Privacy policy

Edition 2026-10-07

What we collect

You enter your email address, name, date of birth, gender, city, the text about yourself and your photos yourself. You also write the names and descriptions of clubs you create and your messages in them. You give your answers to the questionnaire yourself as well, and some of them speak to political views and to attitudes towards health. This is a special category of data, and we collect it only with your explicit consent.

If you wish, your profile can say more about you: what you are looking for, your interests, answers to questions about yourself, the languages you speak, your communication style, your plans for children, whether you have children, your education, your work, your height and your attitude to alcohol and smoking. All of these fields are optional, and each has a "Rather not say" choice that erases the value. The fields you fill in are seen by the people your profile is shown to.

If you sign in with a passkey, the server keeps its public half: the key's id, the public key, the model of the device or password manager when it names one, the name you gave the key, and the dates it was made and last used. The private half stays on your device or in your password manager, and we never receive it.

When you use the app, the server receives technical data: the IP address a request came from, the time of the request and details of the browser or the app. From the IP address, Cloudflare's network works out an approximate city and country. The app offers the city for your profile while you fill it in, and uses the country to choose how dates are written. The city is saved only if you keep it in your profile; the country is not saved at all.

If the app crashes, it sends a report about it: which place in the code failed, the device model, the system and app versions, your account's internal number and the country the report came from.

The Android app and the web version also send usage statistics: which screens you open and what you do, such as "like given" or "message sent", without their content. On Android the device's advertising identifier goes with them. You can turn statistics off; a section below says how.

Why

The answers are used to calculate how closely two people's views match, show suitable profiles and recommend clubs. Usually other people see only the match percentage and the number of matching questions, not the answers themselves. The exception for clubs by answer is explained below.

Your email address is needed for signing in, for recovering your password and for letters about a new match, a new message and a rejected photo. Letters about matches and messages can be turned off in the app's settings.

Technical data keeps the service running and protected: the IP address and time of a request are how we fend off password guessing and investigate abuse. Crash reports are needed to find and fix errors, so they are sent without separate consent: without them we would not know that something broke for you. Statistics show us where people struggle, so that we can fix it, and help us advertise GlogerMatch itself: to show its ads to people it may suit and to see which ads bring people in.

What other people see in clubs

The name and description of a club you create, and your name as its creator, are visible to users browsing the catalogue. Club members see your name, photo, match percentage with them and your messages in that club. Joining a club by interest does not disclose your questionnaire answers.

A club by answer has one question and one answer choice. If you join after the warning, club members see your membership and learn that you chose that answer. The warning before joining asks you to confirm this disclosure separately. Do not join if you do not want to show that answer to other club members. Leaving removes you from the member list, but messages you wrote remain visible to members while the club exists or until a moderator hides them.

Category suggestions

If you suggest a club category, we store its name, up to three example interests, an optional explanation, language, a link to your account and the administration’s replies. Only you and authorized administrators can see them. They are not published in the catalogue or sent as text to analytics or logs. Do not include contact details or links.

Read replies in My suggestions; no separate push notifications or emails are sent. Closed suggestions are deleted 180 days after the decision. Open suggestions remain until a decision; those older than 90 days enter the overdue review queue. Deleting your account removes authorship and the complete text of your suggestions and their replies.

Where the data is kept

The app's server runs in a DigitalOcean data centre in New York, in the United States. The database lives there: accounts, questionnaire answers, likes, matches, messages, clubs, memberships and reports. So your data is processed in the United States, even if you live in another country. Photos and the nightly backups of the database are kept in Cloudflare R2 storage. We chose North America for it, but Cloudflare does not promise that the data never ends up in another country. The moderator who reviews reports and photos has access to the data.

The application server keeps an activity log and a request log. The activity log records who created, changed or deleted a record, when, and from which IP address, without its content. The request log records the time, the address requested and the server's answer, without the IP address, and its oldest entries are erased as it fills up.

Who we share it with

We do not sell data. Only the services below receive it, and each receives what its task needs.

DigitalOcean, United States: the server the app runs on and the database lives on.

Cloudflare, a United States company with a network around the world: all traffic to the server passes through its network, so it sees your IP address and works out the city and country from it. Its R2 storage holds the photos and the database backups, and the backups contain all of the data listed here, the questionnaire answers included.

Emails are sent from our DigitalOcean server in the United States. Postmark, also in the United States, is our backup email service, which we switch to manually. When we send through this backup, it receives your email address and the email text, which may include the name of the person the email concerns. Emails contain neither questionnaire answers nor conversations.

Google, United States: signing in with Google, if you use it, delivering notifications to your phone through Firebase, if you allowed them, and usage statistics through Google Analytics for Firebase, unless you turned them off. If you are signed in to a Google account and allowed ad personalisation in it, Google may link the statistics to that account and use them under its own rules, advertising included.

Sentry, servers in Germany: crash reports.

Statistics and crash reports never include your questionnaire answers, messages, match percentages, photos, name, email address, date of birth, gender, who you are looking for, city or anything you wrote yourself. There are no ads inside the app. Only Google receives the device's advertising identifier, with the statistics.

Usage statistics

In the Android app and the web version statistics are on from the first launch. The iOS app does not send statistics yet. You can turn them off at any time in the app: "Safety and data", the "Usage statistics" switch. The app works the same without them.

While statistics are off, the app sends no events to Google at all. Your account's number never goes into them: they are tied to a random number the app makes when it is installed and, on Android, to the device's advertising identifier. Deleting the account resets the random number. The advertising identifier is reset or turned off in the phone's settings. In the web version the random number is kept in a browser cookie, which appears while statistics are on and is erased when the account is deleted.

How long we keep it and how to delete it

For as long as you have an account. You can delete it from the app itself, in the safety and data section: your answers, photos, likes, blocks, messages and the activity log's records about you go with the account. Reports that mentioned you remain without your name, because they still have to be reviewed after the account is deleted.

Some data has its own retention periods. Database backups and activity log records are kept for 30 days, so a deleted account disappears from the backups within 30 days. Crash reports are kept for 30 days, and statistics at Google for no more than 14 months.

Emails on our server stay in the queue until delivery or until we stop trying to send them. The retry period for a temporary failure is one day. The queue survives server restarts and updates. The mail log keeps sender and recipient addresses, the time and the delivery result, without the email text. Older records are erased as the log fills up, and the log is deleted at the next application deployment. It has no fixed retention period in days.

For emails actually sent through the Postmark backup, its default retention period for email text and delivery details is 45 days. Aggregated statistics and records of addresses blocked after delivery failures or spam complaints remain longer. This period does not apply to emails sent from our own server.

If an account is closed for sexual material involving minors, that material and the account's data stay with us after deletion: we keep them for the investigation for as long as the law requires.

Consent can be withdrawn

Withdrawing your consent to the processing of your questionnaire answers means deleting your account: without the answers, the app cannot do the one thing it exists for. Statistics are turned off with the switch under "Safety and data", and the account stays.

You can write to us at info@glogermatch.com.