Privacy

Your IITR email address, a username, a short bio, your interests, the languages you speak, your answers to the personality questions, your gender and who you would like to date, the private details you fill in (name, age, year, degree, branch, bhawan), any photos you upload, and the messages you send.

It lives in one place: the authentication system, which is what Google hands your address to when you sign in. It appears in no profile, no message, no API response and no page of this site — not even your own. The rest of the database holds only a salted hash of it, which exists so the same address cannot be used twice and cannot be reversed back into an address.

Your username, bio, interests, languages and personality tags are visible to people discovery shows you to. Everything else is private until both of you choose to reveal it. Revealing a field to someone does not show you theirs — only fields you have both picked become visible, to both of you at once. Choosing to reveal something is never, by itself, enough to see anything.

Your raw personality answers are yours alone. Other people see only the derived dimensions and the tags they produce, never the individual answers behind them.

Your gender and your dating preferences are shown to nobody but you — they are on your own profile page so you can check what you saved, and nowhere else. Be aware that this is not the same as them being secret: because we only show you people you are mutually compatible with, who you appear to implies both.

Photos sit in private storage. Nobody can fetch one by guessing a URL. When someone is allowed to see yours, we mint a link that stops working after sixty seconds. If you withdraw a reveal, we stop serving your photos within about a minute — but anyone who already loaded one may have saved it, and we cannot take that back.

Messages are stored so the conversation still exists tomorrow. They are readable by the two of you, and by nobody else unless one of you reports the conversation. They are not scanned, and nothing about them is used to profile you.

If you report someone, a moderator can read the report and the conversation it concerns. A bug report works the same way but names no one — there is nothing to concern. Both are kept for 12 months and then deleted automatically, including reports about accounts that no longer exist.

30 days without signing in closes your conversations, deletes the messages in them, and deletes your photo. Your account, your profile and your answers stay; you sign back in as normal, your profile page tells you the photo is gone, and you can add another whenever you like. Nothing else is asked of you, and nothing else is deleted.

This is not a punishment for going quiet, it is the only honest way to run a site this size on free infrastructure: the two things that cost money per account are stored images and stored messages, and holding both indefinitely for people who have left is what would stop it working for people who have not. The other person in a closed conversation cannot reach you afterwards, in the same way as if it had been ended deliberately.

Deletion removes your profile, your photo, your personality answers and the messages you wrote. It does not delete the other person's messages: those are their words and their record of a conversation they were in. They will see the thread with your side gone and your name replaced by [deleted user].

Deleting does not undo a rejection. A conversation that was rejected or closed stays permanently excluded, which is what makes rejecting someone mean something.

The site runs on Vercel, and the database and photo storage are Supabase. Both are third-party services and can technically see what they host.

Signing in goes through Google, because that is how we check you are at IITR. Google therefore knows that you signed in to this site and when. We receive your address and the fact that Google considers it verified — not your password, and nothing else about your Google account. No other company receives anything.

One person operates this site. To ask what is held about you, to have something corrected, or to report a problem with this notice, write to kya.scene.co@proton.me.