Privacy

Who holds it

HideShow is operated by ADRIANO DE. S. BAVIERA TECNOLOGIA DA INFORMACAO, trading as ALDL (registered CNPJ 35.232.261/0001-11), Rua Dea Lucia, 25, São Paulo - SP, CEP 05855-275, Brazil, established in Brazil. Privacy questions go to privacy@hideshow.chat, or through the contact form, which does not require an account.

What we collect

Everything below is either something you typed, something you uploaded, or something the product had to record in order to work. There is no advertising network here and no third-party analytics script; nothing on this site is watching you on behalf of somebody else.

Because you cannot have an account without it

• Email address and a password hash. The password itself is never stored; what is stored cannot be turned back into it.
• Date of birth. Used to compute an age and to refuse anybody under 18. The date is not shown to other people, the age is.
• That you confirmed you are 18 or over, and when.The tick on the sign-up form, kept as the record that the question was asked and answered.

Because you chose to put it on a profile

• Photographs. Shown blurred and sharpened as chemistry grows: see the reveal ladder. Stored as several processed sizes, never as the original upload alone.
• Name, username, bio, gender, languages, education, what you are looking for, relationship status, children, smoking, drinking, interests. All optional except the username, and all visible to people you can be discovered by.
• City and country, and an approximate latitude and longitude derived from them. Used for the distance shown on a card. This is not device GPS: the product never asks your browser for your location.
• A selfie, if you ask to be photo-verified.Reviewed by a person against your profile photographs, and used for nothing else.

Because the product is a conversation

• Messages, voice notes, stickers, gifts, reactions and photographs you send. Kept until you or the other person deletes the conversation, or until either account is deleted.
• A transcript of a voice note, when one was made. Optional, and the absence of one is a normal state.
• Puzzles asked and answered, kept as the record of what was asked and how it went.
• A chemistry score per conversation, computed from how the two of you talk, and the reveal level it unlocks.
• Read receipts, typing and online status, only while you are sending those signals; the setting is mutual, and turning it off stops you seeing them too.

Because you chose to keep something private

• Private photos, videos and notes. Encrypted before they are stored, titles included, so a leaked database or backup reveals nothing readable. This is encryption at rest, not end-to-end: the server unseals an item to show it to you and to each person you allow.
• Who you allowed, and when they last opened it.Each person is allowed individually. Access closes by itself if your conversation drops below Trusted, and you can take it back at any time. Nothing can stop someone you allowed from taking a screenshot.

Because somebody has to be able to be kept safe

• Blocks and reports you make. A report is visible to moderators with the conversation it concerns.
• An automated scam-risk signal on messages and conversations, from the same rating pass that scores chemistry.
• Conversations that are the subject of an open report are kept even if the account is deleted, because evidence that vanishes when the reported person leaves protects the wrong party.

Because the law requires it

• The IP address you signed in from, and when.Written when you create an account, when you sign in, and once a day while you stay signed in. Brazilian law: the Marco Civil da Internet, art. 15: requires the operator of an internet application to keep these records for six months and to hand them over only on a court order. So: kept for six months, deleted automatically after that, encrypted in the database, and readable by nobody through the app. There is no screen anywhere that shows them, to us or to anyone.
• Nothing else is logged with it. No device fingerprint, no page you visited, no advertising identifier.

Because you spent money

• A credit ledger; every addition and every spend, with a reference to the payment. We do not see or store your card number; that stays with the payment provider.
• Names bought from the catalogue, and when.

Who else sees it

Only these, only for the stated job, and none of them for advertising.

• PayPal, and Coinbase Commerce if you pay in crypto. They receive what a payment needs. We receive back only a payment reference and whether it succeeded.
• OpenAI. Message text is sent to be scored for chemistry and for scam risk, to generate a puzzle about a profile, and, only if you turn captions on during a call, to translate one spoken sentence. It is not used to train anything on our instruction.
• Cloudflare Turnstile, when the human check is switched on, and only on the forms anybody can reach without an account: creating one, asking for a password reset, writing to us, and signing in after several failed attempts. It checks that a browser is a person rather than a script, and sees the request in order to do it. It is not used for advertising and sets no advertising cookie.
• An email provider, for account mail: verification, password reset, and a notice that you matched.
• A STUN/TURN server during a video call, which sees network addresses in order to connect two people. Call audio and video are peer-to-peer and are never recorded.
• Where the files live: object storage for photographs, and a database. Both under our control.

Captions on a call are transcribed by your own browser. Where the browser has a local speech model, no audio leaves your device; where it does not, the browser sends it to its own vendor, and the button says which is happening before you turn it on.

What is kept in your browser

No advertising or analytics cookies, because there is no advertising and no analytics. What is stored locally is your session token, and small preferences that never reach us: the language you picked, whether a call starts with your camera off, whether captions are on, and which conversations have shown you a one-time tip.

How long

• While the account exists, for everything on it.
• Until deleted, for a conversation: by either person, from their side, or by ending it.
• Until you delete the account, at which point photographs are removed from storage as files and rows, conversations are deleted, and the profile is scrubbed.
• Six months, for the sign-in records above, counted from each record and not from the account. They are the one thing deleting your account does not remove, because the obligation to keep them is not ours to waive, and they expire on their own.
• Kept after deletion: an empty tombstone row so that references elsewhere do not dangle, any conversation that is the subject of an open safety report, and those sign-in records until their six months are up. Nothing else.

Where it lives

The company is Brazilian, and Brazilian law governs what it does with your data. The servers and the object storage holding it may be in Brazil, the European Union or the United States depending on where the service runs, and the providers named above are in several countries of their own.

If you are writing from outside Brazil, that means your data crosses a border to get to us. Brazil is a country the European Commission has not issued an adequacy decision for, so where EU law applies the transfer rests on the contractual safeguards we have with our providers and on your agreement to use a service run from Brazil. Your own country's rights do not disappear because of where we are: you can always write to privacy@hideshow.chat and ask.

What you can do about it

• See all of it. Settings → Your data → Download my data gives you one JSON file: your profile, every conversation including what the other person wrote, your likes, your credit history.
• Take it elsewhere. That file is the portable copy.
• Correct it. The profile is editable.
• Delete it. Settings → Your data → Delete my account. Both actions ask for your password, because a stolen session token should be able to do neither.
• Object, or complain. Write to privacy@hideshow.chat. If that does not settle it you can complain to the ANPD, Brazil’s national data protection authority (Autoridade Nacional de Proteção de Dados) (https://www.gov.br/anpd/).

One thing an export deliberately does not contain: who liked you without matching, and any report somebody made about you. Those are facts about other people, and a product where your data export names the person who reported you is a product where nobody can safely report anybody.