Website privacy.

1. Scope and operator

This notice covers bothapp.co.uk, its www address and the hosted BOTH website preview. It does not cover an active dating service. Accounts, matchmaking, messaging, payments and email signup are not available on this website.

The operator is based in the United Kingdom. Its legal name, public address and working privacy contact are still to be added. The operator is responsible for the personal data processed to run this site. This notice remains a draft while those details and the items marked below are incomplete.

2. Information used by this website

When you visit

The hosting and security services process technical request data, which can include your IP address, browser and device information, requested pages, request times, referring page information where your browser sends it, and security-cookie identifiers. They use this information to deliver pages, handle errors and protect the website.

The website code does not add advertising pixels, audience analytics, social-media embeds or cross-site behavioural advertising. It does not ask your browser for precise location, camera or microphone access. Essential hosting/security cookies are explained in the cookie notice.

When you try Both sides

Your two answers exist only in this page’s temporary memory. They are not sent to BOTH, saved in cookies or browser storage, placed in the page address, or used to create a dating profile. Reset or reload the page to clear the preview. The guidance is fixed text: it does not use AI to analyse your answers.

Browser extensions and browser-level features are controlled by you and their providers, rather than this website. Avoid entering other people’s personal information in the preview.

Email, messages and profiles

Email collection is closed, including the website’s signup endpoint. No waitlist emails are sent by the current website. There is no public upload, messaging or account-registration feature. Descriptions of optional profile fields refer to the app in development; those answers are not collected here.

3. Purposes and legal bases

For processing governed by UK or EU GDPR, the intended basis for necessary page delivery, service reliability and abuse prevention is legitimate interests: providing a working, secure website while limiting the data used. This is not consent to advertising. A documented assessment of those interests, necessity and effects on visitors remains to be completed by the operator.

If information must be retained or disclosed to meet a specific legal duty, the relevant basis is compliance with that legal obligation. A legal demand would need to be assessed before disclosure.

No marketing-consent basis is currently being used because signup is closed. The operator must assess a valid local basis for current hosting and security processing wherever local law already applies. Any future signup or new purpose needs its own assessment and any required separate consent. Reading this notice is not consent to unrelated processing.

This website does not make automated decisions about dating compatibility, eligibility or other matters producing legal or similarly significant effects.

4. Providers and international processing

The website is hosted through OpenAI’s ChatGPT Sites service and Cloudflare infrastructure. They receive technical data to host, operate and secure the website. There is no advertising recipient configured by BOTH.

Hosting uses international infrastructure. Information may be processed outside your country, including in the United States. A UK-only or EU-only storage location is not promised.

OpenAI’s published Sites data-processing terms describe its processor role for hosted visitor data and contractual transfer protections. The operator still needs to confirm the agreement applying to its account, the processing locations, the relevant local transfer conditions and any required assessment. The safeguards are not a substitute for that review.

[To be added: confirmed account agreement, processing countries, log-retention details and a working route to request transfer-safeguard information]

Provider information: OpenAI Sites data-processing terms, OpenAI service-provider list and Cloudflare privacy information. Their separate services and independently determined processing are covered by their own notices.

5. How long information is kept

The local writing preview is temporary and is not retained by BOTH. The Cloudflare security cookie listed in our cookie notice expires after 30 minutes of inactivity. That browser-cookie expiry is not a deletion deadline for server logs.

Technical logs and infrastructure backups are subject to the hosting providers’ schedules and applicable legal/security requirements. A verified schedule for this site has not yet been supplied. It needs to identify each data category, the necessary retention period or criteria, access restrictions and deletion arrangements.

[To be added: verified technical-log and backup retention schedule]

The current website is not accepting waitlist submissions. Before signup opens, this notice will set out the email provider, consent and withdrawal process, and a deletion schedule supported by the actual service.

6. Your rights and choices

Depending on the law that applies, you may have rights to access information, obtain a copy, correct it, request erasure, restrict or object to processing, withdraw consent where it is used, and complain to a privacy authority. These rights have conditions and exceptions. See regional privacy rights for more detail.

For UK/EU processing based on legitimate interests, you may object for reasons relating to your situation. The right to object to direct marketing is unconditional when direct marketing is carried out.

[To be added: monitored privacy contact for rights requests and complaints]

A request channel has not yet been set up. No request can be submitted through this page. Once it is available, only information reasonably needed to identify the relevant records and verify the request should be requested; the website has no identity-document upload facility.

BOTH has no configured sale of personal information, targeted-advertising or cross-context sharing function on this preview. There is therefore no such activity for a Global Privacy Control signal to switch off. The site does not change its essential hosting/security processing in response to legacy Do Not Track signals. No third-party advertising code is configured to track visitors across other websites.

You can reset the writing preview and manage cookies in your browser. Blocking a security cookie may affect access. Cookie choices do not delete technical logs that have already been generated.

7. Children and the future app

BOTH is being developed for adults aged 18 and over. This informational website has no age-verification system, and the public pages can be viewed without an account. An 18+ label does not establish a visitor’s age.

Before account creation, sensitive profile information, identity checks, matching, messaging, payments or marketing are introduced, the app will need its own notices, consent choices, safety controls and country-specific review. This website notice does not authorise those future activities.

8. Changes to this notice

The date at the top identifies this version. Material changes to data collection or purposes will require an updated notice and, where necessary, a new choice before the new processing begins. Continued browsing will not be treated as consent to a new optional purpose.