Privacy

When you post, the app asks your browser for your position and sends it once, to turn it into the nearest city. Only that city is stored.

Your coordinates are never written to the database, never written to a log, and never returned to anyone. The table that holds selfies has no latitude or longitude column at all — the surest way to keep something private is not to have it.

You can skip the whole thing and pick your city by hand.

You are asked for a birth year, once, the first time you post. Not a date of birth. It is enough to know whether you are 13 or older, which is what the law requires us to know, and it is the least we can ask for.

You can look at the world without an account. Reacting creates an anonymous account with no name and no email. Posting needs a real sign-in through Google or Apple, and we receive from them only what is needed to know it is you.

Signing in keeps the anonymous account you already had, so reactions you made before stay yours.

A selfie you post is public once it passes moderation. Delete it and it stops being served, and the original file is removed from storage.

Every photo is checked automatically before anyone else can see it. Nothing is published unchecked — if the check cannot run, the photo stays private rather than being let through.

When someone opens a link you shared, we record that a visit happened. To count the same person only once, we store a one-way hash built from their address, their browser and your link — never the address itself, and the same visitor produces a different hash on somebody else’s link. It cannot be used to follow anyone around.

Boost and Spotlight are handled by Stripe. Card details go to Stripe and never reach selfies.lol — we store what was bought, what it cost, and Stripe’s reference for it.

Counts of things that happen: a screen opened, a reaction added, a selfie viewed, an account made, a first selfie posted. No profile of you sold to anyone. There is nothing to sell — the app does not know enough about you to build one.

When you arrive through a link that names a campaign — the utm_ details an ad or a newsletter adds to an address — those details are kept with your account’s first sign-up, first selfie and first reaction, together with whether the visit began with a click on a Google ad. That is how we can tell which campaign brought people. The ad click’s own identifier is never stored with your account.

selfies.lol advertises on Google. If you accept ad measurement, the site loads Google’s tag, which sets cookies (named _gcl_…) so that Google can connect a click on one of our ads with what followed it: an account made, a first selfie posted, a first reaction, or a Boost or Spotlight bought.

We tell Google which of those it was, a one-way reference that does not identify you, and for a purchase its amount. Never your name, your email, your photos or where you are. Ad personalisation is switched off.

If you decline, or never answer, Google’s tag is not loaded and nothing is sent to Google. You can change your answer at any time from Ad cookies at the bottom of every page. What Google does with the data it receives is described in Google’s privacy policy.

You can delete any selfie yourself. For anything else — a copy of what is held about you, or deletion of your account — write to us and we will do it.