Privacy Policy
Effective date: September 27, 2026
This Privacy Policy explains what Jaydslist collects, why, and who we share it with. It's part of our Terms of Use — by using the Service, you agree to both. Jaydslist is built to minimize what we collect and share in the first place: we don't run ads, we don't sell data, and we don't use third-party ad or analytics trackers.
1. What We Collect
- Account info: your email address and password (stored as a salted hash, never in plain text).
- Beta waitlist email: if you ask for beta updates, we store your email address and the record that you confirmed that request. We use it only for beta and launch updates unless you ask us to stop.
- Phone number: sent to Twilio for number validation, line-type checks, and verification. The app temporarily stores the pending number during verification, then retains a peppered hash for duplicate-number checks and an encrypted copy for contact exchange. Phone storage is not hash-only.
- Location: your device's coordinates (via your browser's location permission), used only to compute an approximate distance and a fuzzy area label (like “NE Phoenix area”) for other users. Your precise coordinates are stored server-side and are not exposed to other users. Your own settings may return your own location to your browser.
- Profile info: identity and physical-type selections, age, and any preferences you set.
- Content: listings, messages, and photos you submit. Photos are stored via Cloudflare Images; message and listing text is stored in our database.
- Usage and device data: IP address, browser/device type, and basic activity logs, used for security, abuse prevention, and debugging.
2. How We Use It
- To operate core features — matching, messaging, distance labels, and moderation;
- To verify access to a phone number and check whether that number is already associated with another account;
- To detect and act on abuse, spam, and policy violations;
- To send account-related notifications (e.g. a new message, a moderation action on your account); and
- To send requested beta and launch updates after you confirm your email address.
We do not use your data for interest-based or third-party advertising, because we don't run ads.
3. Who Else We Share Data With
We use infrastructure providers to run the Service. They process the information needed for the features they provide, subject to their own service terms and privacy practices:
- Cloudflare — hosting, database, and photo storage/delivery.
- Amazon Web Services (Rekognition) — automated screening of uploaded photos for nudity and sexually explicit content, processed in the Oregon region (us-west-2).
- Twilio — phone number verification and carrier/VoIP lookup.
- Amazon Web Services (Amazon Simple Email Service, or SES) — delivery of account, message, moderation, and requested beta emails. SES receives the recipient's email address and each email's sender address, subject, and body to deliver it.
- DBBL Protocol — cross-platform reputation lookups and administrative ban reports, as described below.
Email notifications
We use Amazon SES to send password-reset links, notifications about new messages and moderation actions, and beta confirmation or updates you requested. A new-message email can include the sender's alias, the listing title, and a short preview of the message (up to 150 characters). The email subject, body, links, and recipient address are sent to SES for delivery. See AWS's SES data-protection documentation for information about that service.
Photo screening and consent
Uploaded photo bytes are sent to Amazon Rekognition for automated analysis before storage. We store a classification of safe, sexually explicit, or uncertain to enforce each recipient’s photo preference. Receiving nude or sexually explicit photos is off by default and can be changed in profile preferences. Uncertain photos cannot be shared until successfully screened. Automated screening can make mistakes; it does not guarantee that every unwanted photo will be detected. Photos already viewed or saved by another person cannot be recalled.
DBBL reputation checks and reporting
This instance participates in the DBBL Protocol. During phone verification and before opening a new conversation, the app sends SHA-256 hashes of the normalized phone number and the normalized email address to DBBL. These hashes are not peppered and can be matched across participating services; they are linkable identifiers, not anonymous data. The integration does not send the raw phone number or email address in these requests.
We store returned reputation scores, ratings, confidence, and the check time. A `restricted` or `blacklisted` rating can prevent phone verification or opening a new conversation. A failed remote lookup generally allows the request to continue, but a stored restricted rating can still prevent a new conversation.
When an administrator bans an account through the reporting workflow, the app may send DBBL the phone and email hashes, a violation category, and severity. This may contribute to that account's reputation across participating services. A reputation result is not proof of identity, age, or safety. Contact the operator at legal@jaydslist.com with questions about this instance's checks or moderation decisions.
We may also disclose information if required by law, subpoena, or valid legal process, or where necessary to investigate fraud, abuse, or a safety threat, or to enforce these policies. We do not sell your personal information to anyone, for any purpose.
4. What Other Users See
Other users do not see your exact location. Phone numbers and email addresses are private unless shared through a mutually approved contact exchange. They see your listing content, your fuzzy location label, an approximate distance, and your trust tier. Your verified phone number and email are only revealed to another user if you both explicitly agree through the contact exchange feature, and a revoked exchange hides that information in the app. Revocation cannot erase information the recipient has already seen or copied.
5. Data Retention and Deletion
We keep your data while your account is active. The app does not currently provide self-service account deletion. Contact the operator to request removal; there is no automatic deletion or retention schedule implemented in the app. When handling a removal request:
- when a listing expires or is removed, its text and details remain available to the owner and people who already have a conversation about it. The app retains the listing record rather than a frozen snapshot, so edits made before removal can change what those people see. The archived view does not show listing photos;
- we may retain data we're required to keep for legal, security, or fraud-prevention purposes; and
- backup copies may persist for a limited period before being purged.
6. Security
We use industry-standard measures (encryption in transit, hashed passwords, peppered phone hashes, encrypted phone numbers, access controls) to protect your data, but no online service is completely secure. Please use a strong, unique password and keep your account credentials confidential.
7. Children's Privacy
The Service is strictly for adults 18 and older. We do not knowingly collect data from anyone under 18. If we learn an account belongs to a minor, we will terminate it and delete associated data. If you believe a minor is using the Service, contact us immediately at legal@jaydslist.com.
8. Your Rights
Depending on where you live (including California), you may have the right to know what personal information we hold about you, request a copy of it, request deletion, or correct inaccuracies. We don't sell personal information, so there's no “opt out of sale” action needed. To exercise any of these rights, email legal@jaydslist.com from the address associated with your account so we can verify the request.
9. Cookies
We use authentication cookies to keep you signed in. Browser local storage remembers your color-mode override. Browse filters and view preferences are saved with your account. We don't use third-party advertising or analytics cookies.
10. International Use
The Service is operated in and intended for users in the United States, and your data is stored and processed there. If you access the Service from elsewhere, you do so at your own risk and consent to your data being transferred to and processed in the United States.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after a change is posted means you accept the update. We'll update the effective date above whenever we do.
12. Contact
Questions or requests regarding this Privacy Policy? Reach us at legal@jaydslist.com.