Privacy Policy
Last Updated: March 2026
Company: Your Company Name Ltd
Contact: compliance@yourplatform.com
1. Introduction & The "Golden Rule"
This policy explains how we collect, use, and protect your personal information.
The Golden Rule: Guard your privacy. Do not post or share anything you would not want the public to see. This includes photos, videos, messages, and webcam streams. By using our service, you agree to follow this rule.
2. Sensitive Information & Biometrics
Under UK GDPR Article 9, details about your race, ethnicity, sexual orientation, or sex life are "Special Category Data."
- Biometric Data: When you perform our "Liveness Check," we process biometric data. We only do this with your explicit consent at the time of onboarding to verify your identity and age.
- How we use it: We only process this information if you choose to provide it (for example, by filling out your profile).
- Your choice: You can remove this information at any time by editing your profile or closing your account.
3. Information We Collect & Identity Assurance
We collect information you give us and details created when you use the site through a multi-stage verification process:
- Account Basics: Your username, password, email (verified via link), phone number (verified via 6-digit SMS code), and date of birth.
- Biometric Liveness & Estimation: During onboarding, we use your webcam and
face-api.js to perform a liveness check. We store screen-grabs of you moving your head in randomized directions to verify you are a real person and to perform an automated age and gender estimation.
- Technical Identifiers: We collect "Device Fingerprints" (metadata about your browser, hardware, and OS) to identify unique devices and prevent banned users from returning.
- Your Content: Text, photos, and videos in your messages, posts, or streams.
- Safety & Network Data: A dynamic "Reputation Score" and records of your "Network Ancestry" (who invited you and who you have invited).
4. Automated Safety, AI Scanning & Moderation
To comply with the UK Online Safety Act 2023, we use automated systems to proactively detect illegal and harmful content.
- Image & Video Scanning: All uploaded media is scanned via AWS Rekognition, HiveID, and checked against the Project Arachnid database to identify CSAM and prohibited material.
- AI Text & Context Analysis: We use AI to analyze the "mood" and "context" of posts and messages to identify bullying, harassment, or self-harm risks.
- Manual Confirmation: If AI age/gender estimation falls below our "Trustworthiness Threshold," a human moderator reviews your liveness screen-grabs. If inconclusive, we may request a Government-Issued ID.
5. The Reputation & Scoring System
We use a proprietary Social PageRank algorithm to promote high-quality interactions.
- Recursive Impact: Your "Reputation Score" is influenced by the standing of the people you interact with. High-scoring users provide a larger boost to your score; conversely, interacting with "low-signal" content may result in a minor detrimental adjustment to your own standing.
- Network Effect: Your score is linked to your "Network Ancestry." You benefit from the positive contributions of your invited network, but persistent poor behavior from your descendants can negatively impact your own standing.
- Automated Enforcement: Scores that fall below a "Minimum Safety Threshold" trigger automated warnings, shadow-restrictions, or permanent Device Bans.
6. Cookies & Tracking
- Essential Cookies: These make the site work (e.g., keeping you logged in).
- Security Tracking: Our SMS/Email verification and Device Fingerprinting do not rely on traditional cookies but are essential for platform security.
- Analytics Cookies: We use Google Analytics only if you click "Accept" on our cookie banner.
7. Sharing & Deleting Your Information
- Sharing: We do not sell your data. We share it with service providers (SMS, AI scanning) and legal authorities like the National Crime Agency (NCA) if illegal content is found.
- Instant Delete: If you delete your account, we remove your profile data immediately.
- Retention for Safety: We retain verified phone numbers, device fingerprints, and biometric hashes for 7 years to prevent banned users from returning.
- Secondary ID: Any government ID submitted for manual verification is deleted immediately after the audit log is generated.
8. Your Rights
Under the Data (Use and Access) Act 2025, you have the right to:
- See your data: Including your Reputation Score and associated data.
- Contest Automated Decisions: You may request a Human Review of any automated ban or reputation-based restriction.
- Fix mistakes: Update any information that is wrong.
9. Contact Us
If you have questions, email our Data Protection Officer at [Insert Email]. If you are not happy with our answer, you can contact the Information Commissioner’s Office (ICO).
Security Warning: While we work hard to protect you, no system is 100% secure. Please remember the Golden Rule.