Privacy Policy

Last updated: October 10, 2026 · Version 2026-10-10

Cuffplay helps adults explore what they like — alone, or privately with a partner they already know. What you tell us is about your sexuality, so we treat almost all of it as sensitive. This policy explains, in plain language, what we collect, why, who can see it, how long we keep it, and how to get it back or delete it.

1. Who we are and what this covers

“Cuffplay”, “we” and “us” mean the operator of cuffplay.com and the Cuffplay app for Android. This policy covers both. They share one account: if you sign in to the app with the same Google account (or email) you use on cuffplay.com, it is the same account, and your test results, map and settings follow you between them. Contact us at privacy@cuffplay.com.

Cuffplay is only for adults 18 and older (section 10).

2. What we collect

Account

  • Email address, and your Google account identifier if you sign in with Google.
  • Display name. You choose it; it doesn't need to be your real name.
  • Date of birth (or, for some older website accounts, an 18+ confirmation), used only to confirm you're an adult.
  • A password hash, if you use a password on the website. We never see or store the password itself.
  • Which version of the Terms and this policy you accepted, and when.

Sensitive information: your sexual preferences

  • Your test answers and results, including limits you mark as “never”.
  • Your map of interests, curiosities and limits, and anything you import from the website into the app.
  • Compatibility profiles and statements you write about yourself on the website.

We ask for your explicit consent before we store this kind of information in the app (the first time you save your map or import a result), separately from accepting the Terms. You can withdraw that consent at any time by deleting the data or your account. We do not infer anything about you that you haven't told us, and we never use this information for advertising.

Shared spaces with a partner

  • The connections you make, and their status (active, paused, ended).
  • What the two of you create together: tasks, rituals, agreements, notes, check-ins and points, and which items from your map you chose to share.

Safety and support

  • People you block, and reports you send or that are made about you (category, optional text, case details).
  • Messages you send to support.

Technical information

  • IP address and basic device and browser information, used to keep accounts secure and stop abuse (for example, limiting repeated invitation or sign-in attempts). Where we only need to count attempts, we store a one-way hash, not the address.
  • Sign-in sessions and, in the app, a push-notification token if you turn notifications on.
  • Usage events we record ourselves (for example, “a test was started”) with a coarse device type. These never include your answers, scores, map items, what you wrote, your partner's name, your date of birth or Age Signals results.
  • Crash reports from the app (see section 5).

What we don't collect

  • No precise location, contacts, photos or microphone. The app has no image uploads.
  • No advertising ID, and no advertising or third-party analytics SDKs in the app.
  • No government ID.

3. Why we use it

  • To run Cuffplay: your account, your results and map, and the spaces you share with a partner.
  • To confirm you're an adult and keep minors out (section 10).
  • To keep people safe: handle reports, enforce our Terms, prevent abuse and fraud.
  • To send messages you need: sign-in, security and account-deletion emails; notifications you turned on.
  • To understand, in aggregate, which parts of Cuffplay work and fix what breaks.
  • To meet legal obligations.

We don't sell your information, don't share it for advertising, and don't show ads.

4. What your partner can see

Nothing is shared just because you connected. Inside a shared space your partner sees only what you choose to share there — for example, specific items from your map — plus what you create together. Items you mark as a hard limit are never shown. Pausing, ending or blocking stops sharing immediately. Your other connections are never visible to each other. Notifications on your lock screen never show names or content.

5. Who else processes it

We use a small number of service providers, each only for the job listed and under contract:

  • Cloudflare — hosting, database and storage for the website and app server; privacy-friendly page statistics on the website (no cookies, no cross-site tracking).
  • Google — Google Sign-In; Google Play, including the Play Age Signals check (section 10); Firebase Cloud Messaging to deliver notifications you turned on (the message carries only an event id, never content); Firebase Crashlytics for crash reports, which contain technical details of the crash and no text you typed.
  • Zoho — sending account emails.
  • Telegram — support messages you send in the app are delivered to our support team through a Telegram bot. Don't include more detail than you need to.
  • Payments — if you ever buy something, Google Play or our payment processor handles it; we never see your full card number.

We may also disclose information when the law requires it. We ask for valid legal process, push back on requests that are too broad, and tell you about a request when we're allowed to. Child sexual abuse material is reported to the U.S. National Center for Missing & Exploited Children (NCMEC) and the relevant authorities (see Child safety). If Cuffplay is ever sold or merged, this policy continues to apply to your information.

6. How long we keep it

  • Your account and its data: until you delete it. After you ask, you have 7 days to change your mind; then it is permanently deleted — always within 30 days of your request.
  • A shared space that ends: neither of you can open it any more. For 30 days each of you can download your own part; then its content is deleted. A record that the connection existed, without any content, is kept for 90 days for safety.
  • Backups: encrypted, and rolled over so deleted data is gone from them within 30 days.
  • Keeping minors out: if we close an account because its owner is under 18, we keep a one-way keyed hash of the sign-in identifier for 6 months so the same account can't immediately register again. It can't be turned back into the identifier.
  • Invitations: a link works for 7 days at most; its hashed token is erased 30 days after the invitation closes.
  • Website test without an account: an unfinished test can be resumed for 30 days. A finished result stays available at its private link until you delete it or ask us to (send us the link).
  • Security records (attempt counters, sign-in sessions) expire on their own, from minutes to 30 days. Reports are kept as long as needed to handle them and protect people, or longer if the law requires.

7. Your choices and rights

  • Delete your account in the app (You → Delete account) or at cuffplay.com/account/delete. This deletes the account on the website and in the app together.
  • Delete a single result with “Delete everywhere” in the app's results, or ask us; this also removes compatibility profiles made from it.
  • Get a copy of your data: download your part of a shared space in the app, or email privacy@cuffplay.com for everything we hold about you, in a portable format.
  • Correct your details in settings, or ask us. Withdraw consent or object to a use at any time.

We answer requests within 30 days and may need to confirm it's you first. We won't treat you differently for using your rights.

8. Security

Data is encrypted in transit and at rest. Tokens and keys that grant access are stored only as hashes. Access to production data is limited to the few people who need it. The app keeps its sign-in tokens in the device's protected storage and excludes its data from device backups. No system is perfect; if a breach affects you, we will tell you and the authorities as the law requires.

9. International users

Cuffplay is offered in many countries and run with providers whose servers are in the United States and other countries. Wherever you are, the protections in this policy apply. When we transfer personal data out of the EEA, the UK or Switzerland, we rely on the safeguards the law provides, such as the European Commission's standard contractual clauses.

EEA and UK: we use your information to provide the service you asked for (contract); to keep it secure and prevent abuse (legitimate interests); to meet legal duties; and, for your sexual preferences, only with your explicit consent. You can also complain to your data protection authority. California and other U.S. states: we use sensitive personal information only to provide Cuffplay, and we don't sell or “share” personal information for advertising.

10. Adults only

Cuffplay is for people 18 and older. On the website, everyone confirms they're 18 or older before the test starts, and accounts give a date of birth. In the app, we also use Google Play Age Signals when you sign in: it tells us whether Google believes the account belongs to an adult, without telling us anything else about you. We use the answer only to keep minors out, keep it on your device for up to 24 hours, and never use it for anything else. If we learn an account belongs to someone under 18, we close it, end its connections and delete its data (section 6).

11. Changes

This is version 2026-10-10. If we change how we use your information in a way that matters, we'll tell you in the app or by email before it takes effect, and ask for your agreement again where the law requires.

12. Contact

Privacy questions and requests: privacy@cuffplay.com. Safety: safety@cuffplay.com. Everything else: support@cuffplay.com.