California Privacy Notice

This notice supplements our Privacy Policy and applies to California residents. nghtstand, Inc. is operated from California.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We never have. There is no “Do Not Sell or Share” link on this site because there is nothing to opt out of.

What we collect

• Identifiers: email address, a username and display name, and an account identifier.
• Geolocation: your live location and, if you use travel, a saved home location. Other members see an approximate position, not your exact one.
• Photographs: profile pictures, photos sent in chats or posted to the board, and, only if we ask for one, a photo of your government ID (deleted once it has been checked). The age-check selfie is used once to estimate your age and is never stored; we keep the result and the estimated age range.
• Commercial information: subscription status, if you have one.
• Internet activity: when you open the site and which section, so we can tell whether it is working. Also your IP address and browser at the moment you agreed to our terms, kept as an age-verification record, and sign-in records (IP address, browser and time), kept 90 days for safety.
• Content you create: messages, board posts, group chat messages, your bio and profile details.

Sensitive personal information

Some of what you can put on a nghtstand profile is “sensitive personal information” under the CPRA. That includes precise geolocation, and information about sexual orientation, sex life, and health, the last of which covers the optional HIV status and last-tested fields. If we ask for a photo of your government ID for the age check or the blue check, that is sensitive too: a person uses it only to confirm your age (and, for the blue check, that it's you), and the photo is deleted as soon as they have decided.

We use sensitive personal information only to provide the service you asked for: showing you people nearby, applying your filters, and displaying what you chose to put on your own profile. We do not use or disclose it to infer characteristics about you, which means the CPRA right to limit its use does not change anything here. Every one of those fields is optional and blank until you fill it in, and you can hide or clear any of them yourself at any time.

California residents also have a separate Consumer Health Data Privacy Policy available to them, which we apply to everybody.

Why we collect it

• To run the service: the map, chats, the board, and your profile.
• To verify you are 18 or older, which we are required to do.
• To keep the site safe, moderate photos, and act on reports.
• To send you email about your account, which you can turn off.
• To understand whether the product is working, using our own data.

Who it goes to

Service providers only, each acting on our instructions and none permitted to use it for their own purposes: our hosting and database provider, our map provider, our photo moderation provider, our email provider, our payment processor, and our bot-protection provider. They are named in our Privacy Policy. We may also disclose information where legally required, on valid legal process.

Your rights

• Know what we have collected about you and why.
• Delete it.
• Correct anything inaccurate.
• Limit our use of sensitive personal information.
• Opt out of sale or sharing. Not applicable, as we do neither.
• Not be discriminated against for exercising any of the above.

Most of these you can exercise yourself in seconds. Your account page lets you edit or clear every field, hide fields from other members, and delete your account outright. For anything else, email support@nghtstand.com. We respond within 45 days and will verify it is your account before acting, usually by asking you to send the request from the address on the account.

You can authorise somebody to make a request for you. We will ask for proof you authorised them. If we refuse a request you can appeal.

Retention

We keep your information for as long as your account exists. Delete your account and it leaves nghtstand at once; a locked copy that no member can see is kept for 90 days for safety and legal reasons, then permanently deleted. A banned or removed account is kept one year. Accounts in a meetup report are kept one year from the report, or longer only while a police or court request is open. Sign-in records are kept 90 days. Records we are legally required to keep, such as any child-safety report, are retained for as long as the law requires. Keeping records to protect against illegal activity is allowed under the CCPA even after a deletion request (Civil Code 1798.105(d)). The details are in the Privacy Policy.

Contact

nghtstand, Inc. · support@nghtstand.com