Privacy Policy

Last updated 30 July 2026.

Dark Hearts is operated by IAmPerfectBlue, which is the data controller for the personal data described in this policy. This policy reflects UK GDPR and EU GDPR requirements.

What we collect

Account data (email, password hash, date of birth), profile data you choose to publish (name, bio, photos, city, approximate location, interests, favourite bands and optional lifestyle answers), activity data (likes, matches, messages, reports) and technical data (device, IP, log data).

Special category data

Your sexual orientation, and any answers you give about politics, kink or religion, are special category data under Article 9 UK/EU GDPR. We only process these because you give explicit consent by choosing to publish them, and every one of those fields is optional and can be cleared at any time.

Why we use it

To create your account and show your profile to relevant members (performance of our contract with you), to keep the service safe and moderate content including automated image checks (legitimate interests and legal obligation), and to process payments for optional extras (contract). We do not sell your data.

Who we share it with

Our hosting and database provider, our payment provider for purchases, and our image-moderation provider for uploaded photos. All act as processors under written agreements. We disclose data to law enforcement only where legally required, and report suspected child sexual abuse material.

How long we keep it

Your profile and messages are kept while your account is active. When you delete your account we remove your profile, photos and messages within 30 days, except limited records we must keep for safety, fraud prevention, tax or legal claims.

Your rights

You can access, correct, delete, restrict or object to processing, withdraw consent, and request a portable copy of your data. Contact us and we will respond within one month. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

Cookies

We use strictly necessary cookies and local storage to keep you signed in. We do not use advertising cookies. If analytics are added later, we will ask for your consent first.

Security and transfers

Data is encrypted in transit and at rest, photos are stored in a private bucket served only through short-lived signed links, and database access is restricted per-user by row-level security. Where data is transferred outside the UK/EEA we rely on approved safeguards such as Standard Contractual Clauses.