Privacy Policy

Last updated: August 2026 · Applies to the wanted.love platform

1. Controller

No data protection officer has been appointed.

2. What data we process

2.1 Registration & profile

When you sign up and complete your profile, we process: display name, email address, password (stored encrypted), gender and the gender you are looking for, date of birth/age, region/location, and your voluntary “This is me” details (self-description, preferences, partner wishes).

2.2 Photos, videos and verification

You can upload a profile picture and further images. For the optional verification we process a selfie/gesture photo to compare it with your profile picture, so that other members can see you are a real person (verified badge). We also offer video chat directly on the platform; during a call, audio and video are transmitted between the participants. All uploaded images are first checked automatically for offensive content (image moderation via AWS Rekognition); the final decision is made by a human. The legal basis is our legitimate interest in a safe, serious service (Art. 6(1)(f) GDPR).

2.3 Messages & matching

We process your messages to other members as well as your wishes/details in order to calculate suitable suggestions and to show you why you fit each other.

2.4 Payments

For paid memberships we record transaction data (amount, time, status, reference number, chosen tier). Your payment details (card/account data) are processed exclusively by the payment providers, not by us.

2.5 Usage and access data

When you visit and use the service we process technical data such as IP address, date/time, approximate region (for region/country checks) and cookies (see section 6). We also use the IP address recorded at registration to prevent abuse and spam.

3. Purposes and legal bases

• Providing your account, profile, matching, messaging and video chat – to perform our contract with you (Art. 6(1)(b) GDPR).
• Verification, fraud/spam prevention, IT security, IP blocking – based on our legitimate interest in a safe, serious service (Art. 6(1)(f) GDPR).
• Payment processing – to perform the contract (Art. 6(1)(b)) and meet legal retention duties (Art. 6(1)(c) GDPR).
• Reach measurement, advertising and optional cookies – only with your consent (Art. 6(1)(a) GDPR), withdrawable at any time.

4. Special categories of personal data

Details in your profile, your photos or your messages may reveal special categories of data (e.g. beliefs, health, sexual orientation). You provide such information voluntarily; we process it on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give by publishing it in your profile and can withdraw at any time by editing or deleting it. Please note that published content is visible to other members.

5. Recipients and processors

To provide the service we use carefully selected providers with whom data processing agreements are in place:

• Hosting: Hetzner Online GmbH (Germany).
• Payments: Stripe (Stripe Payments Europe Ltd., Ireland; where applicable Stripe, Inc., USA) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg).
• Email delivery: Resend (Resend, Inc., USA).
• Analytics/advertising: Google Ireland Ltd. – Google Analytics, Google Ads, Google Tag Manager (only with consent).
• Abuse prevention: AbuseIPDB (Marathon Studios Inc., USA) – checking IP addresses at registration.
• Image moderation: Amazon Web Services EMEA SARL (Luxembourg) – “AWS Rekognition” for automated checking of uploaded photos (offensive content, face and text detection); processed in the EU (Frankfurt data centre).

We disclose data to authorities only where legally required.

6. Cookies and consent

Strictly necessary cookies (login, language, security) are set on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR without consent. Cookies for reach measurement and advertising (e.g. Google) are only set if you agree in the consent banner. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer.

7. Transfers to third countries

Some providers (including Stripe, Resend, Google, AbuseIPDB) may process data in the USA. Such transfers take place on the basis of the EU Standard Contractual Clauses or – where certified – the EU-US Data Privacy Framework, each with appropriate safeguards pursuant to Art. 44 et seq. GDPR. Image moderation via AWS Rekognition takes place in the EU (Frankfurt data centre); to the extent access from the USA by the group cannot be excluded, the safeguards mentioned above (Standard Contractual Clauses or the EU-US Data Privacy Framework) apply as well.

8. Retention period

We store your data for as long as your account exists and it is necessary for the purposes described. After deletion we remove your profile; to prevent abuse/fraud, name, display name and email may be retained for a limited period. Backup copies may exist for up to 30 days and are not visible to others. Statutory retention obligations (e.g. for payment records) remain unaffected.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw any consent at any time with effect for the future.

You can delete your account and data yourself (Settings › Delete account) or request deletion by email to admin@wanted.love.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach, Germany.

10. Data security and breach notification

We protect your data with technical and organisational measures (including encrypted transmission and access controls). However, no one can guarantee complete protection against unauthorised access. In the event of a data breach involving a risk to you, we will inform you and the supervisory authority within the statutory deadlines.

11. Minimum age

wanted.love is intended exclusively for persons aged 18 and over. We do not knowingly process data of minors.

12. Changes to this policy

We update this privacy policy when our processing or the legal situation changes. The version published here at the time applies.