Privacy policy

Draft of October 31, 2026. This policy is for GayMoves (gaymoves.com), operated by [LEGAL ENTITY NAME], [ENTITY TYPE AND STATE OF FORMATION], [REGISTERED ADDRESS] (“we”). Privacy questions go to [PRIVACY MAILBOX, for example privacy@gaymoves.com].

Why we are careful

People use GayMoves to find LGBTQ+ friendly agents, so the fact that someone made an inquiry can say something about them. We treat the existence of an inquiry, your contact details and your intent as sensitive, even though we never ask for, infer or store a consumer's sexual orientation or gender identity.

1. Just browsing

• Browsing public pages sets no cookie and creates no account or session.
• No third-party scripts, fonts, images, maps, advertising or social pixels are loaded. The site's security policy only allows our own domain, so a third-party tracker could not run even if someone added one by mistake.
• We keep simple first-party counts to see what is used, for example how many times a city page was opened on a given day. A count stores the day, the page and the number, and nothing about the visitor: no cookie, no IP address, no device or visitor identifier. We do not count visits that send a Global Privacy Control or Do Not Track signal. See cookies and local storage.
• Our host sees your IP address and request details in order to deliver the page and defend against abuse, as every web host does. Our own page-view counts do not include them.

2. What stays in your browser

Some choices are saved only on your device, in your browser's local storage: your theme (light, dark or system), your unit choice (miles and °F, or kilometres and °C), and the shortlist, compare list and drafts of forms on the public pages. They are not sent to us. Clear them any time from your browser settings.

3. Accounts

If you create an account (agents, staff and consumers who sign in) we hold:

• Your email address (stored encrypted, with a one-way hash used to find it), display name and preferences.
• Passkey public keys. The private key never leaves your device, and we never see biometrics.
• Sign-in records: time, a truncated network prefix and browser family, kept as a security audit trail.
• Rate-limit counters, which store keyed hashes and no raw IP or email.

Signing in sets one session cookie (and a short-lived pairing or passkey cookie while you complete sign-in). They are strictly necessary, HttpOnly, SameSite=Lax and, in production, Secure. Details are on the cookies page.

4. Agents

Agents give us a professional profile, license details (the license number is stored encrypted), brokerage, service areas, optional identity self-description chosen by the agent, and billing records. Self-description is hidden unless the agent publishes each item, and is never shown in countries where it could put someone at risk. Card numbers never reach us: payments are handled by Stripe, and we keep only a customer id, card brand and last four digits. At the date of this draft payments run in Stripe test mode only; confirm before launch.

5. Inquiries and introductions

Status. In the current build, the inquiry, shortlist and contact forms on the public pages keep what you type in your browser only and do not send it to us or to an agent. (Owner: confirm this paragraph at launch.) When server-side inquiries are switched on, this is how they work:

• We collect what you type: name, email, optional phone, what you are looking for, budget band, timeline, the place you asked about and optional notes. We never ask for orientation, gender identity, race, religion, disability, family status, national origin, age or marital status. Do not put them in notes.
• We share the inquiry only with the agents you choose or approve, and we tell you who they are before you send it. Each agent who accepts it becomes an independent controller of what they receive and must keep it confidential and follow fair housing law.
• Marketing email and SMS are separate choices, unticked by default. You can withdraw any consent in one place, and a withdrawal is never refused.
• An optional “discreet mode” sends messages without the site name.

6. Reviews

Reviewers give a first name, a rating, text, the month of closing and an email address (kept as a hash). A review is published only with the reviewer's consent and can be withdrawn.

7. Who receives data

We do not sell personal information and do not share it for cross-context behavioral advertising. We use these service providers, only for the purpose shown:

We may disclose information when the law requires it, with the minimum needed, and we tell the person affected unless the law forbids it. Public map and city data on the site comes from public sources (US Census Bureau, NOAA, OpenStreetMap, Wikidata and others) and contains no personal data about visitors.

8. How long we keep it

• Accounts: while the account lives. After deletion, personal fields are erased within 30 days, except records the law requires us to keep.
• Sign-in links, sessions and rate-limit counters: days to weeks after they expire.
• Security audit trail: 24 months; consent, billing and privileged-access records up to 7 years.
• Inquiries: while being worked; contact details in closed inquiries are anonymized after 24 months. Review requests and messages follow the schedule in our data governance document.
• Billing records (no card numbers): 7 years for tax.
• Backups roll off on a schedule. Copies cached by search engines or AI systems before a deletion cannot be recalled by us.

Not yet automated. At the date of this draft, requesting account deletion ends your sessions and marks the account for deletion; the automated erasure job is on the launch checklist and until it runs we complete erasure by hand within 30 days.

9. Your rights

You can ask to see, correct, export or delete your personal information, to withdraw any consent, and to opt out of sale or sharing (we do neither, and we will confirm that in writing if you ask). If you are in the EU or UK you also have the rights the GDPR gives you, including to complain to your supervisory authority. If you live in California, Colorado, Connecticut, Virginia or another state with a privacy law you have the rights that law gives you, and we will not retaliate for using them.

Use the deletion and data request page. We confirm your identity by sending a fresh link to the email address on file and never ask for government ID. We acknowledge within 10 business days and answer within 30 days (the law allows 45, or one month under the GDPR, and we will tell you before using any extension). An authorized agent may act for you with your signed permission.

10. Security

Sensitive fields are encrypted, access is limited by role and logged, staff reads of personal data are recorded, and security events are kept in a tamper-evident log. No system is perfect; if a breach affects you we will tell you as the law requires.

11. Children, other countries, changes

The service is for adults; we do not knowingly collect information from anyone under 18. Servers are in the United States, so information about people elsewhere is transferred there; EU/UK transfer terms and any local representative ([EU/UK REPRESENTATIVE, IF REQUIRED]) are for counsel to confirm. If we change this policy in a way that matters we will say so on this page and email account holders before it takes effect.

Also read: Terms of use, Cookies and local storage, Fair housing, Copyright (DMCA), Delete your data, Referral fee policy, Accessibility.