Your profile is personal. We treat it that way.

1. Controller and contact

The controller is Daniel Koller personally, Dammstraße 21/48, 1200 Vienna, Austria. HonestTake is not operated through a company. Contact [email protected] for privacy questions or rights requests. No data protection officer has been appointed on the current scale and processing facts.

2. Scope, people and sources

This notice covers visitors, members, reviewers, reporters, and identifiable people appearing in submitted content. Data normally comes from you, from other users who submit feedback or reports, from service/security events, and from the providers named below. If somebody uploaded your image without permission, use the reporting route.

3. Data we process

• Account: email, authentication identifiers, display name or alias, session/security events, age declaration, legal acceptance records, referral code and the content page that led to signup when present.
• Profile and preferences: pronouns, gender identity, dating intention and reviewer-audience preferences you choose to provide.
• Tests: photos, prompts, bios, test context, storage references, status and timestamps.
• Community activity: assignments, structured ratings, written feedback, helpfulness marks, reviewer reputation, credits, reports, decisions and appeals.
• Optional outcome tracking: self-reported weekly matches, conversations and dates before and after a profile change, plus the change note and measurement dates.
• Technical, audience and support: IP address, browser/device and request metadata, Turnstile/security signals, errors, aggregate page views, visits, referrer host, country and page-performance measurements, plus support communications and rights requests.

4. Purposes and legal bases

• We use account, test, matching, feedback, credit, referral, export and deletion data to provide the service you request and perform our agreement with you (GDPR Article 6(1)(b)). Referral rewards are recorded only after the invited member completes setup.
• We use feedback helpfulness to show reviewer reputation and apply limited weighting to future results as part of the requested service (Article 6(1)(b)).
• We process optional outcome tracking only when you choose to start an experiment, so you can compare your own before and after figures (Article 6(1)(a)). It is not used to promise or infer a dating result.
• We use proportionate security, fraud-prevention, service-integrity and moderation data for our legitimate interests in protecting people and the service (Article 6(1)(f)). You may object based on your particular situation.
• We use privacy-configured, aggregate website measurements to understand which pages are useful and whether the site performs reliably, based on our legitimate interests in operating and improving the service (Article 6(1)(f)). These measurements are not used for advertising or individual profiles. You may object based on your particular situation.
• Optional dating/audience preferences can reveal sexual orientation or other special-category information. We process them for matching only after separate explicit consent (Articles 6(1)(a) and 9(2)(a)).
• We process records where necessary to comply with a specific legal obligation (Article 6(1)(c)) or establish, exercise or defend legal claims, including Article 9(2)(f) where applicable.

5. Sensitive-data consent and choices

Consent for potentially sensitive dating/audience preferences is separate from accepting the Terms. It is optional unless a chosen test audience cannot be supplied without that preference. You may withdraw it at any time by emailing us or deleting your account. Withdrawal does not affect earlier lawful processing. We will stop future consent-based matching and erase or neutralise the optional preference unless limited retention is legally necessary. An in-product withdrawal control is planned.

6. Required and optional information

An email/authentication method, an 18+ declaration, accepted legal versions, and content needed for a requested test are required to create and operate that test. Optional profile fields are labelled or apparent from context. Without required data we cannot create an account or provide the requested feature; refusing optional data does not prevent use of unrelated features.

7. Who receives content

Assigned reviewers receive the content and limited audience context necessary to review it. They do not receive your email, exact birth date, full identity, or other reviewers’ identities from HonestTake. Test owners receive aggregated results and permitted anonymous feedback. Reviewers are prohibited from copying, identifying, contacting, scraping, or redistributing users.

8. Providers and international transfers

Supabase provides authentication, database and private file storage. Cloudflare provides website delivery, security, Turnstile and privacy-configured Web Analytics. They process configured service data under their applicable terms and data-processing agreements and may use subprocessors. Where data is accessed or processed outside the EEA, we rely on an applicable adequacy decision or contractual safeguards such as Standard Contractual Clauses, together with supplementary measures where required. Exact provider entities, regions and subprocessors are kept under review. We do not claim the stack is categorically EU-only.

9. Browser storage and privacy-friendly analytics

HonestTake uses browser storage or similar device access only where necessary for secure sessions, requested preferences and abuse prevention. Cloudflare Web Analytics measures aggregate page views, visits, referrer hosts, countries and site-performance signals. Cloudflare states that this service does not use cookies or local storage, fingerprint individual visitors, or collect or use visitors' personal data for Web Analytics. It does not log URL query strings. Unsampled beacon data is retained for seven days, then reduced to aggregate data that can be accessed for up to six months. HonestTake does not use advertising, cross-site tracking or session replay.

Because the current analytics setup does not place or read analytics cookies or comparable identifiers, no analytics opt-in banner is shown. If the technology or purpose changes in a way that requires consent, it will remain disabled until an equally accessible choice and withdrawal mechanism is available.

10. Automation

Automated rules assign eligible reviewers, avoid duplicate/self-review, aggregate ratings, award credits, detect obvious misuse, and may cancel a test after the configured report threshold. These operations do not currently make decisions producing legal or similarly significant effects. Moderation outcomes can be challenged through the reporting and appeal route. We do not infer protected traits from photos or perform facial recognition.

11. Retention and deletion

Account, signup-attribution, referral and active profile data remain while the account is active. Photos, prompts, ratings and feedback remain until the related test or account is deleted, subject to short operational and integrity periods disclosed in the service. Unverified registrations, assignment links, exports and routine security logs expire on shorter configured schedules. Restricted report, incident or legal records remain only as long as proportionate to safety, legal duties or claims. Rolling encrypted backups expire through their configured cycle; deleted data is not restored to active use. Account deletion removes active database and storage records, except narrowly retained security or legal evidence.

12. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction, portability, or object to legitimate-interest processing; withdraw consent; and complain to a supervisory authority. Account & Privacy provides export and deletion controls. Requests may be sent to [email protected]. We normally respond within one month and verify identity proportionately.

In Austria, the supervisory authority is the Österreichische Datenschutzbehörde, Barichgasse 40 to 42, 1030 Vienna, dsb.gv.at.

13. Other people, age and safety

HonestTake is for adults aged 18 or older. Do not upload a minor. Do not upload an identifiable adult unless you have authority and their agreement. A depicted person may seek removal without access to the uploader’s account. Reports are handled confidentially and reporter identity is not disclosed unless necessary and lawful.

14. Security and changes

Safeguards include private storage, row-level access controls, scoped reviewer assignments, server-side operations, rate limits and restricted administration. No online service is risk-free. We will maintain dated versions and notify users appropriately of material changes before they take effect.