Privacy notice
Last updated: 7 November 2026
This notice describes the information kiss-n-play (“we,” “us,” or the “Platform”) may process when you browse, register, publish a profile, contact another member, submit a report, or use a payment-related feature. It is intended to explain the product’s data flows, not to promise a technical or legal practice that has not been configured. The Terms of Service and the information shown in a feature flow also apply.
1. Information we handle
Depending on the feature you use, information may include:
- Account and identity information: email address, password credential, display name, account identifiers, account status, and date of birth. Passwords are used for sign-in and should not be shared. The date-of-birth field is used to check the minimum-age requirement and is not intended for public display.
- Profile and listing information: name or display name, gender or profile attributes, country, state, city, biography answers, categories, prices, availability where supplied, and profile status. A creator chooses which supported information to provide and publish.
- Contact information: phone numbers or other contact details a creator submits. A contact number may be hidden from public visitors and revealed only through a feature when that feature is enabled. Do not assume a field is private or public; check its display and visibility controls before publishing.
- Content and communications: photographs, media, descriptions, messages, uploads, support or moderation reports, and information you choose to include in them. Images and other media may be technically processed to store, display, resize, or create a preview.
- Payment and transaction information: checkout selections, amounts and currency, payment references, status, timestamps, account identifiers involved in a transaction, and records used to verify or reconcile an authorized transfer. The documented deployment does not integrate a card acquirer. Do not send full bank credentials, card numbers, or authentication codes in a message, profile, or report.
- Technical and security information: session and age-attestation cookie values, request and security events, device or browser information available to the service, and technical records needed to protect accounts and operate the site. Exact logging and analytics practices depend on the deployment; no third-party advertising or analytics practice is asserted by this notice.
We may receive information directly from you, from another member who reports or communicates with you, from staff performing moderation or payment verification, and from technical providers that operate the Platform. If information is obtained from a third party, we use it only as permitted by law and for the purposes described here.
2. How information is used
Information may be used to:
- create and administer accounts, authenticate sign-ins, and provide requested features;
- assess the minimum-age requirement and maintain the age-attestation state used by the site;
- create, display, search, update, and moderate profiles, listings, and submitted media according to their visibility settings;
- enable member communications or a contact-reveal feature when available;
- issue payment instructions, verify transfers, maintain transaction and accounting records, and provide or revoke the related feature entitlement;
- review reports, investigate abuse, apply platform rules, and protect members, staff, and the Platform;
- detect fraud, unauthorized access, malware, spam, or service disruption;
- comply with legal obligations and respond to lawful requests; and
- maintain, troubleshoot, and improve the service.
The legal basis for each use depends on the jurisdiction and the operator’s role. It may include providing a requested service, complying with a legal obligation, protecting vital interests, or a legitimate interest that is not overridden by a person’s rights. Where consent is the required basis, it should be requested separately and may be withdrawn as the law provides. The operator must document the applicable basis before launch.
3. What is public and what is not
Only information a creator chooses to publish, together with information the Platform displays as part of the public listing, should appear on a public profile. Profile display names, location, description, selected categories, prices, and published media may be visible to anyone who can access that page. Public pages may be copied, indexed, or captured by other people; removing information from the Platform cannot remove copies already made elsewhere.
Registration does not automatically publish a listing. Date of birth, sign-in email, password credentials, private messages, reports, and payout or payment-verification records are not profile fields. A contact number may be withheld unless a configured contact-reveal feature is used. Avoid placing private or sensitive information in a profile, public caption, or public media.
Staff and service providers may access non-public information only as needed for their assigned operational, security, support, or legal tasks, subject to the controls configured for that deployment. This notice does not claim that every person or provider has a particular certification or level of access restriction.
4. Cookies and similar storage
The site uses necessary browser storage for functions such as maintaining a signed-in session, supporting request security, and remembering an age attestation. Clearing cookies may sign you out or require you to repeat an age step. A cookie-based age attestation is not a government identity check and is not represented as legally sufficient age assurance.
If a deployment adds analytics, advertising, or other non-essential storage, it must update this notice and provide any consent or control required by applicable law before that technology is used.
5. When information may be shared
We may disclose information:
- to the people and audiences you choose, through profile and content publication settings;
- to a person involved in a transaction, only as needed to provide the applicable feature and subject to its display rules;
- to hosting, storage, communications, payment, security, and other providers that process information for the Platform;
- to moderators or authorized staff investigating a report, payment, safety issue, or suspected policy violation;
- when required by law, court order, or a valid legal process, or when necessary to protect people, rights, or the Platform; or
- in connection with a reorganization or transfer of the service, subject to applicable law and appropriate safeguards.
We do not sell personal information as a stated feature of the product. The operator must verify that actual provider contracts and deployment settings match this notice. We do not authorize a service provider to use personal information for its unrelated purposes merely because it processes data for us.
6. International processing
The Platform’s first market is specified as Nigeria, but its hosting and service-provider locations are not established in the product documentation. Information may therefore be processed in a country different from where you live. The operator must identify provider locations, applicable cross-border transfer requirements, and safeguards before publication and must provide any required details for the relevant market.
7. Retention and deletion
We keep information for as long as reasonably necessary for the purposes described above, including to provide a requested feature, maintain account and transaction records, investigate abuse, preserve security, comply with law, and resolve disputes. Public content may remain visible until the creator removes it or the Platform removes it. Backups and audit records may persist for a limited period after an active record is changed or deleted.
The repository does not specify complete retention periods for accounts, messages, reports, age information, payment records, logs, or backups. The operator must set and publish periods or criteria that comply with applicable law. Deleting a profile does not necessarily erase transaction, security, dispute, or legal-compliance records that must be retained.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, withdraw consent, or complain to a privacy regulator. These rights may have exceptions, including where information must be retained by law or is needed to protect others.
Use the account controls made available in the Platform to update profile information. For requests that cannot be completed in-product, the operator must provide a monitored privacy contact and a process to verify and respond to requests. That contact is not configured in this repository and must be added before publication. Do not include passwords, full payment credentials, or intimate images in a rights request.
9. Security and incident response
We use technical and organizational measures intended to protect information, but no internet service or storage system can be guaranteed completely secure. Do not reuse passwords, share sign-in codes, or send account credentials to someone claiming to be support. If you suspect an account compromise or exposure, use an available in-product reporting route promptly.
The operator’s deployment-specific security, backup, access-control, breach-assessment, and notification practices determine what steps are taken after an incident. Where applicable law requires notice to affected people or a regulator, the operator will follow that law. This notice does not promise that a breach can always be prevented or detected immediately.
10. Children and age-restricted information
The Platform is for adults only and does not knowingly invite anyone under 18 to register or use adult features. If you believe a minor has created an account or appears in content, report it through the safety/reporting route. We may restrict access, remove content, preserve relevant records, and make any report required by law.
11. Changes and privacy contact
We may update this notice as the product, providers, or legal requirements change. The updated date appears at the top. Material changes will be communicated through an appropriate Platform notice where reasonably practicable.
Before publication, the operator must provide its full legal name, jurisdiction, service address, privacy contact, relevant supervisory authority details, and a response process. Those details cannot be inferred from the current product configuration.