Privacy Policy

In plain English

We never sell your personal information, and there are no ad trackers on My420Love™.

The sensitive things you choose to share, like your sexual orientation, gender identity, intimacy preferences and cannabis lifestyle, are used only with your consent, only to build your profile and match you, and never for ads or sponsors.

We never show your exact location, only your metro area, and we remove hidden location data from every photo and video you upload.

You can download your data, correct it or delete your account at any time in Settings.

Who we are

This Privacy Policy explains how [Legal business name] ("My420Love," "we," "us") handles personal information when you use my420love.com, our installable web app, our emails and any website that points to them (together, "the Service"). We are the company responsible for your information.

Questions? Email privacy@my420love.com or write to [Legal business name], Attn: Privacy, [Business mailing address].

Our privacy promises

• We never sell your personal information, and we never share it for cross-context behavioral advertising (the kind of ad targeting that follows you around the internet).
• No ad trackers. No advertising cookies, no social media pixels and no third-party analytics on any page.
• Sensitive information only with your consent, used only to build your profile and match you, and you can withdraw consent at any time.
• Metro-only location. We never ask for your GPS location or your ZIP code.
• Hidden photo data removed. We strip location and camera data from every upload.
• Members-only media. Photos and videos are shown only to signed-in members, never on the open web.
• Discreet by default. Our emails stay discreet unless you choose otherwise.
• Your data, your call. Download it, fix it or delete it whenever you like.

What we collect

Information you give us

• Account details: your email address; your password (stored only in scrambled, hashed form, so we can never see it); your date of birth, to confirm you're 21 or older (members see your age, never your birthday); and an event code, if you joined through an event.
• Profile information: your first name; your gender and who you'd like to meet; optional details such as a more specific gender identity, pronouns and sexual orientation; the age range and distance you prefer; your metro area; what you're looking for; your bio, green flags and profile prompts; and optional facts such as relationship history, profession, hobbies, religion, ethnicity and favorite strain. Optional questions always include "Prefer not to say."
• Your answers: your answers to the Love Test, Dawn's Test and our other questions, your This-or-That picks, your Chemistry Check answers and your private dealbreakers (your "red flags").
• Photos and video: up to six photos, your optional 30-second video and its transcript, any image descriptions you add and, if you ask to be Photo Verified, a verification selfie.
• Activity with other members: likes, passes, compliments, hellos, messages, date plans, challenge progress, event RSVPs, Date Deal claims and love stories you create or approve.
• When you contact us: messages you send us, reports, appeals, and copyright, takedown, privacy or law enforcement requests.
• Payments, once paid plans begin: your payment is handled entirely by our payment processor. We receive only what we need to manage your pass, such as the plan, the price, the date, a transaction number and the payment status. We never receive or store your full card number or security code.
• Before you have an account: if you take the free Love Test, your answers are saved with an anonymous code in a cookie so you can pick up where you left off. If you ask us to email you your result, we use that email address to send it.

Information collected automatically

• Device and log data: your IP address, browser type, the pages and features you request and when, used to run the Service and keep it secure.
• Security signals: a random device ID stored in a cookie, and your device's time zone setting when you join, used to spot fake accounts and to stop banned members from returning.
• Cookies: only the strictly necessary ones listed in our Cookie Notice.
• Privacy-friendly usage counts: daily totals of how often pages and features are used, with no user IDs attached, so we can see what's working without tracking anyone.

Information from others

• Other members, for example when they compliment you, message you, report you, or confirm a love story or a "We met" with you.
• Our payment processor, which tells us when a payment, refund or chargeback happens.

What we don't collect

• No precise location. We never use your device's GPS or location services, and we don't ask for your ZIP code.
• No health or medical information. We don't ask about medical cannabis cards, health conditions, medications, sexual health or pregnancy, and we don't infer health information. [ATTORNEY: confirm whether cannabis-use answers could be treated as consumer health data under Washington's My Health My Data Act or Nevada's consumer health data law (SB 370). If so, add a separate Consumer Health Data Privacy Policy linked from the homepage.]
• No biometric data. Photo verification is done by a person comparing photos, never by face-recognition technology.
• No contacts or social accounts. We never access your phone's contacts or your social media accounts.
• No income or financial questions, and no card numbers.

Sensitive data

Some of what you may share is especially personal. We call it sensitive data, and we give it extra protection. It includes:

• your sexual orientation and gender identity, including transgender or nonbinary status;
• your intimacy and relationship preferences, such as your Chemistry answers;
• your cannabis use and lifestyle. Not every privacy law lists this, but cannabis is still a controlled substance under federal law and could affect you if it were exposed, so we treat it as sensitive anyway; and
• your religion and ethnicity, if you choose to share them.

We ask first. Before we ask any sensitive questions, a separate sign-up step called "Your info, your call" asks for your consent with an unchecked box:

"I consent to My420Love using the sensitive information I choose to share, like my sexual orientation, gender identity, intimacy preferences and cannabis lifestyle, to build my profile and match me with other members. I can withdraw this anytime in Settings → Privacy."

We record when you gave consent and the exact wording you saw.

If you say no, you keep a limited account with your Love Test result, events, love stories and your settings. You won't be matched or shown to other members unless you give consent later in Settings.

How we use it. Only to build your profile (showing only what you choose to show), to match you, to keep the Service safe, and to include in your own data download. Never for advertising, never shared with sponsors or Date Deal partners, never used in marketing emails, and never sold. Our systems are built so that our deals, analytics and marketing features can't read it.

Never used to sort people. Ethnicity and religion are never used as a search filter, a dealbreaker, part of a score or a ranking signal.

You choose what shows. Details like your specific gender identity, orientation and pronouns stay hidden unless you turn on "Show on my profile." Some answers are used for matching only and are never shown.

Change your mind anytime. Withdraw consent in Settings, under Privacy. We delete your sensitive answers within 24 hours, and you won't be matched with anyone until you give consent again.

What other members can see

Members who can see your profile are signed-in members who fit your preferences and whose preferences you fit. They can see:

• your first name, your age, your metro area and, if you allow it, your approximate distance, rounded to the nearest 10 miles;
• your approved photos and video, bio, profile prompts and green flags;
• what you're looking for, and the answers and styles that are marked public;
• your badges, like Founding Member and Photo Verified; and
• any sensitive details you've chosen to show.

Used for matching, never shown or quoted: some answers only ever appear as a shared reason ("You both…") and are never displayed on your profile.

Always private: your private answers, your dealbreakers and the identity details you've kept hidden are used only for matching. They're never shown, quoted, hinted at or used in anything other members see.

Never shown to other members: your email address, birthday, exact location (we don't have it), payment details, the reports you file, who you've blocked or passed on, and whether you've read a message. We don't have read receipts or typing indicators.

A few more things:

• This-or-That: someone can see your pick for a pair only after they answer the same pair themselves.
• Twin Alerts compare only answers to Dawn's Test, and only between two members who fit each other's preferences. Your sensitive answers are never used for Twin Alerts.
• Events: other attendees see you on an event's guest list only if you turn that on. It's off by default.
• Love stories are published only if both partners approve, using first names only.
• Shared Love Test results show your archetype card only, with no answers and no name.
• The open web: member profiles and media are never public and never appear in search engines.
• Our team: trained staff can see profile information, including private details, when they need to review photos, reports and safety issues. Staff see message content only in connection with a report, a legal requirement or a safety or fraud investigation, and every such view is logged.

Photos, video and location

• Hidden data removed. Every photo and video you upload is re-processed on our server, which removes hidden information such as GPS location, camera details and timestamps.
• Reviewed by a person. Every photo, video and verification selfie is checked by our team before anyone else sees it. For your safety, we decline photos that show identifying details such as house numbers, license plates or badges.
• Shown only to members. Your media is shown only to signed-in members through the Service, never through public links.
• Image fingerprints. We keep a digital fingerprint (a hash) of uploaded images, so images we've removed, such as intimate images shared without consent, can't be uploaded again.
• Verification selfies are reviewed by a person, never by face-recognition technology, and deleted 30 days after the decision.
• Metro-only location. You choose a metro area from a list. We measure distance between metro centers, round it to the nearest 10 miles, and let you hide it completely. With Travel mode, you can add a second metro for a short visit.

How we use your information

• To run the Service: your account and profile, compatibility scores, the Match Report, Meet My Mary Jane picks, Twin Alerts, messaging, events and Date Deals.
• To keep members safe: reviewing photos and videos; automated text filters that look for sales, solicitation, scams, hate and contact details; investigating reports; stopping banned members from returning; and warning members who exchanged messages with someone we removed for fraud (we share only that person's display name).
• To handle payments and refunds through our payment processor.
• To send you messages you need: email confirmation, security alerts, receipts, safety notices, deletion confirmations and the notifications you've turned on, with quiet hours and discreet mode.
• To send marketing emails, only if you opt in. You can unsubscribe with one click at any time.
• To improve the Service, using counts and totals, never advertising profiles.
• To follow the law and enforce our Terms of Service.

About automated decisions. Matching is automated: our scores and picks are calculated from members' answers. They're never used for decisions about credit, housing, employment, insurance or anything similar. Some safety tools act automatically for a short time, for example hiding a profile that has been reported for a serious safety issue, or holding a message for review. A person on our team makes every decision to suspend or ban an account.

How we share information

We share personal information only in these ways:

• With other members, as described above.
• With service providers who help us run My420Love, under contracts that limit how they can use it: our web host, our email delivery service and our payment processors (such as CCBill or Segpay). [DAWN: list the final providers before launch.]
• Never with sponsors or Date Deal partners. Businesses offering Date Deals never receive member lists or personal information. You redeem a deal by showing it on your phone.
• Event hosts. If you buy a ticket on an event host's own website, that host's privacy policy covers what you give them. [DAWN: confirm whether RSVP names are shared with event staff for check-in.]
• Our family of brands. We don't give your My420Love profile or answers to our sister brands for their own marketing. [DAWN: confirm.]
• For legal and safety reasons: when we receive valid legal process such as a subpoena, court order or search warrant; when we believe in good faith that someone faces a risk of death or serious injury; to report child sexual exploitation to the National Center for Missing & Exploited Children, as federal law requires; and to protect the rights and safety of members and others. Our Law Enforcement page explains more.
• If our business changes hands, for example in a merger or sale. We'll tell you, this policy will keep protecting information collected under it, and sensitive data will only ever be used as you consented.
• With your permission, for anything else.

We do not sell personal information, and we do not share it for targeted advertising.

Cookies, Do Not Track and Global Privacy Control

We use only strictly necessary cookies, which is why you don't see a cookie banner. Our Cookie Notice lists each one.

Fonts: right now, our pages load their fonts from Google Fonts, so Google receives your IP address and basic browser information when a page loads, as with any website request. We're moving our fonts onto our own server. [ENGINEERING: delete this paragraph once fonts are self-hosted (BLUEPRINT D-57).]

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information. We already don't sell or share, so there's nothing more to switch off.

Do Not Track: we don't track you across other websites, so we don't change anything in response to a Do Not Track signal.

How long we keep information

We keep information only as long as we need it:

• Your account and profile: while your account is open.
• When you delete your account: your profile disappears right away, and your profile, photos, video, answers and messages are permanently deleted within 30 days. If you change your mind, just log back in within those 30 days. The other person in a conversation keeps the messages they sent you, and you'll appear as a member who has left.
• Unmatched or blocked conversations: they disappear for both people right away. We keep a copy for up to 90 days in case of a safety report, then delete it.
• Content connected to a report: until the report is closed plus 90 days, or longer if there's a legal hold.
• Records of consents and agreements: 4 years.
• Payment records: 7 years, for tax and accounting. After an account is deleted, they're no longer tied to a profile.
• Ban records: 5 years, stored only as scrambled (hashed) values.
• Login and security logs: 90 days. IP addresses are shortened after 30 days.
• Declined photos and videos: 30 days, in case you appeal.
• Verification selfies: 30 days after the decision.
• Love Test answers without an account: 30 days.
• Usage counts: kept only as totals.
• Reports to the National Center for Missing & Exploited Children: 1 year, stored separately and securely, as federal law requires.
• Backups: deleted information may remain in our backups for up to [backup retention period] until they're overwritten.
• Inactive accounts: [DAWN/ATTORNEY: decide whether, and after how long, inactive accounts are deleted, with a 30-day warning email first.]

Your choices and rights

Every member can do all of this, at any time, wherever you live:

• Download your data. In Settings, under Privacy, choose "Download my data." We'll email you a single-use link, valid for 72 hours, to a file with your profile, answers, consents, the messages you sent, compliments, billing history (with no card data), 90 days of login history, and your original photos and video.
• Correct your information. Edit your profile anytime. Your date of birth can't be changed in the app; if it's wrong, email help@my420love.com.
• Delete your account. In Settings, choose "Delete my account" and confirm your password. We'll email you a deletion certificate when it's done.
• Withdraw sensitive-data consent in Settings, under Privacy.
• Stop marketing emails with the unsubscribe link in any marketing email, or in your email settings.
• Choose how we reach you: notifications, quiet hours and discreet mode are all in Settings.
• Pause your profile to take a break without deleting anything.

Not a member, or can't log in? Use our privacy request form or email privacy@my420love.com. We'll confirm the request through your email address before acting on it.

Timing. We respond within 45 days. If the law allows us more time and we need it, we'll tell you why.

Appeals. If we turn down a privacy request, you can appeal by emailing privacy@my420love.com with "Appeal" in the subject line. We'll respond within the time your state's law requires and tell you how to contact your state attorney general if you're not satisfied.

Authorized agents. Where state law allows, someone you authorize can make a request for you. We may ask for proof of that authorization and confirm your identity with you directly.

No penalty. We'll never treat you differently for using your privacy rights.

State privacy rights

Depending on where you live, laws in states such as California, Colorado, Connecticut, Maryland, Nevada, Oregon, Texas and Virginia give residents rights like these: to know and access the information we have about you, to get a copy, to correct it, to delete it, to opt out of sale, sharing, targeted advertising and certain profiling, to limit the use of sensitive information, and to appeal our decisions. We offer these rights to every member, wherever you live. A few state-specific notes:

• California: we don't sell or share personal information, and we use sensitive personal information only to provide the Service you asked for, so there's nothing to opt out of or limit. The categories we collect are identifiers (like your email address); personal records; characteristics such as gender, sexual orientation, religion or ethnicity (only if you share them); commercial information (the passes you buy); internet activity (how you use the Service); approximate location (your metro area only); audio and visual information (photos and video); inferences (your compatibility scores, styles and archetype); and sensitive personal information (your account login, the contents of your messages and, if you share them, your sexual orientation, sex life, religion or ethnicity). We collect them for the purposes in "How we use your information" and keep them for the periods in "How long we keep information."
• Nevada: we don't sell covered information. You can still send an opt-out request to privacy@my420love.com, and we'll honor it. You can review and correct your information in Settings, and we'll post changes to this policy here and tell you about them as described below.
• Connecticut, Colorado and similar states: we process sensitive data only with your opt-in consent.
• Maryland: we process sensitive data only to provide the matching you asked for.
• Oregon and Texas: we don't sell precise location or sensitive data, and we don't collect precise location at all.

[ATTORNEY: confirm which state privacy laws apply today and whether any state requires additional disclosures here.]

Keeping your information secure

We use safeguards designed to protect your information, including:

• modern password hashing, so we never store your password itself;
• encrypted connections (HTTPS) on every page;
• two-factor authentication on every staff account;
• member photos and videos served only to signed-in members; and
• access to private information limited to staff who need it, with sensitive views logged.

No system is perfectly secure. If a data breach affects your personal information, we'll notify you, and regulators where required, as quickly as we can and within the time the law requires.

Adults 21 and over only

My420Love is only for adults 21 and over. We don't knowingly collect information from anyone under 21. If we learn that someone under 21 has created an account, we delete it and keep only a scrambled (hashed) record to stop them from rejoining. If you think a member is under 21, please report them or email safety@my420love.com.

Where your information is stored

My420Love is run from the United States, and our servers are in the United States. The Service is meant for people in the United States. If you use it from another country, your information will be transferred to and processed in the United States.

Changes to this policy

If we make a material change, we'll tell you by email and in the app at least 30 days before it takes effect, and you'll always be able to see what changed. We will never use your sensitive information in a new way without asking for your consent again.

Contact us

• Email: privacy@my420love.com
• Privacy requests: my420love.com/privacy/requests
• Mail: [Legal business name], Attn: Privacy, [Business mailing address]