1. Controller
VMatch, based in Germany, is identified as the controller for VMatch at https://vmatch.live. Privacy contact: privacy@vmatch.live.
2. Data we process
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, display name, password hash, authentication session, account dates | Create and secure your account |
| Profile and preferences | Age confirmation and optional country, language, gender, interests, and matching preferences | Operate matching and personalise the service |
| Age assurance | Verification status, method, review time, and a one-way hash of an external provider reference; not a copy of an identity document | Enforce adult-only access when stronger age assurance is enabled |
| Calls | Call and match identifiers, participants, start/end times, end reason | Connect calls, prevent abuse, and troubleshoot |
| Communications | In-call chat and direct messages | Deliver messaging and investigate reports |
| Safety | Reports, blocks, suspension reasons, appeal information | Protect users and enforce rules |
| Technical | IP address and request/security logs; connection setup time, RTT, jitter, packet loss, TURN use, failure state, and coarse device/browser categories | Security, rate limiting, reliability, call-quality troubleshooting, and fraud prevention |
| Analytics | Page and feature interaction data generated by Google Analytics | Measure and improve the service, only after analytics consent |
3. Video and audio
VMatch uses WebRTC for realtime video and audio. Media is normally exchanged peer to peer and may pass through a TURN relay when a direct connection is not possible. TURN relays encrypted media packets. VMatch does not intentionally record or store the video or audio content of calls.
Call metadata and text chat are separate from the media stream and may be stored as described in this notice. During a call, the browser locally samples technical WebRTC statistics and sends a cumulative quality summary approximately every 30 seconds and when the call ends. The quality summary does not contain media, screenshots, chat content, an IP address, or the browser's raw user-agent string.
4. Legal bases
- Contract: account creation, authentication, matching, signalling, calls, and requested messaging features.
- Legitimate interests: service security, rate limiting, fraud prevention, troubleshooting, and proportionate safety moderation.
- Legal obligation and legal claims: responding to lawful requests and preserving necessary evidence.
- Consent: non-essential analytics and any optional processing that specifically asks for consent.
Camera and microphone browser permission controls access to your device. You can revoke that permission through your browser or end the call at any time.
5. Retention
Account, profile, age-assurance status, messages, and ordinary call metadata are retained while the account is active and are deleted or de-identified when the account is deleted, unless a limited record is required for security, an unresolved report, a legal obligation, or legal claims. VMatch must not ask users to email identity documents; any external age-assurance provider must return only the minimum status and reference needed.
WebRTC quality summaries are updated in place for each call participant, included in account data exports, deleted with the account, and automatically removed after 90 days. Authentication sessions expire or are revoked on logout or account deletion. Analytics retention is controlled through the configured Google Analytics property. Infrastructure logs and backups must follow the operator's documented retention schedule and should not be kept longer than necessary.
6. Recipients and international transfers
Data may be processed by hosting, infrastructure, email, security, and analytics providers acting for VMatch. Google Analytics is used only after consent. Some providers may process data outside your country. The operator must maintain the appropriate contracts and transfer safeguards required by applicable law.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent without affecting earlier lawful processing and may complain to your competent data-protection authority.
Use the Privacy Requests page to download account data or delete your account. Other requests can be sent to privacy@vmatch.live. We may need to verify your identity.
8. Automated moderation
Repeated reports may trigger a temporary automated restriction designed to reduce immediate safety risk. You may request human review through the Safety page.
9. Security and changes
We use technical and organisational measures intended to protect personal data. The persistent authentication credential is placed in an HttpOnly, Secure, SameSite cookie and cannot be read by page scripts; the access token is held only in page memory. TURN relay access uses short-lived credentials rather than a shared secret embedded in the frontend. No internet service can guarantee absolute security. Material changes to this notice will receive a new version and effective date.