CupidLeaks
DE

Privacy policy

Updated: 11.10.2026

Your selected export file is analyzed locally in your browser. Visiting the website still involves processing technical connection data. This policy distinguishes those activities.

Controller

Hagen Aad Fock, Sechsschimmelgasse 3, 1030 Vienna, Austria.
Email: [email protected]

Selected export files and results

The analyzer reads your selected file on your device and processes it in a Web Worker. The application does not send file contents or analysis results to the operator or an analytics service. There is no account or server-side file-upload endpoint for this analysis.

Data is processed in the open page’s memory. “Discard data” resets the analysis; closing the page ends the session. This does not securely erase your original file, browser or operating-system memory, or downloaded reports. The application does not intentionally persist export contents in browser storage.

Downloaded results remain on your device until you delete them. They can contain personal information; review files before sharing. Selecting a local file alone does not give the operator access to it.

Optional AI analysis (deep dive)

The analysis page offers a voluntary AI analysis of message texts. It only starts once you explicitly confirm the notes and click “Prepare pseudonymised texts”. Only then does the Web Worker pass automatically pseudonymised message texts to the open page. Names, phone numbers, email addresses, handles, links, places and addresses are masked; matches are called “Match A”, “Match B” and so on. This pseudonymisation is automatic and not fully reliable.

Variant 1, on your device: If your browser offers a built-in AI model (currently desktop Chrome), the analysis runs locally on your device. The website sends no request and the operator receives nothing. If the model is missing, Chrome downloads it itself from the browser vendor after your click; Google Chrome’s terms apply to that download.

Variant 2, prompt package: The page creates a text that you copy or download and paste into an AI service of your choice yourself. The website transfers nothing. Once you paste the text into a cloud service, that service’s terms apply; such services may store inputs or use them for training.

The messages contain information about other people who have not consented to the analysis. Review the text before sharing it anywhere. AI results can be wrong, invented or biased; they are interpretations, not facts and not a psychological diagnosis. Do not make decisions about people on this basis alone. In case of harassment or fraud, use the app’s report function or contact the police. Nicknames you give in the conversation ranking stay only in the open page’s memory and are not stored.

Website requests and server logs

The web server and upstream proxy process technical data for delivery and security: IP addresses including forwarded client IP, timestamp, requested URL, HTTP status, transferred bytes, browser identifier and any referring page supplied by your browser. IP addresses are not generally anonymized by the current server configuration.

Purposes are operation, troubleshooting and abuse detection. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in a working and secure website. Connection data is necessary to retrieve the website.

Current container logs are size-limited and rotated at the configured limit. Actual retention depends on log volume; no fixed 14-day deletion schedule is currently implemented. Necessary extracts for a specific security incident may be retained until resolution and, where needed, for legal claims. Your selected export files are not part of these access logs.

Cloudflare

The website uses Cloudflare for delivery, caching and protection. Cloudflare processes IP addresses, request and network data. This concerns website access, not your locally selected export. Processing may take place outside the European Economic Area, including in the United States.

See Cloudflare’s privacy policy for its processing and retention criteria and its public data-processing terms for transfer mechanisms, including standard contractual clauses. Local log rotation does not determine Cloudflare’s retention.

Cloudflare can also use HTTP headers to instruct browsers to send technical network-error reports. This connection diagnosis is separate from file analysis.

Browser storage

The application uses localStorage to retain interface choices:

These values contain no export contents. The application reads them locally to retain your choices and does not transmit them as telemetry. They remain until overwritten or until you delete website data in your browser. You can block or clear storage in browser settings; preferences may then not be retained.

Shared simulator URLs can contain model parameters and a seed. Recipients can read these values, and query parameters can appear in technical request logs. Do not put personal export data in those links.

Cookies, search and audience measurement

The application embeds no advertising pixels or separate audience-analytics service. Fonts, scripts, images and search indexes are delivered under this domain through Cloudflare. Search terms are processed locally; retrieving search indexes generates normal file requests.

Depending on security features, Cloudflare may use necessary security cookies, such as a passed-challenge cookie. Its cookie documentation describes names, purposes and lifetimes. A blanket claim that no third party is involved would be inaccurate.

Non-essential storage or access requires any necessary consent before use. Being “cookieless” does not itself establish a consent exemption. The Austrian Data Protection Authority explains this distinction.

Contacting us

Email correspondence involves processing your sender address, message and information needed to respond. The purpose is handling your request under the legitimate interest in Article 6(1)(f) GDPR. Correspondence is retained for handling the request, relevant follow-up and legal obligations. Do not email dating exports merely to use the local analyzer.

Your rights

Subject to the legal conditions, you have rights of access, correction, deletion, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. These rights also matter for technical logs. Contact the controller using the email above.

You may complain to a supervisory authority, including the Austrian Data Protection Authority. See the GDPR. The analyzer does not make automated decisions producing legal or similarly significant effects about you.