Privacy Policy

This policy covers two groups: Members (people who create an account and order physical cards) and Scanners (people who receive a card from a member and submit information through it; scanners do not have an account). Where practices differ, we say so.

• Account data. Email, password hash, display name, date of birth, city, photo(s), bio, and profile prompts.
• Government ID. Collected once during onboarding to verify name, likeness, and DOB. Images are encrypted in transit and reviewed manually by a human administrator. We do not run OCR, facial recognition, or any automated identity analysis on ID images, and we never record driver's license, passport, or state ID serial numbers. ID images are retained for up to three (3) days after verification or rejection for fraud and dispute review, then automatically and permanently deleted by a daily purge job. If your ID is rejected, you may upload a corrected ID from your dashboard; the prior image is deleted and the new submission is re-reviewed by a human administrator.
• Selfie / biometric notice. Profile photos and scanner selfies are face images used for visual identification only. We do not generate, store, sell, lease, or share faceprints, face geometry, or other "biometric identifiers" or "biometric information" as defined under the Illinois BIPA, Texas CUBI, or Washington biometric law. We do not run facial recognition or face-matching, and we never compare one person's face to another's. Uploaded photos are passed through an automated content-safety classifier that looks only for prohibited imagery (nudity, sexual content, violence, apparent minors); it does not identify, recognize, or measure anyone's face, and it produces no face template.
• Billing data. Handled entirely by Stripe. We never see or store raw card numbers or bank credentials.
• Scan events. When someone scans your card, we retain a record of the event so the match and reporting tools work.
• Device & usage data. We do not log IP addresses, browser/user-agent fingerprints, or cross-session device identifiers. Basic operational logs (timestamps, request outcomes) are retained transiently by our hosting infrastructure providers for security and service operation, and are not used by us for tracking or advertising.

• What scanners provide. First and last name, email address, ZIP or postal code, date of birth, a selfie photo, intentions, and short prompts. The email address is verified by a one-time code and is also used to deliver scan-related notifications (chat replies, match status, safety updates). We do not collect or store scanner phone numbers, and the platform does not send SMS or text messages to scanners or members.
• Automatic sex-offender-registry lookup. Every scan automatically triggers a lookup against the U.S. sex offender registry using the scanner's first name, last name, ZIP, and full date of birth. This is free to the member and runs on every scan. Data sent to our provider (offenders.io) is used only to perform the lookup; we do not authorize the provider to retain scanner data for other purposes.
• International scanners. Scanners outside the U.S. may submit a scan and chat with the member who gave them a card. The registry only indexes U.S. records, so non-U.S. scanners cannot be meaningfully screened.
• Data minimization (day-of-DOB scrub). Exact date of birth is used in-flight to run the automatic lookup and is then permanently scrubbed from our database once the lookup completes, pass or flag. Only birth month and birth year are retained so the member can see an approximate age and so we can match against the member's ban list. Name, ZIP, selfie, and the verified email address are retained for the life of the match so the member can recognize their scanner and open chat.
• What the member sees. First name only, approximate age, the selfie, intentions, where you met, and your short answers. Last name, email address, ZIP, and full DOB are never displayed to the member.
• Admin unmasking on report. If a member reports a scanner, an administrator may unmask the scanner's full name, email, and selfie for safety review.

• Operate accounts, render cards, run matches, and send notifications.
• Run an automatic U.S. sex-offender registry check on every scan, plus any manual re-run a member requests, through our screening provider.
• Process payments, ship cards, and manage subscriptions through Stripe and our print/fulfillment partner.
• Prevent fraud, enforce our Terms, investigate reports, and ban abusive accounts.
• Provide AI-powered date-ideation and 24/7 support via third-party LLM providers (currently Google Gemini). Prompts may be transmitted to the provider for processing.

We share personal information only with service providers strictly to operate the platform: Stripe (payments), our background-check provider, our LLM provider (date-ideation, support bot, and the automated image-safety classifier applied to uploaded photos), our print/fulfillment partner, our transactional email delivery provider (used to send account, security, shipment, match, scan, chat-reply, and billing notifications to the email address you provide), our hosting/database provider, and Google (Google Analytics 4 for aggregate site measurement, and Google Ads for ad-click conversion attribution, see Section 6). These vendors process data only on our instructions and only as needed to deliver the service. We do not use any SMS or text-message provider and we do not collect phone numbers.

No sale of data. We do not sell, rent, or commercially license member or scanner data, email addresses, or metadata to third-party ad networks, data brokers, or any other commercial third party - under any definition of "sale" or "sharing" used by U.S. state privacy laws. Sharing aggregated, pseudonymous conversion signals with Google solely to measure our own ad performance is not a "sale" and is not used to build advertising audiences.

We may also disclose information when required by law, valid legal process, or to protect the safety of users or the public.

• Geographic scope & cookie consent. The platform is intended for users located in the United States. By accessing the site from the U.S. and continuing to use it, you consent to our use of the cookies and tags described in this section (strictly necessary cookies, Google Analytics 4, and Google Ads conversion tracking). We do not display a separate cookie banner for U.S. visitors because we do not engage in the "sale" or "sharing" of personal information, do not run remarketing or targeted advertising, and honor browser-level Global Privacy Control signals as described in Section 9. If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, our site is not directed to you, we do not currently operate a GDPR/ePrivacy-compliant consent management platform, and you should not use the service; if you do, you acknowledge that non-essential cookies (GA4 and Google Ads tags) may be set on your device and you may block them in your browser at any time.
• Strictly necessary cookies. Used to keep you signed in, maintain your session, and protect against CSRF and fraud. These cannot be disabled while using the service.
• Google Analytics 4 (measurement ID G-RZKG9CDSKR). We use Google Analytics to understand aggregate site usage (pages visited, referral source, approximate region, device type). IP addresses are anonymized before logging. Analytics cookies set by Google are _ga and _ga_*. No advertising features, demographics/interests reporting, Google Signals, cross-device tracking, or remarketing audiences are enabled in our GA4 property.
• Google Ads conversion tracking. When we run Google Ads campaigns, Google may set a _gcl_* cookie to attribute ad clicks to on-site actions (e.g., sign-up, card order). We share only aggregated, hashed, or pseudonymous conversion signals with Google for ad measurement. We do not run Google Ads remarketing or upload customer lists, and we do not build or share advertising audiences.
• Your choices. You can opt out of Google Analytics at any time using the official Google Analytics opt-out browser add-on, by enabling Global Privacy Control (GPC) in a supported browser, or by clearing/blocking cookies for this site. Opting out does not affect your ability to use the service.
• Local storage. Used to remember preferences and short-lived tokens (e.g., a referenced promo code).
• Inactivity auto-signout. As a security measure, authenticated sessions are automatically signed out after approximately three (3) minutes of inactivity, unless you opt into "stay logged in" on this device. You will need to sign in again to resume.

• Member account data is retained while your account is active. On deletion, profile data is removed and remaining scan records are anonymized.
• Government ID images are retained for up to three (3) days after verification or rejection, then automatically deleted by a daily purge job. We never store ID document numbers.
• Scanner full date of birth is scrubbed the moment the automatic sex-offender-registry lookup completes on each scan (typically seconds after submission). Only birth month and year are retained.
• Scanner name, ZIP, selfie, and verified email are retained for the life of the match thread, the member needs them to recognize the person who scanned them and to communicate. On account deletion or match removal, these are deleted with the rest of the match record.
• Billing records retained as long as required for tax, accounting, dispute, and fraud-prevention purposes.

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, role-scoped database access, and mandatory multi-factor authentication for administrators. No system is perfectly secure; you use the platform at your own risk.

Breach notification. If we become aware of a breach of personal information affecting you, we will notify affected users and applicable regulators as required by U.S. state breach-notification laws and the GDPR/UK GDPR where applicable.

Residents of U.S. states with comprehensive privacy laws have rights to access, correct, delete, and (where applicable) port their personal information, and to opt out of targeted advertising, the "sale" or "sharing" of personal information, and profiling that produces legal or similarly significant effects. We do not engage in sale, targeted advertising, or that type of profiling, and we are not a registered data broker in any state. These rights are available to residents of California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire (NHPA), New Jersey (NJDPA), Tennessee (TIPA), Indiana (ICDPA), Kentucky (KCDPA), Rhode Island (RIDTPPA), Minnesota (MCDPA), and Maryland (MODPA), plus any other state law as it takes effect. To exercise any of these rights, contact hello@no-regrets-dating.com. You will not be discriminated against for exercising a privacy right, and you may designate an authorized agent to submit requests on your behalf. If we deny a request you may appeal by replying to our decision email; we will respond within the statutory window for your state.

• Universal opt-out / Global Privacy Control. We honor browser-level opt-out signals (including the Global Privacy Control / "GPC" signal) as a valid opt-out of sale, sharing, and targeted advertising for residents of states that recognize them (currently CA, CO, CT, TX, OR, and others as they take effect). Because we do not sell or share personal information in the first place, the practical effect of a GPC signal is to confirm and document that posture.
• Sensitive data and consent. Some state laws (notably CO, CT, VA, OR, MT, DE, NH, NJ, MD, MN) treat information revealing sex life, sexual orientation, immigration status, precise geolocation, and biometric data as "sensitive data" requiring opt-in consent. By creating an account or submitting a scan, you consent to our processing of the limited sensitive data necessary to operate the service (e.g., a profile photo, stated intentions, and DOB used to run the U.S. sex-offender-registry check). We do not collect precise geolocation, immigration status, or biometric identifiers as defined under state biometric laws, and we do not use sensitive data for advertising or profiling. You may withdraw consent at any time by deleting your account from Settings → Delete Account.
• Washington "My Health My Data" Act (and similar consumer-health laws in Nevada and Connecticut). To the extent any information you provide could be interpreted as "consumer health data" under RCW 19.373 (Washington) or the Nevada/Connecticut consumer-health analogs, you affirmatively consent to our limited use of that information solely to operate the service. We do not sell consumer health data, do not share it for targeted advertising, and do not use it to geofence any healthcare facility. Washington residents may request access to and deletion of any consumer health data we hold by emailing hello@no-regrets-dating.com.
• Automated decision-making (ADMT) and human review. Government ID review is not automated, a human administrator approves or rejects every ID. We do use automated systems for (a) evaluating U.S. sex-offender-registry results, where a returned possible match automatically withholds a scan or restricts an account pending human review, and (b) screening uploaded photos for prohibited imagery, where a positive score automatically withholds the photo or scan and routes it to a human administrator. These automated steps can affect whether your content or account is approved. If a decision rejects your ID, your photo, or your account, you have the right to request human review by replying to the rejection email or contacting hello@no-regrets-dating.com; a human administrator will re-evaluate your case and you may submit additional information.
• EU/UK residents (GDPR/UK GDPR). You have rights of access, rectification, erasure, restriction, portability, objection, and not to be subject to solely-automated decisions with legal effect. Our lawful bases are contract performance, legitimate interests (safety, fraud prevention), and consent where required.
• Account deletion. Delete your account at any time from Settings → Delete Account, or email hello@no-regrets-dating.com.

• Transactional. Account, security, shipment, match, scan, and billing emails are required to operate the service and cannot be opted out of while your account is active. We do not send SMS or text messages, and we do not collect phone numbers from members or scanners.
• Optional device notifications (push). Members may turn on browser or phone notifications from Settings → Phone notifications. This is entirely optional and off by default. If you enable it, your browser or operating system issues an anonymous subscription address for that device, and we store only that address, the short notification text waiting to be shown, and the time the device was last seen. We use it solely to alert you about scans, matches, and new messages on your own account. The subscription address contains no name, phone number, location, or advertising identifier, and it is never used for marketing, profiling, or sharing with advertisers. Notification delivery passes through the push service operated by your browser or device maker (for example Apple, Google, or Mozilla); those services see the delivery request but the message text is fetched by your own device from us, not stored with them. You can turn notifications off at any time in Settings or in your browser or device settings, which deletes the stored subscription for that device. Deleting your account deletes all of your device subscriptions. People who scan a card may turn on the same optional alerts from their own chat page after verifying their email. In that case the anonymous device subscription is linked only to that scan, is used only to alert them about that one conversation, and is deleted when they turn alerts off or when the scan record is deleted.
• Marketing. Opt-in only. Unsubscribe from any marketing email at any time. We comply with CAN-SPAM for U.S. recipients.

The platform is operated from and intended for use in the United States. Cards ship within the United States only. If you access the platform from outside the U.S., your information will be transferred to and processed in the U.S. Where we transfer EU/UK personal data to vendors outside the EEA/UK, we rely on standard contractual clauses or equivalent safeguards.

The platform is strictly for users eighteen (18) and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly. If you believe a minor has provided information to us, contact hello@no-regrets-dating.com.

We may disclose personal information to law enforcement or other government agencies when we are legally required to, or where we believe in good faith that disclosure is necessary to prevent imminent death or serious physical injury, to investigate fraud or abuse, or to protect our legal rights.

• Where to send requests. Law enforcement should email hello@no-regrets-dating.com with "LAW ENFORCEMENT REQUEST" in the subject line, from an official agency address or on agency letterhead, identifying the officer, agency, callback number, the specific account, the precise records sought, and the legal authority relied on.
• What we require. Basic subscriber records require a valid subpoena, court order, or equivalent legal process. The contents of communications, including chat messages and stored images, require a search warrant issued on probable cause. We reject overbroad or invalid requests.
• Emergencies. Requests marked "EMERGENCY DISCLOSURE REQUEST" that describe an imminent risk of death or serious physical injury may be answered with limited information without legal process.
• Preservation. Valid preservation requests are honored for 90 days, extendable once by 90 days, pending formal legal process.
• User notice. Unless prohibited by law or a court order, or where notice would risk harm or destruction of evidence, we make reasonable efforts to notify affected users before disclosing their information.
• Limits of what exists. We do not store full payment card numbers (Stripe holds those), and information already deleted or scrubbed under Section 7 (Retention) cannot be recovered.

Full details of our law enforcement protocols are in Section 19 of our Terms & Conditions.

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and, where appropriate, notified by email. Continued use after an update constitutes acceptance.

Privacy questions, rights requests, and data-deletion requests: hello@no-regrets-dating.com.

Formal legal notices (including service of process) must be sent in writing to our mailing address for legal notices: No.Regrets.Dating, PO Box #2032, USPS Short Beach, 5 Court St, Branford, CT 06405-9991, with a courtesy copy to hello@no-regrets-dating.com.

We do not log IP addresses, browser fingerprints, or build device fingerprints of any kind. Ban enforcement is identity-based: banned accounts are recorded against verified identity details (name, date of birth, ZIP code) from the background-check process, so a banned individual cannot re-register with a new email address. Network-level IP filtering, reputation screening, and rate limiting are handled by our hosting infrastructure providers. Every scanner selfie and every member profile photo is scored by an automated image classifier at upload for nudity, sexual content, apparent minors, violence, and other prohibited imagery; a positive score withholds or deletes the image and, for scans, routes the submission to human admin review. Message sending in match chats is rate-limited at the database layer. Because the platform has no public feeds and no user-to-user image messaging, we do not run perceptual-hash matching against NCII/CSAM hash databases; all profiles and photos are reviewed by a human administrator, and any suspected CSAM is removed immediately and reported to the NCMEC CyberTipline. Anyone, member or not, can report content or an account at /report.

Appeals. If your profile, content, or account is removed, hidden, suspended, or banned, you can appeal by replying to the enforcement notice or emailing hello@no-regrets-dating.com with the subject line "APPEAL" within thirty (30) days. A human administrator reviews the appeal, we acknowledge it within three (3) business days, and we issue a written decision within fourteen (14) calendar days. The full step-by-step process is in Section 21 of the Terms & Conditions, and a full description of our moderation technology is in Section 22.