Privacy notice
Last updated 20 October 2026
The short version
- We only collect what's needed to run the game.
- We never sell your details or use them for marketing.
- Contact details are only shared when both people say yes to a match.
- You can delete your account and game at any time.
Who we are
Not Just a Pretty Face (notjustaprettyface.uk) is run by Rene Mallett, based in the UK. Rene is the "data controller" for the personal information described here, and is registered with the Information Commissioner's Office (ICO) under registration number ZC278447. If you have any questions or want to use your rights, email hello@notjustaprettyface.uk.
What we collect
If you make a game (a "creator")
- Your email address and password (the password is stored scrambled, so nobody can read it).
- What you put in your game: first name, age, town or area, photo, questions, answers, date ideas and messages. This is shown publicly to anyone with your game link.
- Your contact for matches (for example an Instagram handle). This is kept private and only shown to a player you choose to meet.
If you play a game
- Anonymous play stats: how far you got and whether you won. These aren't linked to you.
- If you win and choose to send your details: your first name, email, the contact you'd like to share, the date idea you picked and any note. Your email is never shown to the creator. It's only used to tell you their answer.
If you send a report
- The reason, any details you add, and your email if you choose to give it.
Everyone
- Anonymous visitor numbers (pages viewed, rough country, device type) through Vercel Web Analytics. It doesn't use cookies and doesn't identify you.
- A bot check on the sign-up and log-in forms (Cloudflare Turnstile). This looks at technical signals from your browser to tell people from bots.
We don't use advertising or tracking cookies. The only thing stored in your browser is what keeps you logged in.
Why we use it (and our legal basis)
- To run the service you asked for: your account, your game, sending winners to creators and sending match or "not this time" emails. Legal basis: providing the service you signed up to (contract).
- To keep people safe: checking photos, dealing with reports, removing games that break the rules and blocking bots. Legal basis: our legitimate interest in keeping the game safe and lawful.
- To understand how the site is used: anonymous visitor numbers and play stats. Legal basis: legitimate interests.
- Account emails: confirming your email and resetting your password. We don't send newsletters or marketing.
Photo checks
When you upload a photo, it's automatically checked by OpenAI's moderation tool for explicit, violent or self-harm content. If it fails, it's deleted straight away and isn't used. OpenAI's moderation tool is used only for this check. We also look over new games by hand to catch things an automatic check can't, like someone using another person's photo.
Who we share it with
We never sell your information. We use these services to run the site, and they only process it on our instructions:
| Service | What for |
|---|---|
| Supabase | Database, log-ins and photo storage |
| Vercel | Hosting the website and anonymous visitor stats |
| Brevo | Sending emails (account, winner and match emails) |
| Cloudflare | Domain, email forwarding and the bot check |
| OpenAI | Automatic photo check |
Some of these companies are based in, or use servers in, the USA or the EU. Where information leaves the UK, it's protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.
Between users: a creator sees a winner's first name, chosen date idea and note. Contact details are only swapped if the creator says "I'd like to meet". We may also share information with the police or other authorities if the law requires it or someone is at risk of harm.
How long we keep it
- Your account and game: until you delete them. "Delete my account" removes your account, game, photos, play stats and winners straight away.
- Winner details: if the creator hasn't decided within 14 days, it's automatically a "not this time". Winner details are deleted 6 months after the decision.
- Reports: kept for up to 12 months, so we can spot repeat problems, then deleted.
- Emails to hello@: kept only as long as needed to deal with them.
Your rights
Under UK data protection law you can ask to:
- see the information we hold about you
- correct it
- delete it
- object to or limit how we use it
- get a copy to take elsewhere
Creators can edit or delete everything themselves in the builder. For anything else, email hello@notjustaprettyface.uk and we'll reply within one month.
If you're unhappy with how we've handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
18+ only
Not Just a Pretty Face is only for people aged 18 or over. If we find out a game belongs to someone under 18, we'll remove it and delete their information.
Changes
If we change this notice, we'll update the date at the top. If it's a big change, we'll email creators.