording who searched.

We store only what you put on your shelf: the identifier of the work in the catalogue, title, creator, year, the kind (film, series, video game, band …), for artists the country, plus what you said about it (“fan”, “read”, “want to watch”). We do not take cover images or posters, because the catalogues give us no rights to them. A work is the same entry for everybody; that is the only way to tell what two members have in common. The team does not create or edit works, it can only block individual ones. If you tap an entry on a shelf, a small card shows a short text from Wikipedia (CC BY-SA 4.0, with a link to the article) and a few facts from Wikidata, such as genre, origin or platforms. Our server fetches this too, once per work and language, and stores it with us; Wikimedia does not learn who opens the card.

In the matching a shared work counts as something you have in common, a rare one more than one that many members hold; the same author, director or studio with different works counts half. Only two shelves are ever compared, yours and that of the member you are looking at. We do not sort works by topic and draw no conclusions from your shelf. Sources: MusicBrainz (MetaBrainz Foundation, core data CC0), Wikidata (Wikimedia Foundation, CC0), Open Library (Internet Archive, open catalogue data).

Reporting a bug

If you report a bug we store your description, the page, your browser and your address (IP); a screenshot only if you attach one yourself. Only the team sees it, never other members. The screenshot is deleted as soon as the report is closed, the report itself 30 days later.

Delete means delete

When you delete your account, it stays paused for 14 days so you can change your mind. After that, profile, pictures, voice messages and chats are permanently removed. What must be kept by law, such as invoices, stays separate and without a link to the profile. You can get a copy of your data at any time under Account › Status.

What we live on

DaddyBoy is funded solely by the Premium terms members book. There are no advertisers, no data trading and no investors expecting growth at any cost. That is a deliberate choice: whoever sells no advertising has no need to track, measure or bait anyone into clicking.

The flip side: much of what drives revenue elsewhere simply isn't here. No bait offers with a countdown, no invented visitors or likes, no emails whose only job is to lure you back to the site, no subscription that quietly renews itself.

So every Premium booking pays not just for features but for the server, the moderation and further development. If DaddyBoy is worth something to you, Premium is the most direct way to support the platform. Thank you.

What we don't do

• No third-party advertising, no selling or trading of data. You will see notes about our own offers such as Premium, but never adverts from others.
• No trackers, no analytics services, no social media buttons.
• No link to real names, phone numbers or other networks.
• No training of AI models with your pictures or messages. The picture review runs on our server.
• No subscriptions: Premium is a term you pay for once and that ends by itself. We remind you a week before.
• No recommendations from your taste: we build no profile of you from music, books and interests, we only show what you have in common with another member.

Everything is binding and complete in the Privacy policy. Questions about the technology: write to datenschutz@daddyboy.eu.