This document is provided in English. The English text is the legally binding version.
Last updated: 15 August 2026 · Version 2
The controller of your personal data is AITailor OÜ, a company established in Estonia, which operates CIPHER at cipherdate.me. For anything in this policy, including exercising your rights, write to contact@cipherdate.me.
CIPHER is built so that you can look for a partner without exposing who you are. Other members see a handle you choose, not your name; your photos stay blurred to a new match, opening progressively as your mutual conversation builds trust; and the most sensitive things you write are encrypted at rest, never shown to anyone, and used for one purpose only: finding you compatible people. We run no advertising trackers and no third-party analytics, we set no third-party cookies, and we never sell your data. If you reached us by clicking one of our ads, we do record the click identifier from that link so we can tell the ad network the sign-up happened — that is described in section 3 and is the only advertising data we hold.
Matching is the service, so this is the processing that matters most. The preferences you save — including your Vault text — and your profile choices are converted by automated means into numerical representations that can be compared for similarity. Those similarity scores decide which members we suggest to you, whom your posts and personal adverts are visible to, and who is considered for a live room. The people we suggest never see your Vault — they see the fact that you are compatible, and a short AI-generated conversation hint derived from both members’ Vault text, produced under instructions not to reveal either member’s answers. A plain-language walkthrough of this processing is at cipherdate.me/privacy-ai.
Because this involves data about your sex life and orientation, we process it on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give when you create your account and fill in these fields. Filling them in is voluntary — the more you share, the better the matching — and you can withdraw consent at any time by clearing the fields or deleting your account. No decision with legal or similarly significant effect is made about you this way; matching only ranks suggestions inside the service.
To keep the service lawful and safe we screen content automatically before it is shown: images are classified for illegal and adult material (an image flagged as child sexual abuse material is blocked on upload, sealed as evidence and escalated to a designated staff reviewer who reports confirmed cases to the competent authorities after human verification; other adult material gets an audience rating), and text is screened too — personal adverts and profile bios for contact details, commercial solicitation and illegal asks, and opening responses to adverts and comments on posts additionally for abusive language. Content that fails text screening is not shown; adverts, responses and comments that fail go to a human moderator for the final decision, and the screening verdict is stored with them. We count blocked attempts per account to spot repeat abuse. Access to flagged material is restricted and every access is recorded. Details of the moderation process are in the Terms of Service, section 10.
Your handle (or “Anonymous” if you have not set one), your age, an indication of compatibility, and the content you publish to the audience it is published to. Your photo is shown blurred to a new match and becomes visible progressively as your mutual conversation builds trust. Your email, location coordinates and Vault are never shown to anyone. Staff access to member data is limited by role and every administrative action is recorded in an audit log.
Everything lives as long as your account does, and you can delete content yourself at any time. Deleting your account erases it immediately and irreversibly: profile, Vault, photos, posts, matches and conversations (including for the people you talked to), credits and notifications. Three things outlive deletion: an irreversible cryptographic hash of your email address (so we can recognise abusive re-registration — it cannot be turned back into your address), transaction records we must keep under accounting law (seven years in Estonia), and content removed by moderation or preserved as evidence of illegal activity, which is quarantined for as long as the law requires.
You can access, correct and delete your data yourself: your profile and Vault are editable in place, “Your data” on the profile page downloads a machine-readable export (your account, profile, Vault, the messages you sent, your posts and your transaction ledger — messages other people sent you are their personal data, so they are not in your export), and the same page deletes your account. Beyond that, you have the GDPR rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting past processing — write to contact@cipherdate.me. You can complain to your local supervisory authority or to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
Vault content is encrypted at rest; passwords are stored only as strong hashes; connections are encrypted in transit; staff access is role-gated and audit-logged; and abuse is throttled by rate limiting. No system is perfectly secure — if a breach ever puts you at risk, we will notify you and the supervisory authority as the GDPR requires.
We use no cookies for tracking or advertising. Your browser’s local storage holds only what the service needs to work: your login session and your chosen language. These are strictly necessary and set no consent banner in motion.
CIPHER is for adults only. We do not knowingly process data of anyone under 18; such accounts are deleted as soon as we learn of them.
If we change this policy in a way that matters, it gets a new version and you will be asked to review and accept it before continuing to use the service.
AITailor OÜ (Estonia) · CIPHER · cipherdate.me · contact@cipherdate.me. We answer in English or Estonian.