Privacy Policy

If you only browse

Opening this site sets two cookies. One keeps your session working — your age confirmation, your place in a search — and expires two hours after your last page view. The other protects forms on the site from being submitted by anyone but you; it carries no information about who you are. Neither cookie tracks you across other websites, and no advertising or analytics script runs on this site at the time of writing.

Every request still passes through the server that delivers the page. It keeps a short technical record: the requesting address, the browser reported, the page asked for, and the time. That record exists to keep the site working and secure, not to build a profile of your visits.

If you register an account

An account needs three things from you: what you'd like to be called, an address we can reply to, and a password. That password is turned into a hash before it's stored, so nobody on our side can read it back. From your account settings you can update these details, and where the feature is available, add a short biography.

If you publish a profile or agency listing

Publishing is public on purpose: whatever fields you fill in and whatever media you upload are shown to visitors by design. Before a profile goes live, a moderator compares a live photo or video you provide against your profile photos, to confirm the person shown is the person publishing. That verification image is used for the check itself and is not published.

If you contact us

The contact form takes what you type into it — typically your name, a reply contact and your message. If you write to us on WhatsApp or Telegram instead, we hold your number or username and the conversation, and nothing more. Those messages travel through Meta's and Telegram's own systems on the way to us, under their privacy terms, not ours. A message you send to an escort or agency through the contact details on her own profile goes directly to her; we never see it.

Who else ever sees any of this

We don't sell personal data, and we don't hand it to anyone for their own marketing. A short list of parties can see it because the site can't run without them:

• The company hosting the site, holding its database and its logs on their servers.
• Cloudflare, positioned ahead of the server to absorb attacks and keep the site reachable.
• Meta or Telegram, only for a conversation you start with us on WhatsApp or Telegram.
• An authority, where the law requires it, or where withholding a report would leave someone at risk.

What we never ask you for

Nobody writing on our behalf will ask you for a password, a one-time code, a payment card number or an identity document out of nowhere. The one exception is the live verification photo or video described above, asked for in writing when you publish a profile, and used for that single purpose. If a message asking for any of this reaches you claiming to be from us, it isn't; forward it through the contact page.

How long we keep it

The two browsing cookies last two hours from your last page view. An account's details stay while the account is open. They're removed on request once it closes, aside from what a legal or safety record needs to keep. A profile's fields come down the moment it's unpublished. A record that it existed can be kept longer than that, because one report can look minor on its own while a pattern across several tells a different story. Contact-form messages and conversations with the team are kept only as long as answering them, and any related follow-up, takes.

Your rights under the PDPO

Hong Kong's Personal Data (Privacy) Ordinance gives you four rights over your own data: to find out if we hold it, to receive a copy, to have it fixed if it's wrong, and to have it removed. Raise that request through the contact page, and we'll respond within what the Ordinance sets as the limit. If you feel we haven't met it, Hong Kong's independent regulator for this area — the Privacy Commissioner for Personal Data — is where a complaint goes next.

Security, age and changes

Every page here is served over HTTPS, and beyond what the sections above list, we keep nothing. No site can promise perfect security, and we're not going to claim otherwise.

Our site is restricted to adults of 18 and over. Data from anyone below that age is not something we set out to hold; flag it through the contact page if you think we have, and it's removed.

If this policy changes, the update replaces this page, and it's read together with the Terms of Service, which cover the rest of the site.