Privacy Policy

This Privacy Policy explains how Moby ("Moby", "we", "us") collects, uses, and protects your personal data when you use our dating service. We are the data controller for the purposes of the EU/EEA General Data Protection Regulation (GDPR) and Norwegian data-protection law.

1. Data we collect

• Account data: email address, display name, date of birth, password (stored only as a secure hash).
• Profile data: the details you add to your profile, such as height, interests, lifestyle (drinking, smoking, drugs), and free-text descriptions.
• Special-category data: information that reveals your sexual orientation, religious beliefs, and political views, plus your approximate location. This is sensitive data and we only process it with your explicit consent (see below).
• Usage & technical data: IP address, device/browser information, and server logs generated when you use the service.

2. Why we use your data and our legal basis

• To provide the service (create your account, sign you in) — legal basis: performance of a contract.
• To suggest matches using your profile, including special-category data — legal basis: your explicit consent (GDPR Art. 9(2)(a)).
• To keep the service secure and prevent abuse (including the Cloudflare Turnstile anti-bot check at registration) — legal basis: our legitimate interests.
• To comply with legal obligations where applicable.

You can withdraw your consent to processing of special-category data at any time by deleting your account. Withdrawal does not affect processing carried out before withdrawal.

3. Cookies

We use a single strictly necessary cookie to keep you signed in and to protect forms against cross-site request forgery. We also use Cloudflare Turnstile to tell humans from bots at registration. We do not use advertising or third-party analytics cookies. If this changes, we will ask for your consent first.

4. Who we share data with (processors)

We use the following service providers, who process data on our behalf under data-processing agreements:

• Fly.io
• Amazon Web Services
• Cloudflare

These services run within the EEA.

We do not sell your personal data. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

5. How long we keep it

We keep your account and profile data for as long as your account is active. When you delete your account, deletion is immediate and permanent. Residual copies in backups and operational logs are removed within 28 days.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data (you can edit most of it directly in your profile).
• Erase your data (delete your account at any time from your profile settings).
• Withdraw consent, restrict or object to processing, and request data portability.
• Lodge a complaint with a supervisory authority — in Norway, the Datatilsynet (datatilsynet.no).

7. Security

Passwords are stored only as secure hashes, traffic is encrypted in transit, and access to personal data is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Children

Moby is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

9. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you.

10. Contact

For any privacy question or to exercise your rights, contact us at [email protected].