Overview
This Privacy Policy explains how Fantasi collects, uses, shares, and protects information when you use the Fantasi Service. It's part of our Terms of Service. The Service is operated by Fantasi LLC ("Fantasi," "we," "us," or "our").
Information We Collect
| Category | Examples |
|---|---|
| Account | Email address, password (stored hashed, never in plain text), full legal name, display name, date of birth, and, if you give one, a link to your LinkedIn profile, which only our team sees while reviewing your application and which is never shown on your profile |
| Identity verification | At registration, you verify your identity through our identity verification provider, Veriff, by photographing a government-issued ID and taking a live selfie in Veriff's own secure window. We do not receive or store those images. We receive and keep Veriff's result: whether you were approved, and details Veriff read from your ID, such as your name, date of birth, and document type. If Veriff does not approve your check, an administrator may view your ID and selfie images in Veriff's system to review your application by hand. You can also upload a photo of your ID and a selfie instead of, or as well as, using Veriff. We store those two images privately, and an administrator compares them before your application is approved. |
| Profile | Bio, photos (up to 6 plus an avatar), an optional intro video, how you identify, your sexual orientation (which you can hide from other members), who you're interested in, interests and preference tags, heading, "looking for," education, relationship status, smoking preference, height/weight (weight optionally hidden) |
| Photo verification | If you choose to get the Photo verified badge, a selfie of you holding a one-time code, which an administrator compares against your profile photos |
| Location | A free-text location you enter (e.g. "Baton Rouge, LA"); if you're a Black-tier member and set up geofenced privacy zones, the address you enter for each zone is geocoded to approximate coordinates so the Service can exclude nearby members from seeing your profile in Discover/Search |
| Activity | Messages you send, forum posts and comments, likes, profile views (unless you enable incognito browsing), blocks and reports you file or are named in |
| Payments | For each membership payment: the tier and length, the US dollar amount, its status and dates, and the reference of the invoice on our own payment server (BTCPay Server). We don't receive bank or card details. Your wallet address and the transaction are recorded on the public blockchain, as with any crypto payment. |
| Support & moderation | Membership tier requests, data-subject requests (access/correction/deletion/etc.) you submit, reports filed against you and their resolution |
| Technical | IP address and basic request metadata collected by standard web server/security logging (e.g. rate limiting, abuse prevention) |
How We Use Information
- To provide the Service — creating and displaying your profile, enabling messaging and forum participation, showing you other members in Discover/Search, and enforcing your own privacy choices (blurred-photo mode, incognito browsing, geofenced privacy).
- To keep the Service safe — reviewing new applications, investigating reports, enforcing blocks, and enforcing our Terms. This includes automated checks for signs of spam or scams: how quickly an account starts new conversations or sends likes, the same message sent to many members, and contact details, payment requests or links to other sites in messages. A first message can't include contact details until the other member replies. Activity that looks like spam pauses an account's ability to contact other members until a person on our team reviews it.
- To communicate with you — account, security, and (if you don't opt out where applicable) service-related emails, such as password resets and membership-request updates.
- To verify eligibility — confirming you're 18 or older and that you are the person on your ID.
We do not use your information for third-party advertising, and we do not sell your personal information.
Sharing With Third Parties
We share information only as needed to operate the Service, or when legally required:
- Payments: crypto payments are processed on Fantasi's own self-hosted server, not by a third-party payment company, so no payment processor receives your details from us. The payment itself is recorded on a public blockchain, where the transaction is visible but does not name you or Fantasi.
- Other members — your profile, photos (subject to your blur/approval settings), forum posts, and messages are visible to other members according to the visibility settings you control.
- Geocoding provider — if you use geofenced privacy (Black tier), the address you enter for a zone is sent to OpenStreetMap's Nominatim service to resolve it to coordinates. We do not send your precise real-time location, only the address text you choose to enter.
- Identity verification provider: Veriff (Veriff OÜ) checks your ID and compares it with a live selfie, including an automated comparison of your face with the photo on your ID. We send Veriff your name and email to start the check, and Veriff sends us back the result. Veriff processes the images of your ID and face on our behalf and handles them under its own privacy notice.
- Email provider — your email address is shared with our transactional email provider solely to deliver account-related emails (e.g. password resets).
- Bot protection: when you sign up, sign in or reset your password, Cloudflare Turnstile checks that the request comes from a person rather than an automated script. Cloudflare receives technical information about your browser and connection (such as your IP address) for this check only, and does not use it for advertising.
- Hosting & infrastructure providers — our database and application hosting providers process data on our behalf under standard hosting agreements; they do not use it for their own purposes.
- Law enforcement — where required by law, or to protect the safety of a member or the public (e.g. suspected exploitation of a minor, credible threat of harm).
Cookies & Local Storage
We use a small number of strictly necessary cookies to keep you signed in — a short-lived access token (15 minutes) and a longer-lived refresh token (7 days, only sent to the token-refresh endpoint), both httpOnly and SameSite=strict so they can't be read by page scripts or sent cross-site. We do not currently use advertising or third-party analytics cookies.
We also use your browser's local storage for a few purely functional, first-party purposes — none of it is shared with us or any third party, and none of it is used for tracking or advertising:
- Age gate confirmation — a flag remembering you've confirmed you're 18 or older, so the entry gate doesn't reappear on your next visit.
- Browse queue — the order of profiles you're browsing in Discover or Search, so "next" and "previous" work when you open a profile and come back.
- Chosen membership tier — briefly remembers which tier you selected on the landing page while you continue on to registration.
Data Retention
We retain your information for as long as your account is active. If you request deletion (Section 7) or an administrator removes your account for a Terms violation, your profile, photos, ID document or ID verification result, verification selfies, and associated data are permanently erased from our systems; we do not maintain a "shadow" copy of a deleted profile.
Your ID document specifically is stored separately from the rest of your profile, is never given a public URL, and can only be opened by an administrator through the admin review screen — never displayed to other members or exposed anywhere in the app's normal browsing experience.
Veriff keeps the ID and selfie images from your verification under its own privacy notice and legal obligations, separately from us. Deleting your Fantasi account does not automatically delete them from Veriff. You can ask Veriff directly, or contact us and we will pass the request on.
Your Rights & Choices
From the Privacy & Data section of your account, you can submit a request to:
- Access a copy of the personal data we hold about you
- Correct inaccurate information
- Restrict or object to certain processing
- Export your data (portability)
- Delete your account and associated data permanently
Every request is reviewed by a person, not resolved automatically; we aim to respond within 30 days. You can also directly control several privacy settings yourself at any time without filing a request: blurred-photo mode, who can message you, whether your location or last-active time is shown, and (Black tier) incognito browsing and geofenced privacy zones.
Security
Passwords are hashed (never stored in plain text) before being saved. Authentication uses signed, httpOnly session cookies rather than storing tokens in a way client-side scripts can read. The Service applies rate limiting and standard HTTP security headers to reduce common attack surfaces. No method of transmission or storage is 100% secure, and we can't guarantee absolute security — if we become aware of a breach affecting your personal information, we will notify you as required by applicable law.
Children's Privacy
The Service is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn an account belongs to someone under 18, we will terminate it and delete the associated data.
Data Location
Our infrastructure is currently operated from the United States, and your information is processed and stored there. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
Changes to this Policy
We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date above and, where required by law, provide additional notice before the change takes effect.
Contact
Questions about this Policy, or to exercise a privacy right outside the in-app flow, contact support@fulfillmyfantasi.com.