Privacy Policy

The short version. Your picks are never shown to anyone — not the person you picked, not the room owner, not other members. The only thing ever revealed is a mutual match, and only to the two people in it. Picks are deleted 30 days after a room reveals.

What we collect

• Purchases — what you bought (for example extra picks or a hint) and when. Card details go straight to Stripe; we never see or store them.
• Account details — your name, email address and a password hash (or your Google account ID if you sign in with Google).
• Age confirmation — the birth date you enter when you confirm you are 18 or older. We use it only to keep CrushPact adults-only.
• Rooms you join — the room name, its members' display names, the deadline, and your answer to the room's group question if you give one.
• Your picks — up to three people per room. These are the most sensitive thing we hold, and we treat them that way (see below).
• Contact handles — if you have a mutual match and both of you choose to share, the handle you type in (for example an Instagram username).
• Reports and blocks — who you reported or blocked, the reason, and any note you add.
• Basic technical data — IP address, browser type and request logs, kept briefly for security and rate limiting.

We do not collect your contacts, your location, or your phone's photos. We do not run third-party advertising trackers.

How picks are protected

• A pick is visible only to you. It is never displayed to the person you picked, the room owner or other members.
• When the room reveals, we compare picks and create a match only when two people picked each other. Everyone else sees nothing about who picked whom.
• The number of matches in a room may be shown to its members, but never the names behind unmatched picks.
• Hints. If a room has a group question (like “Class year”), someone with at least two admirers can buy a hint: the group answer of one person who picked them. A group is only ever named if at least three members of the room share it, so a hint never points to one person. Your group answer is optional — choose “Prefer not to say” and you’ll never appear in a hint.
• Picks are permanently deleted 30 days after a room reveals. Matches stay until you delete your account.
• Our staff do not browse picks. Access to the database is limited to what is needed to run and secure the service.

Contact handles

A handle is shared only after both people in a match choose to share one. If only one of you shares, the other never sees it. You can leave the field blank and nothing is exchanged.

How we use your information

To run rooms and reveals, to keep the service adults-only and safe (including reviewing reports), to prevent abuse and spam, and to send account emails such as password resets. We do not sell or rent your personal information, and we do not use your picks for advertising.

Who we share it with

Only service providers that help us run CrushPact — hosting and database (Cloudflare), email delivery, and, if you pay for anything, a payment processor (Stripe). They process data on our behalf and may not use it for their own purposes. We may disclose information if required by law or to protect someone's safety.

How long we keep it

• Picks: 30 days after the room reveals.
• Account, rooms, matches and handles: until you delete your account.
• Reports: kept for safety records after your account is deleted, with your identity removed.
• Security logs: up to 30 days.

Deleting your account

Go to Account → Delete account. This immediately removes your profile, age record, picks, matches, memberships, blocks and sessions. Rooms you own pass to the next member, or are deleted if you were the only one left.

Your rights (including California)

If you live in California or another state with a privacy law, you can ask to know what we hold about you, ask us to correct or delete it, and opt out of any sale or sharing of personal information. We don't sell or share personal information for cross-context advertising. We will not treat you differently for using these rights. Most of this you can do yourself from the Account page; for anything else, contact us using the email on the Safety page.

Adults only

CrushPact is for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn an account belongs to a minor, we remove it.

Changes

If we change this policy in a way that affects how picks are handled, we will tell you in the app before it takes effect.