Privacy

What is held, and where it comes from

Almost everything on this site was typed in by the person it describes. An entry holds the fields its author filled in — age, nationality, district, languages, availability, the formats she names, her own text and the contacts she chose to publish. Photographs are uploaded by her and served from this domain rather than linked from anywhere else.

Alongside an entry the site keeps the records that make it accountable: when agreement to publish was given and when it was withdrawn, what a moderator released or hid and when, and the reports anyone has sent about it. These exist so that a decision about an entry can be traced afterwards rather than argued about.

What is not held

There is no payment data of any kind, because no payment mechanism exists anywhere on this site. Nothing is charged, held or passed on, so there are no card details, no bank details and no transaction history to store, lose or hand over.

No identity documents are collected. Nationality is a field somebody wrote about herself and is not checked against anything. The verification mark that appears on some entries covers photographs against the person in them and involves no document.

Readers

Reading the catalogue does not require an account. The site counts how often an entry is opened, and those counts are used to order the internal links between listings — they are a total per entry, not a record of who opened what.

One outside service sees your visit: Microsoft Clarity, which records how pages are used — where a cursor went, what was clicked, where a page was abandoned — and stores it under Microsoft's own terms. It is there to show what is broken, not who you are: form fields are masked and no name, message or contact is sent to it. Declining cookies on the banner stops it loading at all, and it never runs in the moderation area.

Messages you send to a person listed here go to that person directly through the contacts on her entry. They do not pass through the site, are not stored by it and cannot be read from it. A booking request sent through an entry's own dialog is recorded so that it can be delivered and, if something goes wrong, examined.

People who list themselves

An account holds what is needed to control an entry and nothing beyond it. An application to be listed keeps what was sent with it until it is decided. Administrative access to the site is logged, including failed attempts, because unexplained access to entries is the thing that needs to be detectable.

Removal

The author of an entry can withdraw it at any time, without a reason and without notice. Withdrawal takes it out of every listing at once, photographs included.

Anyone who finds their own photograph published here without having agreed to it can have it removed without holding an account — the copyright and image removal page describes that route. Reports of that kind are acted on before they are discussed, and the entry is hidden while they are looked at.

Questions about your data

Write to [email protected]. For anything urgent — a photograph published without agreement, or any suggestion of coercion — use [email protected] or the report link on the entry itself, both of which reach moderation directly rather than through a queue.