Your privacy
Privacy Policy
Last updated: September 26, 2026
LoverMD is designed for two partners to explore private questions independently. This policy explains what the operator of LoverMD processes when you use the service and the choices available to you.
1. Information we process
You can create an account without giving us an email address, phone number, legal name, or password. We process the optional display name you provide, confirmation that you are at least 18, and a pseudonymous account identifier.
To provide the service, we also process your question answers, custom questions, weekly pulse ratings, pairing and membership records, mutual matches, favorites, match-view status, and the dates associated with those actions.
We process essential technical information such as session records, expiration and activity times, rate-limit records, and a protected representation of an IP address for abuse prevention. For first-party analytics we count public-page HTML loads by day and page, and record limited events: home-page visits, account creation, pairing-code creation, successful pairing, answer submission, and weekly pulse submission. Events contain their type and time, not answer values, question details, ratings, pairing codes, IP addresses, or browser fingerprints. We do not use advertising cookies or third-party analytics in the application. Only the service operator can view aggregate analytics totals on a restricted dashboard; they are not shared with your partner.
2. Analytics visitor IDs
For visitors without a session, we use a random, HTTP-only, first-party visitor cookie that expires after 24 hours. Home-page visit events are associated with this ID. If you create an account in that browser, home-page visits from its recent anonymous session are associated with your account to measure the signup funnel. After account creation, authenticated events are associated with your account across devices. Signing in with a recovery key does not attach earlier anonymous visits to that account. We clear the visitor cookie on account creation, recovery, sign-out, and account deletion; a later anonymous visit can receive a new ID. We do not derive this ID from your IP or browser characteristics and do not use it to authenticate you.
3. Recovery keys and sessions
LoverMD generates a random recovery key and displays it to you. The server stores a one-way protected version, not the readable key. To let you view the current key from Settings, the readable key is also saved in local storage on the browser where you create or recover the account. It stays covered until you choose to reveal it, is hidden again automatically, and is cleared when you sign out through the application. It is not synchronized to other browsers.
Your browser also receives an essential, HTTP-only session cookie so you can stay signed in. The cookie and local key storage are not used for advertising. Anyone with access to your unlocked profile, browser storage, or recovery key may be able to access your account. Keep a separate copy in a password manager or another private place. We cannot retrieve a lost recovery key for you.
4. How private matching works
Your partner does not receive your individual question answer through the normal product experience. A question becomes a shared match only when both partners select “Maybe” or “I’d like this.” Weekly pulse ratings work differently: each person’s ratings remain hidden until both partners submit for that week, after which both sets of ratings are shown to the couple. Your partner can also see your display name, questions either of you adds for the couple, and your shared matches. Ending a match or pairing may make previous shared information unavailable.
5. How we use information
- Provide accounts, recovery, pairing, questions, and matching.
- Remember your preferences, favorites, viewed matches, and weekly pulses.
- Prevent abuse, investigate failures, and secure the service.
- Maintain, troubleshoot, and improve service reliability.
- Measure page traffic, signup and pairing funnels, and feature usage.
- Comply with legal obligations and protect people’s rights.
6. When information is shared
We do not sell your personal information. We share information only with your paired partner as described above, with infrastructure providers that host or support the service, when required by law, or when necessary to protect the service, its users, or others.
If operation of the service is transferred as part of a merger, financing, reorganization, or sale, information may transfer with it, subject to applicable law and this policy.
7. Retention and deletion
Active account data is retained while needed to provide the service. Expired sessions, pairing codes, and rate-limit records are removed on a rolling basis. Data associated with an ended pairing is scheduled for cleanup after the retention period configured by the service operator, which is 30 days by default.
You can export your account data or delete your account from Settings. Deletion revokes sessions, removes your answers, weekly pulse ratings, and favorites, deletes custom questions you created, and de-identifies the remaining account record. Copies may remain temporarily in encrypted backups until those backups expire. Anonymous analytics events are removed after 7 days, account-linked events after 30 days, and daily page counts after 90 days. Your account data export includes account-linked analytics events, and deletion removes them. Anonymous events that were not linked to your account cannot be located by account ID; aggregate page counts do not identify an account.
8. Security
We use measures intended to protect your information, including one-way protection for recovery and session credentials, restricted session cookies, access controls, rate limiting, and encrypted backups. No service can guarantee absolute security. Use a trusted device, protect your recovery key, and sign out of devices you no longer control.
9. Your choices and rights
You can update or remove your display name, rotate your recovery key, sign out other sessions, end a pairing, export your data, or delete your account from within LoverMD. Depending on where you live, you may also have legal rights to access, correct, delete, restrict, or object to certain processing.
10. Adults only
LoverMD is intended only for adults age 18 or older. We do not knowingly collect information from anyone under 18. Accounts found to belong to a minor may be removed.
11. Changes to this policy
We may update this policy as the service changes. The date at the top will identify the latest version. Material changes may also be announced within the service where practical.