Privacy Policy

This Privacy Policy explains what information nghtstand, Inc., a Delaware corporation ("nghtstand," "we," "us"), collects, how we use and share it, and the choices you have. It applies to the nghtstand website and services. By using the Service you agree to this Policy and our Terms & Conditions. The Service is for adults 18 and older only.

1. Information we collect

• Account & identity: email address, password (stored hashed), and date of birth (used to confirm you are 18+).
• Age check: the result of your age check (passed, or sent to an ID check), the age range estimated from your selfie, how it was decided, and when. We never keep the selfie itself. See section 5.
• Government ID, only if we ask: a photo of your ID, kept privately until it has been checked, then deleted. We keep the decision.
• Profile: display name, gender, who you want to see, orientation, mood, "looking for," and any details you add (e.g., height, body type, self-described ethnicity, kinks). You choose what to share; some of this may be sensitive, and you provide it voluntarily.
• Location: your device's approximate or precise location, used to place you on the map and find people nearby.
• Photos & messages: images you upload and messages you send, including content in private chats.
• Payment: nghtstand+ purchases are processed by CCBill. We receive limited billing details and subscription status; we do not store your full card number.
• Consent records: the date and version of the Terms and Privacy Policy you agreed to, plus the IP address and device used.
• Sign-in records: the IP address, device and browser, and time when you use nghtstand (at most one record every few hours from the same address). We keep these for 90 days.
• Usage & device: site activity, approximate IP-based region, device and browser type, and diagnostic logs.

2. How we use your information

To create and operate your account; check that you are an adult; power the map, matching, chat, and board; process payments and manage nghtstand+; keep the community safe (moderation, anti-fraud, enforcement); verify consent; provide support; comply with legal obligations; and improve the Service. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

3. Your location is protected

We store your true location securely on our servers and never share your exact coordinates with other users. Other people only ever see an approximate, fuzzed position. We never put your coordinates in a web address. You control your precision (Precise or Approx ~500 ft) and can use Discreet mode to hide from the map entirely.

4. Photos, adult content & safety moderation

Every photo is checked automatically before anyone else can see it: for nudity, for any face that may belong to someone under 18, and for well-known public figures. Anything doubtful is held for a person and is never published automatically.

nghtstand is an adult site. Explicit photos are allowed on profiles, on the board and in messages, and they are shown only to signed-in members who have passed our age check. People who aren't signed in, and members who haven't finished the age check, never see member photos. Every photo is delivered through short-lived private links, never from a public address.

In every case, images are checked for illegal content and anything involving minors. Content that appears to involve a minor is blocked and reported to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement as required by law, and related information may be preserved for that purpose.

5. The age check

Everyone passes an age check before they can use nghtstand: new members right after they sign up, and existing members the next time they visit.

The selfie. You take a selfie with your camera. We send it to Amazon Web Services (AWS), our image provider, which estimates an age range from the face in the picture and sends the range back. That is all the selfie is used for. We don't save it. We don't create or keep a face template, faceprint or any other biometric identifier from it, and we never use it to identify you or to match you with anyone. AWS returns the estimate and keeps nothing for us; we have opted out of AWS using the images we send it to improve its own services. We keep only the result, the estimated range, how it was decided and when.

The ID check. If the selfie can't confirm you're an adult (anyone estimated under 21), or the check can't give an answer, we ask for a photo of a government ID. You can also choose this instead of the selfie. AWS Textract reads the ID's type, date of birth and expiry date for us; a clear, unexpired US ID showing you're 18 or older is approved straight away. Anything it can't read clearly is checked by a person at nghtstand. The blue check is always decided by a person, who confirms the ID is yours. The photo is kept in private storage that no member can open, and it is deleted as soon as it has been decided. We keep the decision, how and when it was made, and nothing else that was read from the ID. Until an ID is approved, the account can't use the Service.

The blue check uses the same ID check.

6. How we share information

• Other members: your profile, photos, mood, and fuzzed location are visible to signed-in members who have passed the age check and match who you want to see; board posts are visible to members in your area. Nothing you post is shown to people who aren't signed in.
• Service providers who process data on our behalf under contract, including site hosting (Vercel); database, auth, and photo storage (Supabase); payments (CCBill); email delivery (Resend); maps (Mapbox); image moderation and the age estimate (AWS Rekognition); and reading ID photos for the age check (AWS Textract).
• Safe Meet Check-in: if you start a Safe Meet Check-in and give a friend's email, and you do not check in by the time you set, we email that friend to alert them, using the details you provided.
• Police and legal requests: we give information to police and other government agencies only when the law allows it: with valid legal process (a subpoena, court order or search warrant, as the law requires for that kind of information), in an emergency involving danger of death or serious physical injury, or when a member who was part of a conversation asks us to share that conversation. We also share information to comply with law, enforce our Terms, prevent fraud and harm, and make required child-safety reports. We never give one member another member's personal information. How police can contact us is on our law enforcement page.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. When you report a meetup

If you report that something illegal happened with someone you met on nghtstand (for example a robbery, an assault or a threat), we keep the records of both accounts for one year from the report so police can request them, or longer only while a police or court request about it is open. These records are profiles and photos, your conversation, account emails, sign-up and sign-in IP addresses and times, and the last location we had stored. They are locked away; no member can see them, and they are kept even if either account is deleted.

We give you a case number, a letter for police and a copy of your own conversation (your messages and the ones sent to you). We do not tell the other member about your report, and we never give you their personal information. Police can get it from us only the legal way, as section 6 describes.

8. Your choices and rights

You can view and edit your profile, adjust location precision, enable Discreet mode, block or report users, and delete your account at any time. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising them.

9. Data retention

• Active account: while it is open.
• Deleted account: removed from nghtstand at once. Nobody can see it or find it, and you can sign up again with the same email. For safety and legal reasons we keep a locked copy of its records (profile, photos, messages and both sides of its conversations, account email, sign-up and sign-in IP addresses, reports filed by or about it), and we permanently delete it after 90 days. During those days, the only thing any member can see is their own conversation with you, if it went both ways, shown as "Member no longer available," so they can still report a meetup.
• Banned account, or an account we remove: kept for one year after the ban or removal, then permanently deleted.
• Accounts in a meetup report: one year from the report, or longer only while a police or court request about it is open (section 7).
• Sign-in records: 90 days, or longer only while the account is in a meetup report.
• Age-check selfie: never stored. ID photo: deleted as soon as it has been decided, and right away if you delete your account. We keep the age-check result.
• Child-safety reports and records the law requires us to keep: for as long as the law requires.

These windows apply to accounts deleted after this version of the Policy took effect. Accounts deleted before then were deleted at once.

10. Security

We use technical and organizational measures, including encryption in transit, access controls, row-level database security, and private, signed-URL photo storage, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

The Service is for adults 18 and older, and everyone passes an age check before using it. We do not knowingly collect information from anyone under 18. If we learn that a minor has created an account, we remove it and take appropriate action, including reporting where required.

12. International users

nghtstand is operated from the United States, and your information may be processed in the U.S. and other countries where we or our providers operate. By using the Service, you consent to this transfer and processing, subject to applicable law.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you and update the version and date above. Continued use after changes take effect means you accept the updated Policy.

14. Contact

Questions or requests about your privacy? Contact us at support@nghtstand.com, or write to nghtstand, Inc., 925 N La Brea Ave, Suite 500, Los Angeles, CA 90038. Police and other government agencies: support@nghtstand.com, as our law enforcement page explains.