Your world stays yours
Privacy Policy.
Discretion isn’t a marketing claim here — it’s the entire architecture. This page explains, in plain language, what we collect, what we never collect, and the rights you have over your data under the GDPR, the UK GDPR, the CCPA, and every other privacy framework we operate under.
1.What we collect
We collect the minimum we need to run a private society well, and nothing more.
- Account data — your email, a hashed password (we never see the plaintext), and your account type (single or couple).
- Profile data— your handle, tagline, the words you choose to describe yourself, your interests, who you’re looking for, and your photos. You choose every field.
- Photos — public album photos and your encrypted private album. Private photos are only visible to members you specifically grant access to, for the window you choose.
- Messages — the body of the notes you send and receive, stored encrypted, deleted when you ask.
- Location — at the city level only. We never store or expose your precise coordinates. You can fuzz your city further or hide it entirely from your settings.
- Payment data — handled by our PCI-DSS-compliant payment processor. We see the last four digits of your card and your billing zip, never the full number.
2.How we use it
We use your data to operate the Society for you: to show your profile to the people you want to meet, to deliver messages, to take payments, to keep the room safe, and to send the occasional service email (a verification, a reset link, a receipt). We do not profile you for advertising. We do not enrich your record with data from brokers. We do not feed your conversations into a model.
3.What we never do
For absolute clarity:
- We never sell your data. To anyone. For any reason.
- We never share your data with advertisers, data brokers, or third-party trackers. There are no Meta pixels, Google ad tags, TikTok pixels, or X conversion tags on this site.
- We never use your photos to train a third-party AI model. Internal safety classifiers run on metadata and embeddings, not raw images, and the embeddings cannot reconstruct your photo.
- We never confirm whether you are or aren’t a member to anyone who calls, emails, or serves us informally. Verified legal process is the only thing that opens that door, and we will tell you about it where law allows.
4.Cookies
We use a single session cookie to keep you signed in, and a local browser flag to remember that you’ve passed the 21+ gate. We do not set advertising cookies or third-party trackers. Full breakdown lives in our Cookies Policy.
5.Special-category data
The European Union’s GDPR (Article 9) treats data about a person’s sex life and sexual orientation as “special-category” data, requiring explicit consent and a heightened standard of care. We treat all profile fields touching orientation, partner configuration, and the lifestyle interests you list as special-category data. By creating a profile and filling in those fields you are giving us explicit, informed consent to process them for the sole purpose of operating the Society for you. You may withdraw that consent at any time by deleting the relevant fields or your entire account.
6.Your rights
Wherever you live, you have the right to:
- Access — download everything we hold about you. From Settings → Your data, or by writing to our data office.
- Correct — fix anything that is wrong, directly in your profile.
- Delete — purge your account and content within thirty days, subject only to the limited records we are legally required to keep.
- Object— opt out of any processing you didn’t directly ask for. There’s very little of that here, but the right is yours.
- Port — receive your data in a structured, machine-readable format and move it elsewhere.
- Complain— to your local data-protection authority. We’d rather you write to us first, but the right is yours.
7.Contact our data office
Our Data Protection Officer reads every message that comes in. Write to dpo@offthegrid.club with any data-protection request and we will respond within thirty (30) days, usually much sooner. For general privacy questions, the concierge inbox is fastest: concierge@offthegrid.club.
The data controller is OTG Mercantile, registered in Delaware, United States. European members are served by our EU representative, contactable at the same dpo@ address.