Privacy Policy

1. In short

Rhaaar! helps adults find friends by personality and interests. We collect only what's needed for that, we don't sell data, we don't show ads and we don't track you on other websites. Below you'll find in detail what data we store, why, who can see it, how long we keep it and how to delete it. You can download your data and delete your account at any time in the settings, without writing to anyone or waiting.

2. Who is responsible for your data

• Data controller (the one who decides why and how data is processed): [SITE OWNER NAME: will be added before launch], Republic of Serbia.
• For any question about your data, write to [EMAIL FOR DATA QUESTIONS: will be added before launch]. We reply free of charge within 30 days, usually sooner. So that we don't hand your data to a stranger, we may ask you to write from the email your account is registered with.
• This policy applies to Rhaaar! in all three languages (Russian, Serbian, English). If the translations differ, the Russian version prevails.

3. Who can use the site

Adults only, 18 and over. When you sign up, we ask for your date of birth and check your age, and you confirm with a checkbox that you're at least 18. If we learn that an account was created by someone under 18, we will delete the account with all its data.

4. Account and sign-in

• What we store: your email, your password (only as an irreversible fingerprint: nobody can see the password itself, not even us), the date the account was created, the date your email was confirmed and the date of your last sign-in.
• Your email is never shown to other people.
• When you choose a password, we check whether it appears in known data leaks (the Have I Been Pwned service). Only the first 5 characters of the password's fingerprint are sent there: neither the password nor your email is shared.
• Until your email is confirmed, the name and date of birth from the sign-up form are kept temporarily in the account data and erased from there as soon as your profile is created. An account whose email isn't confirmed within 7 days is deleted automatically.
• For moderators we also store a second sign-in factor (a one-time code app).
• Why: so you can sign in and recover access, and so nobody else can sign in as you.

5. Test and profile before sign-up (first visit)

• While you take the test and fill in your profile before signing up, everything is stored only in this tab of your browser (sessionStorage) and is not sent to the server. It's erased when you close the tab, leave the page or press "Exit".
• When you press "Sign up", your answers and profile are sent to the server, checked, and until your email is confirmed they're kept in a closed table that only the server can access. After confirmation they're moved into your account and deleted from that table. If the email is never confirmed, they're deleted after 7 days.
• While you wait for the email, the browser you signed up in holds a one-time "waiting pass" (a cookie for 24 hours). With it, this tab signs you in by itself as soon as you confirm your email on any device. The pass is signed by the server, works only for the account created by this sign-up, and only once.

6. Profile

• What we store: name, date of birth, country and city, languages, what you're looking for, the "about me" text (up to 500 characters), interests (10 to 20 from the shared list and up to 2 of your own in each category), Instagram username (if you added it), photo (if you uploaded one), the "Hide my profile" and "Show my test scores" settings, and the date and version of the terms you accepted.
• Who can see it: only people the site shows you to: people whose matches you appear in, people you've sent a request or a "Like" to, and your connections. Nobody sees your date of birth: others only see your age. Only people you're already connected with (request accepted) see your Instagram.
• If you turn on "Hide my profile", you don't appear in new people's matches.
• You can change your date of birth no more than once every 30 days: for that we store the time of the last change.
• Profile texts (name, city, "about me", your own interests, Instagram) go through an automatic filter: they can't contain swearing or contact details (links, phone numbers, emails). This protects people from spam and scammers. The filter doesn't store anything, it just won't let such text be saved.
• Why: so people can decide whether they want to talk to you, and so matching can take country, city, age, languages and interests into account.

7. Photo

• Uploading a photo is optional.
• Before saving, the server removes all hidden information from the file (EXIF: where the photo was taken, phone model, date, etc.), shrinks the photo to 1000 pixels on its longer side and makes a small 240 by 240 pixel copy for lists.
• The photo is kept in closed storage. It can only be opened through a temporary link that the server issues for 1 hour to people the site shows your profile to. Without such a link the photo can't be opened.
• When you change or delete your photo, the old file and its copy are deleted. Files left without a profile are removed by a daily automatic clean-up.
• Only you should be in the photo, no nudity.

8. Personality test

• The test is based on the scientific "Big Five" model (the IPIP statements are in the public domain). It isn't a medical or psychological diagnosis: the result is only used for matching.
• What we store: your answers while you're taking the test (so you can continue later) and the result: scores on 5 scales from 0 to 100, the test version and the date. As soon as you finish the test, the answers are deleted and only the result remains.
• The result is calculated by the server, not the browser, so it can't be faked.
• We keep your latest result and any results from the last 30 days (you can retake the test up to 3 times in 30 days).
• Who can see it: only you see your exact scores. Other people see them only if you turn on "Show my test scores" yourself. In matches, others only see a compatibility percentage and short reasons, such as "you both like hiking".
• Personality traits are personal information, so your test result is only used for matching within the site and is never shared with third parties.

9. Matches, "Like" and "Next"

• Matches are calculated automatically by the server: personality similarity (60%) and shared interests (40%), taking country, city, age and languages into account. A ready list is kept for up to a day and then recalculated; old lists are deleted after 7 days.
• Matching only suggests people. It doesn't make decisions for you with legal or similarly serious effects: whether to write to someone is always up to you.
• "Like": the person you liked sees it and can respond. A like is kept for 30 days. You can give up to 100 likes a day.
• "Next": that person isn't shown to you for 7 days. Nobody but you sees who you skipped.

10. Connections, chats and reactions

• A request to connect and its greeting (up to 300 characters) are seen only by the person you sent it to. If they decline, you won't find out: the request simply disappears. Declined and unanswered requests are deleted 30 days after they were sent.
• A chat opens only after both people agree. Messages, replies, reactions (emoji) and "read" marks are seen only by you and the other person. Moderators don't read chats (exceptions are described under "Reports and moderation").
• Messages are kept on the server for as long as the chat exists. We don't limit how long they're kept, so chats don't disappear by themselves.
• "Clear chat" (chat menu): messages, reactions and the greeting disappear only for you; the other person keeps everything. Once both of you have cleared the chat, the messages and their reactions are deleted from the server for good. After clearing, the old messages are no longer visible to you and aren't included in "Download my data", but until the other person clears the chat too, they're still kept for them.
• If you or the other person deletes their account, the whole chat is deleted for both.
• When a new message, a "read" mark or a reaction arrives, the server sends the other person a short signal with no text and no names so the chat updates right away. Only the two participants know the channel name.
• Greetings go through the same filter as profiles (no swearing or contact details). Nobody checks or reads the text of messages.
• Blocking: the blocked person isn't told, you stop seeing each other, and the chat is hidden for both. A block stays until you remove it.

11. Reports and moderation

• You can report a person or specific messages (up to 10). A report stores the reason, your explanation (up to 1000 characters) and copies of the messages you selected. A moderator sees only the report, the person's profile and these copies. Moderators don't read the rest of the chat.
• Exception: if a blocked person appeals the block and gives permission themselves, a moderator may read only the messages written by that person, and only until the appeal is decided. Every such view is recorded in the log.
• The person who broke the rules is shown the reason and their own messages from the report. They aren't shown who reported them, your explanation or your messages.
• Penalties go in steps: a warning, a 7-day block, a 30-day block, a permanent block. After 6 months without violations, one step is removed. A moderator (a person) decides whether there was a violation, and the site calculates the step according to the rules.
• If several people reported you but the moderator found no violation, you may see a gentle reminder. It doesn't count as a step.
• While a block is in effect, the blocked account can't do anything on the site and is hidden from others.
• Moderators sign in only with two-factor protection. All their actions are recorded in a log.

12. Security and technical data

• To protect against password guessing, spam and bots, we count attempts to sign in, sign up and do other actions. For this we don't store your IP address or email, only their encrypted fingerprint (HMAC), and we delete it within a day.
• Sign-up, sign-in and email requests are protected by Cloudflare Turnstile (an "I'm not a robot" check). For the check, Cloudflare receives your IP address and technical details about your browser.
• Error log: if something breaks on a page or on the server, the site records the error text, the page (without numbers or parameters), device type, browser, operating system, site language, whether you were signed in, and the site version. Emails, phone numbers, links with parameters, account numbers and IP addresses are cut out of the text before it's saved; to count how many people an error affected, we only keep a "daily fingerprint" (see "Visit statistics"). Only moderators can see the log. Our providers (Supabase, Vercel) briefly keep IP addresses and request times in their technical logs.
• All connections to the site are encrypted (HTTPS). The database itself checks access rights for every record (Row Level Security): even if the site's code had a bug, one person couldn't read another person's data. Secret keys are kept only on the server.

13. Visit statistics

• We count how many people visit the site and which pages they open, to understand what works and what doesn't. This uses no cookies, no third-party services and no ad tags, and we don't follow you on other sites.
• When a page opens we record: the page address without numbers or parameters, the domain of the site you came from (for example instagram.com, without the page address), campaign tags from the link (utm_source, utm_medium, utm_campaign), country (from the IP address; the address itself isn't stored), device type, browser, operating system, site language and whether you're signed in. During the first visit we also note the steps "started the test", "finished the test" and "reached sign-up".
• Visitors are told apart by a "daily fingerprint": an encrypted fingerprint (HMAC) of the IP address and browser with a secret that changes every day and is then deleted. So your visits on different days can't be linked, and the IP address can't be recovered from the fingerprint.
• If you're signed in, we note the days you visited the site (to count how many people use the site and come back) and the dates of your first steps: first like, first request, first friend, first message (not with whom). This only shows up in overall numbers.
• Only moderators see the statistics, and only as overall numbers (how many, from where, on which devices), without names. Visits by moderators and robots aren't counted.

14. Report a problem

• You can write to us via "Report a problem" (at the bottom of the site and in settings). We keep the topic and text of the message, the page you came from, device type, browser, operating system, screen size, site language and site version. If you're signed in, the message is linked to your account and the moderator's reply appears on the same page. If not, you can leave an email: it's only used to reply to that message.
• For guests the form is protected by Cloudflare Turnstile. Only moderators see the messages. Replies and closing messages are recorded in the moderation log.

15. Cookies and browser storage

• Sign-in (cookies whose names start with sb-): to keep you signed in. They last 90 days and are renewed on every visit. If you uncheck "Remember me", sign-in lasts until you close the browser (then the srodni_session_only marker is also set).
• srodni_lang: the site language you chose, 1 year. srodni_theme: the theme you chose (light or dark), 1 year.
• Short-lived technical cookies: for signing in from an email link (while you sign in), srodni_pw_reset (changing your password from an email link, 15 minutes), srodni_signup_wait (waiting pass after sign-up, 24 hours), srodni_banned (block page, 30 minutes).
• Tab storage (sessionStorage): test answers and profile during the first visit, before sign-up.
• None of our cookies can be read by scripts on the page (HttpOnly), and they're only sent over a secure connection. There are no advertising, analytics or tracking cookies, so no cookie consent banner is needed.
• Visit statistics and the error log work without cookies and without browser storage.

16. Who else processes data

• Supabase Inc. (USA): database, account sign-in, photo storage, instant chat signals and emails (email confirmation and password reset). Data is stored on servers in the European Union (Frankfurt, Germany).
• Vercel Inc. (USA): runs the site. The server side runs in Frankfurt (Germany); pages may be delivered through Vercel servers close to you.
• Cloudflare Inc. (USA): "I'm not a robot" check (Turnstile).
• Have I Been Pwned: checking passwords against leaks (only 5 characters of the password's fingerprint).

These companies process data only on our behalf and under their data processing agreements. If data may reach the USA, it's transferred on the basis of the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework used by these companies. We don't share or sell data to anyone else. We disclose data to public authorities only when the law requires it, and only to the extent required. When the site gets its own email service, this list will be updated.

17. Legal basis

• Account, profile, matching, connections and chats: performance of our agreement with you (the terms of use). The site can't work without this data.
• Personality test, photo, "about me" text, Instagram: your consent. You can withdraw it at any time: delete the photo and texts in your profile or delete your account.
• Protection against hacking, spam and scammers, moderation, keeping the email fingerprint of blocked users: legitimate interest, meaning the safety of all users.
• Responding to lawful requests from public authorities: legal obligation.
• Error log and visit statistics: legitimate interest, that is, keeping the site working without errors and improving it. "Report a problem" messages: your request (contract) and legitimate interest.

We comply with the Law on Personal Data Protection of the Republic of Serbia (Zakon o zaštiti podataka o ličnosti, ZZPL) and, for users in the European Union, also with the EU General Data Protection Regulation (GDPR).

18. How long we keep data

• Account, profile, test result, connections and your blocks: as long as the account exists.
• Chats: as long as the chat exists (see "Clear chat" above) and both participants' accounts exist.
• Unconfirmed account and first-visit data: 7 days.
• Test answers: until the test is finished. Results: the latest one and those from the last 30 days.
• "Like": 30 days. "Next": 7 days. Match lists: up to 7 days.
• Unanswered and declined requests: 30 days.
• Attempt counters (IP address and email fingerprints): up to a day.
• Reports: up to 1 year. Penalty steps: up to 2 years (except a permanent block while it's in effect). Gentle reminders: 1 year. Moderator action log: 2 years.
• A moderator block: while it's in effect and for 1 more year after it ends or is lifted. For the same period we keep an encrypted fingerprint of the email (not the address itself), so the person can't come straight back with the same email, even after deleting the account.
• Database backups (if Supabase has them enabled) are kept for a limited time, after which deleted data disappears from them too.
• Error log: 30 days after the error last occurred.
• Detailed visit records and the days you visited: 30 days. After that only daily totals without people remain (how many visitors, from where, on which devices). The "daily fingerprint" secret is deleted after a day.
• Dates of first steps (for statistics): as long as the account exists.
• "Report a problem" messages: 6 months after a reply or closing (or after sending, if there was no reply).

19. Deleting your account

• Settings → "Delete account": you need to enter your password and the word DELETE. Deletion happens immediately and permanently; the account can't be restored.
• What's deleted: the account, profile, photo (both copies), interests, test, likes and skips, requests, all your chats in full (for the other people too), reactions and your blocks.
• What remains, no longer linked to your account: reports you sent (up to 1 year). If the account was blocked by a moderator, what's described under "How long we keep data" is kept.
• Your "Report a problem" messages, visit days and first-step dates are deleted too.

20. Your rights

• Find out what data we hold about you and get a copy: "Download my data" at the bottom of the settings. It's a JSON file with your account, profile, interests, test, connections, messages, reactions, blocks, reports, likes and skips, and a link to your photo (valid for 1 hour). Moderation data (warnings, copies of messages from reports about you) can for now be requested at [EMAIL FOR DATA QUESTIONS: will be added before launch].
• The file also includes your "Report a problem" messages with replies and the days you visited the site (for the last 30 days).
• Correct your data: in your profile (date of birth once every 30 days). If you can't correct something yourself, write to us.
• Delete your data: the photo, profile texts, chats ("Clear chat") or the whole account.
• Restrict processing: "Hide my profile", and you stop appearing in matches.
• Data portability: the "Download my data" file is machine-readable and suitable for transfer.
• Object to processing or withdraw consent: write to [EMAIL FOR DATA QUESTIONS: will be added before launch] or delete the relevant data yourself.
• Lodge a complaint with the supervisory authority: the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11120 Beograd, www.poverenik.rs). If you live in the European Union, you can also contact the data protection authority in your country.

21. If there's a data breach

If a data breach happens that could harm users, we'll notify the Commissioner for Personal Data Protection within 72 hours and, without delay, the people it affects: what happened, which data was affected and what to do.

22. Changes to this policy

We may update this policy when the site changes. The date of the current edition is shown at the top of the page. We'll announce important changes on the site in advance, and if a change requires your consent, we'll ask for it separately.