Privacy Policy

The person or legal entity operating CheckHer is the controller responsible for the processing described in this Privacy Policy.

The final operator name, postal address and privacy contact details will be published in the CheckHer Impressum before public launch. Those details must be inserted into the final production version of this Privacy Policy as well.

If CheckHer appoints a data protection officer or an EU representative where legally required, their contact details will also be provided here.

This Privacy Policy applies to personal data processed through CheckHer's website and related service functionality, including registration, profiles, Experiences, comments, reactions, votes, bookmarks, direct messages, reports, moderation, account restrictions and legal-removal requests.

Separate third-party websites or services may have their own privacy notices when you interact with them directly.

Depending on how you use CheckHer, the following categories of personal data may be processed:

• Account and authentication data, such as your account identifier, email address and authentication/session information.
• Profile data, such as username, profile image, role, account statistics, XP, level and other profile information you choose to provide.
• User-generated content, such as Experiences, comments, images, reactions, votes, bookmarks and related metadata.
• Direct-message data, including message text, attachments, GIF references, reactions, reply relationships and message timestamps.
• Community and legal reports, including report reason, explanation, reported content, reporter details where collected and report status.
• Moderation and safety records, such as moderation decisions, bans, removals, moderator notes, audit-log entries and relevant account-history information.
• Technical and usage data needed to operate and secure the service, which may include IP address, browser/device information, timestamps, request logs, error information and security events.
• Data contained in communications you send to CheckHer, including support, privacy or legal requests.

Other users may include information about third parties in content they submit. CheckHer's rules restrict sensitive, unlawful, excessively identifying and otherwise prohibited content, but user-generated content may nevertheless contain personal data about people other than the submitting user.

Personal data is processed only where an applicable legal basis exists. Depending on the processing activity, the legal basis may include performance of the CheckHer user contract, compliance with a legal obligation, legitimate interests, or consent where consent is appropriate and legally required.

The exact legal basis depends on the specific processing activity. CheckHer will not rely on a legal basis merely because it is listed here; the basis must actually apply to the relevant processing.

Experiences, comments, profile information and other content you choose to publish may be visible to other CheckHer users and, depending on the final service configuration, may be accessible more broadly.

Public or community-visible content may contain identifiers, opinions, descriptions of events and other personal data. You should not publish private contact details, sensitive personal information, unlawful material or information you do not have the right to share.

Deleting public content may remove it from normal service display, but limited records may remain where retention is necessary for security, moderation, legal claims, statutory obligations or backup restoration processes.

Direct messages are intended to be visible to the participants in the conversation rather than publicly displayed. Message content and related metadata must still be stored and processed so the messaging service can function.

CheckHer may process message data where necessary to provide messaging functionality, protect the service, investigate abuse or security incidents, respond to valid reports, or comply with applicable law.

Users should not assume that direct messages are suitable for storing highly sensitive or confidential information.

When content or an account is reported, CheckHer may process information about the reporter, the reported content, the reported user, moderation history, account restrictions and the moderator's decision.

Moderation audit records may be retained separately from ordinary user-facing content so CheckHer can document enforcement, investigate repeated abuse, prevent ban circumvention, review decisions and establish or defend legal claims.

Reports are not automatically treated as proof that a violation occurred. The information is assessed in context before action is taken.

CheckHer provides a public form for legal, privacy, image rights, personal-information, impersonation, harassment, defamation, copyright, allegedly illegal-content and other rights-based requests.

That form may collect the reporter's email address, optional name, relationship to the content, the reported URL, an explanation, a good-faith declaration, status information and internal moderator notes. This information is not intended to be publicly displayed.

Legal-report information may be retained where reasonably necessary to investigate the request, document the response, comply with legal duties or establish, exercise or defend legal claims.

CheckHer uses external providers where necessary to operate the service. Based on the current technical implementation, providers may include infrastructure for hosting, database, authentication, file storage and GIF functionality.

The production version of this section must be checked against the providers actually enabled at launch. Analytics, advertising, payment, email, anti-spam, monitoring or other providers must not be silently omitted if they are later added.

Where a provider processes personal data on CheckHer's behalf, appropriate data-processing arrangements will be used where required by law.

Some service providers or their affiliated infrastructure may process data outside Germany or the European Economic Area. The actual production data flows must be verified before launch.

Where personal data is transferred to a country without an applicable adequacy decision, CheckHer will use an appropriate transfer mechanism where required, such as the European Commission's Standard Contractual Clauses together with supplementary safeguards where necessary.

The final version of this Privacy Policy should identify relevant transfer arrangements based on the actual production provider configuration rather than assumptions.

CheckHer currently uses browser-side storage for functionality such as remembering the selected light or dark theme. Authentication technology may also use browser storage or cookies as required by the configured authentication flow.

A consent banner should not be added merely for appearance. Before public launch, the production site should be audited to determine which cookies, local-storage entries, SDKs and similar technologies are actually used and whether any of them require prior consent under applicable law.

If non-essential analytics, advertising or tracking technologies are introduced, this section and the consent mechanism must be updated before those technologies are activated where legally required.

Personal data is retained only for as long as necessary for the purpose for which it is processed, subject to statutory retention requirements and legitimate needs such as security, abuse prevention, dispute handling and legal claims.

Different categories of data require different retention periods. For example, active account data may be retained while the account exists, while moderation, security or legal records may need to be retained after ordinary content or an account is deleted.

The final production policy must reflect CheckHer's actual deletion implementation and retention schedule. CheckHer should not promise immediate deletion from every backup or audit system unless the technical system actually performs that deletion.

Subject to the conditions and exceptions in applicable law, you may have rights including:

• Access to personal data concerning you and information about how it is processed.
• Correction of inaccurate personal data.
• Deletion of personal data where the legal requirements are met.
• Restriction of processing in circumstances provided by law.
• Data portability for qualifying processing based on consent or contract and carried out by automated means.
• Objection to processing based on legitimate interests, including rights that apply specifically to direct marketing if CheckHer ever performs it.
• Withdrawal of consent at any time for future processing where processing is based on consent.
• The right not to be subject to certain decisions based solely on automated processing where Article 22 GDPR applies.

These rights are not absolute. For example, deletion may be limited where continued processing is required by law or necessary for the establishment, exercise or defence of legal claims.

CheckHer may need to verify your identity before fulfilling a request in order to avoid disclosing or deleting another person's data.

You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that the processing of personal data concerning you infringes applicable data-protection law.

The competent German authority depends on the final controller's establishment and circumstances. The final production version should identify the relevant supervisory authority once the operator's legal details are finalized.

CheckHer uses technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. The current architecture includes authenticated access controls, database row-level security, restricted moderation functions and access controls for private messaging data.

No online service can guarantee absolute security. Security measures must be reviewed and updated as the service, infrastructure and risk profile change.

CheckHer is intended only for users aged 18 or older. People under 18 must not create accounts or use CheckHer.

The Community Guidelines also prohibit creating dating or relationship Experiences about, identifying, depicting or uploading images of a person under 18 in that context.

If CheckHer becomes aware that personal data was submitted in violation of these rules, it may investigate and take appropriate action, including deletion or restriction where warranted.

This Privacy Policy may be updated when CheckHer's service, data processing, providers or legal obligations change.

Material changes will be communicated in an appropriate manner where required. The date and version number at the top of this page identify the current published version.