Back

These pages are drafts, not in effect.

Cissr privacy policy

DRAFT. Not in effect. A lawyer has not reviewed this document.

Last updated: October 4, 2026.

This draft says what Cissr collects and who can see it, based on how the app and the site work today. It is not a claim that Cissr meets any particular privacy statute.

Open items (NEED)

• NEED: legal name of the operator.
• NEED: mailing address.
• NEED: email address for privacy requests.
• NEED: whether a phone number is required, and what it is used for.
• NEED: whether the website sets cookies or uses analytics, and which tools.
• NEED: how long stored account data, blocks, and reports are kept. There is no delete-account control, and chat messages are not written to the database when sent.
• NEED: confirm that Cissr does not sell personal information and does not run ads. Nothing in the current product is a payment processor, an ad network, or a data sale. This draft does not authorize either.
• NEED: which privacy requests Cissr will honor, and how a person sends one. The product does not currently offer sign out, delete account, photo upload, or profile edits that save.
• NEED: how often the phone app updates location, and confirm the unrounded location is not kept or logged.
• NEED: confirm weight is removed from every discovery and profile response, and that location is rounded on the server, before this policy takes effect.
• NEED: any other company that receives personal information, including email delivery or error logging. Push notifications are not built, so no push vendor is named.

Who we are

Cissr is a dating app at Cissr.online, operated by [NEED: legal name] ("Cissr", "we").

What we collect

Account. Your email address, and the fact that you confirmed it. Email confirmation is on. Sign-in with Google, Apple, or another social account is not offered. Sign out is not offered in the app today.

Phone. A phone number may be stored in your settings. [NEED: whether it is required and what it is used for.] We do not describe a text-message program here, because none is specified. Push notifications are not built. This draft does not say we collect a push token.

Age. Your date of birth, stored in a private profile field. The birthday field is built. A separate flag records whether that date means you are 18 or older. You cannot set that flag yourself. See the age rules draft.

Profile. A nickname, collected only when the profile is created. Your visibility setting: hidden, everyone, or matches. A new profile starts hidden. Hidden stays out of discovery. A profile set to matches is not returned by discovery. A match can still see that profile. About You fields, each optional: bio, gender, pronouns, height in centimeters, interests, goals, languages, city, and prompt answers once prompts exist. Weight may be stored but is not shown to other people. Profile edit does not currently save nickname, identity, orientation, pronouns, height, or weight, so this draft does not say those are changed from an edit. The app does not let you upload, reorder, or delete a photo. If a public photo is already stored, discovery can return its address (photo_url). That is not a way for you to add one.

Location. Only the Cissr phone app collects location, and only after it explains why and you give permission. The phone sends its location to our server, which rounds it to an approximate location and stores it in a private location record. The website never asks your browser for a location. On the website, distance bands come from the last location your phone saved, which may be out of date if you have moved since. If you use only the website, no location is stored and no distance band is shown. Location is used only to work out a distance band. It is not sent to other people's apps. You can clear it on the app or the website. Anywhere mode skips the distance check but does not erase a stored location. [NEED: how often the app updates location (only when opened, or in the background), and confirm the unrounded location is not kept or logged.]

Sexual orientation. If Cissr offers an orientation field, it is optional and hidden by default. It is shown only if you turn it on, and it is removed from what other people receive when you turn it off. We do not sell it, share it with an outside company, or use it for ads or analytics. We do not filter other people by an orientation they keep hidden.

Preferences. Your discovery filters (age range with an 18 floor, distance, Anywhere, and Show me) are stored and visible only to you. Show me matches the gender each person describes for themselves. Cissr does not ask for sex at birth, and there is no filter for trans status. We do not collect sex at birth.

Activity. Likes, passes, and favorites. A favorite does not create a match. When two people like each other, Cissr stores the match. A chat list is built. A message you send is not written to the database yet, so this draft does not say that chat content is stored. Passes are not announced to the other person.

Safety. Blocks, unblocks, unmatches, and reports you submit. Report types in the product are Spam, Harassment, Underage, and Other.

Payments. None. Cissr is not connected to a payment processor. We do not collect card numbers, bank accounts, or billing addresses. Subscription and boost records, if present, are stubs and are not charges.

We do not collect a government ID, a selfie used as an age check, or a scan of a document. Age is a typed birthday only.

What other people can see

Discovery is built. Search by name is not offered. If your profile is set to everyone, you are 18 or older on the age check, and you are not blocked or hidden, discovery can show:

• your nickname
• your age as a whole number, not your date of birth
• a distance band, not coordinates and not a map pin
• the address of a public photo, if one is already stored
• any About You fields you filled in: bio, gender, pronouns, height, interests, goals, languages, city, and prompt answers once prompts exist
• sexual orientation, only if Cissr offers it and you turn it on

Weight is not shown. A match can see the same fields.

Other people are not given your email, phone number, birthday, or exact location. Discovery does not return your own profile to you. It does not return a hidden profile or a profile set to matches. A match can still see a profile set to matches. There is no pause screen. This draft does not say you can pause a profile or add a photo.

The chat list can be opened. Sending a chat does not save the message. Profile photos are not uploaded by the app today. The person you report is not shown your report.

Why we use this information

To create your account, to decide whether you can be discovered, to show a nickname, an age, a distance band, and the About You fields you chose to fill in, to record likes and matches, and to apply blocks, unblocks, unmatches, and reports. The age flag is used to keep discovery closed until the typed birthday says you are 18 or older.

We do not use this information to charge you. There is no payment processor. We do not use it to send push notifications. Those are not built.

Who else handles it

Account data and profile data are stored with Supabase, in the us-west-2 region. Supabase provides the database and login the app and the website share. The website and the app are allowed to use the public client key. The secret server key is not put in the app or the website.

[NEED: any other company that receives personal information, including email delivery or error logging.] No push provider is listed, because push notifications are not built.

Cookies and analytics

[NEED: whether cissr.online sets cookies or uses analytics.] This draft does not list any tracker, because none is confirmed.

How long we keep it

[NEED: retention for the account, the nickname, the birthday, blocks, and reports.]

You cannot delete the account in the app today. This draft does not promise an erasure path that the product does not have.

Your controls

You can set visibility to hidden, everyone, or matches. You can clear your location. You can block someone, which hides each of you from the other immediately. You can unblock. You can unmatch. You can report someone.

You cannot, in the app today, sign out, delete the account, upload or remove a photo, search by name, turn on push notifications, pause the profile, or save an edit to nickname, identity, orientation, pronouns, height, or weight. You cannot edit the age-verified flag yourself.

People under 18

Cissr is not for anyone under 18. We do not want an account for a child. If a profile appears to belong to someone under 18, use the Underage report type. The age rules draft explains the check we actually run, which is not an ID check.

Selling and advertising

The product, as built today, has no ad network and no data sale. [NEED: written confirmation that personal information is not sold and is not shared for cross-context advertising.] Until that is confirmed, this draft does not make that promise and does not authorize a sale.

Privacy rights where you live

Some states and countries give people a right to access, correct, delete, or export personal information, or to appeal a denial. The in-product controls above are what Cissr can do today. Delete account is not one of them. [NEED: the request path, and which of those rights the operator will honor.]

Contact

Privacy questions: [NEED: contact email]. Postal mail: [NEED: mailing address].