Privacy policy

For many members of queer, leather and kink clubs, a leak could out them. So Colors is built to hold as little as it can, show it to as few people as it can, and log who looks.

The short version

• We never sell data. There are no ad pixels or trackers anywhere in Colors, including club websites.
• We never store anyone's location. Phone check-in sends only “inside: yes”.
• Members are known by their scene name. Legal names are encrypted and opened only by officers who need them, and every opening is logged where the member can see it.
• Each club's data is kept separate. Clubs never see each other's members, reports or bans.
• You can download your data and ask for it to be deleted.

Who decides about your data

Your club is in charge of its members' data (in legal terms, the data controller). It decides what to ask for and which officers can see what. Colors keeps that data and processes it only to run the service for the club (the processor). For your sign-in email, and for running Colors itself, Colors is responsible.

What Colors holds

• Your sign-in email. Used to send sign-in links and the club's messages to you.
• Your scene name and any profile details you choose to show. Directory listing, photo and profile fields start switched off.
• Legal name, address and date of birth, if your club asks for them. They're encrypted with a key that belongs to your club alone. Only roles that need them (for example the treasurer or membership chair) can open them, one person at a time, with a written reason. You can see every read on your privacy page.
• Membership and money records: tier, renewals, dues and tickets. Card numbers never reach Colors; they go to the club's payment processor.
• Events: tickets and check-ins. Venue addresses are kept apart from listings and shown only to approved ticket holders close to the event.
• Health answers, such as access needs or allergies, only if an event asks and you agree to that question on its own. They're encrypted, readable by you and the officer role the club needs for it, never used for statistics or mailing lists, and deleted 30 days after the event or when you delete them. A club that asks health questions publishes its own consumer health data policy, linked from its website and from each question.
• Meetings: recordings only after everyone present agrees, deleted once the minutes are approved unless the club chooses otherwise.
• Safety reports, seen only by the club's named safety team.
• An audit log of sensitive actions, such as who opened a legal name and why.

What Colors doesn't do

• No selling or renting of data, and no advertising.
• No location history. The phone checks the distance to the venue itself.
• No outside login service. Colors runs its own sign-in, so no other company learns which clubs you belong to.
• No sharing between clubs, including ban lists.

Who else handles data

Only the services needed to run Colors, each getting the least it needs:

• our hosting and database provider;
• the email service that delivers sign-in links and club messages;
• the payment processor your club connects, for payments you make;
• if your club turns on AI-drafted minutes, Anthropic receives the meeting transcript with legal names already removed;
• an error-reporting service, which receives scrubbed technical details and no personal data.

How long we keep it

• While your club uses Colors, or until you leave or ask for deletion.
• When a club closes its account, its data is deleted within 30 days. Backups roll off within a further 14 days.

Your choices

• Choose what other members see, and your photo preference, on your privacy page.
• Download everything Colors holds about you from My privacy.
• Ask to leave and have your data deleted from the same page. The club's membership team carries it out. Your legal identity and contact details are deleted for good; records the club must keep, like a payment it received, stay without your name on them.

Cookies

Only the ones Colors needs: staying signed in, which club you're looking at, and remembering on your device for 30 days that you confirmed you're 18 or older. No tracking cookies.

Age

Kink and leather clubs are for adults 18 and older. Youth programs are only allowed on other kinds of club, and those clubs are responsible for any consent the law requires.

Changes and contact

If this policy changes in a way that matters, we'll email each club's officers at least 30 days ahead. A contact address for privacy questions will be listed here before launch.