Privacy

What we collect

From a member: the email address and display name you register with, a one-way hash of your password — never the password itself — your two-factor secret if you turn it on, and the language and currency you last chose.

From a companion: everything on the profile, which is published deliberately, and the contact methods, which are not. Those are stored so they can be shown to a signed-in member and to nobody else.

From anyone who writes to us: the name, the address and the message you put into the contact or copyright form, kept with the request they belong to.

Automatically: the IP address and browser string a request arrives with, and the time it arrived. They rate-limit abuse and keep an audit trail behind moderation decisions. They are used for nothing else.

What we never collect

There is no payment anywhere on Evening Companion, so there is no card number, bank detail or billing address in it. We do not buy data about you, we do not sell or rent what we hold, and no advertising network runs on this site.

Why we are allowed to hold it

An account and a listing are held to perform the agreement you entered into by creating them. IP addresses, moderation notes and rate-limit counters are held on the legitimate interest of keeping the directory lawful and safe for the people in it. Analytics, where the operator has configured any, and an agent's access to a companion's contact details rest on your consent, which you can withdraw.

Cookies, and what your browser keeps

One cookie signs you in. It is set when you sign in and cleared when you sign out; without it the site cannot tell who you are.

Everything else stays in your browser and never reaches us: your age confirmation, your shortlist of favourites, your language and your currency. Clearing your site data removes them.

If the operator has configured an analytics key, that provider's script counts page views. Where none is configured — the default — no third-party script runs on the page at all.

Who can see what

A visitor sees a profile and is told that contact methods exist, without being shown one. A signed-in member sees the values. An automated agent sees them only after a signed-in member has approved that agent by name on the consent screen, and only for as long as the approval lasts.

Administrators can see accounts, listings, submissions and moderation history, because reviewing them is the job. Nobody else has access, and there is no export of members to anyone.

How long we keep it

An account and its listing live until you close them; closing removes the profile from the directory and deletes the contact methods with it. Contact messages and copyright notices are kept for two years, because a takedown and its counter-notice have to remain reconstructable. Request logs are kept for 90 days. Backups age out within 30 days of a deletion.

Your rights

You can ask for a copy of what we hold, correct it, have it deleted, object to a use of it, or ask us to pause processing while a dispute is settled. Most of it you can do yourself from your account and, for a companion, from the portal. For the rest, use the contact form and say which right you are exercising. We answer within 30 days.

Security

Passwords are hashed with a modern algorithm and never stored or logged in the clear. Two-factor authentication is available to every account. Uploads are served through the application rather than from a public bucket, so a media URL cannot be guessed into an archive of somebody's photographs. If a breach ever affects you, we will tell you.

Where it is processed

Data is held on servers rented by the operator of this site and processed by the operator's own staff. It is not passed to a third party for that party's purposes, and there is no processor in the chain that is not needed to serve the page you asked for.

Children

Evening Companion is for adults. It is not directed at anyone under 21, we do not knowingly hold data about anyone under 21, and an account we learn belongs to a minor is deleted rather than corrected.

Changes

The version of this page you are reading is the one in force. A change that affects data we already hold is announced before it takes effect.