Domyrian.

Privacy Policy

Last updated November 2026. We tried to write what this page actually does, not what a template says it should do.

1. The short version

You register with a handle, never a real name — that's deliberate, since a kink identity attached to a real name is a much bigger exposure here than on an ordinary site. We don't sell your data, don't show ads, and don't share anything with anyone outside the small set of uses below.

2. What we actually collect

2a. Ban-evasion detection

When an admin removes an account for a real violation, they can choose to flag the IP address it registered from. If a new signup later comes from that same address, it's surfaced to an admin as a "possibly the same person" signal — never acted on automatically, since many people share an address (a household, a workplace, most mobile carriers) or get a new one constantly, which makes an automatic block too blunt an instrument. A human always makes the actual call. This is never triggered by deleting your own account yourself — see "Deleting your account" below.

2b. Safety check-ins

If you set up a check-in on Safety check-in, we store the name and email address you give us for your contact — a real person, who doesn't need an account here. That's used for exactly one thing: if you haven't checked in yourself by the deadline you set, we send that contact a single automated email saying so. It's never shown to any other member, and it's kept only until you check in, you cancel it, or that one alert email goes out.

3. What we don't collect

No real name field. No automated government-ID age or identity verification — see "Verified badges" below. If you upload a photo, we strip its EXIF metadata (which can include the GPS coordinates of where it was taken) before storing it — see "Photos" below. "City" on an event listing is whatever text the host typed in, never a GPS reading.

3a. Location sharing (off by default)

We don't collect your location unless you turn this on yourself — nothing about using Domyrian requires it. If you do, you choose the precision on Settings: a city you type yourself (this never touches your device's GPS at all — it's geocoded to one approximate point that every other member who typed the same city shares, so it never reveals more than "somewhere in this city"), or your exact location, which does ask your browser for real GPS coordinates and shows your own precise point on the map to other members. Exact sharing is a real tradeoff, not a formality — think about that before turning it on, especially given who else uses this app. Turning location sharing off at any time deletes whatever was stored immediately.

3a. Photos

Profile photos are optional — the app works fully with just a handle and a colored initial, and that's still the only thing most members have. If you do upload one, you choose per-photo whether it's visible to everyone or blurred until someone mutually matches with you (always sharp to you and to admins either way). The "blurred" version isn't a cosmetic filter a viewer could just turn off — it's a separate file we generate by destructively shrinking the image and scaling it back up, so the detail needed to un-blur it was never stored in the first place. Every uploaded photo is re-processed on our server (resized, and its EXIF metadata — which can include GPS location — stripped) before it's ever shown to anyone, including you.

4. Verified badges

The "Verified" checkmark some profiles show is a manual flag a human admin sets after some out-of-band check — not an automated identity-verification pipeline, and not the same thing as the email confirmation link sent at registration (that only confirms you control the inbox you signed up with). See Verification.

5. Who can see what

Your handle, role, bio, limits text, quiz-match breakdown, and interests are visible to members of the opposite role once you're both registered — that's the whole point of a matching app. Your email is never shown to other members; it's visible only to you and to admins (for account support and moderation). Messages are visible only to you and the other person in that conversation, and only once a mutual wave unlocks it. A photo, if you uploaded one, follows the visibility you chose for it (see "Photos" above) — every request for it is checked on our server at the moment it's requested, never served as a plain static file anyone with the link could just keep. Your location, if you've turned sharing on, is visible to every other member on the map at whatever precision you chose — it isn't restricted to matches or mutual waves the way messages are.

6. Deleting your account

Delete my account runs a real, immediate DELETE — your profile, quiz answers, interests, waves, favorites, messages, and photo (both the sharp and blurred files) are all removed right away, with no grace period or recovery window. The one exception: reports filed about you survive deletion (with your handle snapshotted at the time, not linked back to a live account) — otherwise deleting your account would double as erasing your own history of being reported, which defeats the point of having reports at all.

7. Email

We send email only for account verification, password reset, and — if you don't opt out by simply not checking back — a weekly digest of new potential matches. We use our own mail server configuration, not a third-party marketing platform, and we don't use email for advertising.

8. Your rights

You can see and correct most of your own data directly in your profile. You can delete your account entirely and immediately at any time, yourself, without asking anyone — see above. If you want a full export of your data, or have a privacy question this page doesn't answer, reach out via Feedback; we don't yet have a one-click data-export button, so that request is handled by a human for now.

9. Changes to this policy

If this page changes in a way that matters, we'll try to flag it in-product rather than relying on you to re-read the date at the top.

10. Contact

Feedback reaches a human, logged in or not.