Privacy policy
Version applicable from 2026-08-27. This policy explains transparently how your personal data is processed.
The Romanian version is the reference version of this document.
Data controller
The controller is REFUGIUL RUSTIC S.R.L., tax ID 54975977, J2026040687009, with its registered office at Aleea IV Insula Mureș, nr. 35, Cvartal 27, municipiul Arad, județul Arad, România. For any request concerning personal data: admin@swingers-world69.com or 0743 382 093.
Data processed
- account and contact data: email, display name, handle and encrypted password;
- profile data: location, bio, member type, interests and preferences;
- content: photos, videos, posts, comments and messages;
- verification: verification status, the Stripe session identifier and the result regarding age/identity;
- membership: plan, status, Stripe identifiers and billing periods; the operator does not receive full card details;
- security: sessions, pseudonymised IP, rate limiting, the public key and technical metadata of passkeys, as well as security and moderation events;
- proof of consents: type, version, date and context.
Purposes and legal bases
- account creation, provision of the service and memberships: performance of the contract;
- processing of information that may reveal sexual life or orientation: explicit, separate consent under art. 9(2)(a) GDPR;
- security, fraud prevention, defence of rights and moderation: legitimate interest and, where applicable, legal obligation;
- invoicing and accounting records: legal obligation;
- optional statistics and advertising measurement: consent for cookies.
Consent for sensitive data
The choice to provide interests and other sensitive information is separate from accepting the Terms. The consent is recorded together with the document version and can be withdrawn at any time by email at admin@swingers-world69.com. Withdrawal does not affect the lawfulness of processing carried out previously, but it may make it impossible to continue the profile and community features. We will confirm the withdrawal and will delete or anonymise the data that no longer has another retention ground.
Providers and recipients
Data is disclosed only to the extent necessary to:
- Vercel — application hosting;
- Neon — the PostgreSQL database;
- Cloudflare R2 — media file storage;
- Stripe — payments, memberships and identity/age verification;
- Google Ireland Limited — measuring Google Ads campaigns (Google tag), according to the consent you choose;
- ClausWeb — delivery of operational emails;
- Nous API — only the text of the messages for which the user requests automatic translation, processed with the DeepSeek V4 Flash Latest model;
- authorities, advisers or courts, where there is a legal obligation or a legitimate legal interest.
Providers act in accordance with the applicable contracts and instructions. For transfers outside the European Economic Area we rely on an adequacy decision or on safeguards recognised by the GDPR, such as standard contractual clauses, as the case may be.
Retention periods
- account, profile and media: for the duration of the account, then deletion or anonymisation within at most 30 days;
- backups: overwritten within at most 90 days;
- automatic translations: at most 30 days;
- security logs: at most 12 months, unless an incident justifies longer retention;
- consents, complaints and moderation: the duration of the account and up to 3 years as evidence and for the defence of rights;
- accounting data: 5 years, in accordance with legal obligations;
- content reported or involved in a dispute: until resolution and the expiry of the relevant legal term.
Automatic translation of messages
Translation is optional and is activated by the user. The text of selected received messages may be sent to Nous API for language detection and translation. Your own messages are not sent for this purpose. The feature can be turned off from the conversation.
Automated moderation and human review
We use automated rules to detect spam, harassment, exposed personal data and other risks. These rules may flag content, hide it temporarily or send it for review. You can request explanations and a human review of a measure at admin@swingers-world69.com.
Your rights
You can request access, rectification, erasure, restriction, portability and objection, as well as the withdrawal of consent. The request is sent to admin@swingers-world69.com; we may ask for reasonable information to confirm your identity and we reply within the term provided by the GDPR. You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing, www.dataprotection.ro.
Security and incidents
We apply access control, encrypted passwords, protected sessions, TLS connections, separation of roles, request limiting and private storage. Incidents are assessed and, where the law requires it, notified to the authority and to the affected persons.
Changes
We will display the date of the new version and will communicate significant changes. If the purpose or the basis of the consent changes, we will ask for a new choice before processing.

