• It works in both directions from one decision. Neither of you appears in the other’s list again while it stands. You do not have to hope they block you back.
• It takes effect at once, and any conversation between you closes to new messages on both sides.
• Nothing already said is deleted. A report is judged on what was actually written, and erasing the thread would only ever help the person who wrote the thing you are reporting.
• They are not told. Not when you block, and not if you undo it.
• Undoing it is one button on your blocked list. There is no waiting period, because making the reversal cost more than the original choice is a penalty and we do not build those.

One honest limit, stated because it is real: photographs are served from an unguessable address that is rotated when an account changes — when a photo is deleted, a rescan fails, or an account is paused, banned or deleted. Blocking one person does not rotate it, because doing that would break the address for everybody else over a decision that has nothing to do with them. So somebody who already saved a link to one of your photos can still load that image until the next rotation. Deleting the photo ends it immediately.

What happens to it

• A report about somebody underage, or about violence or a threat, goes to the top of the queue automatically — by the software, when the report is filed, rather than by somebody noticing later.
• The person you report is not told that you reported them, and is never shown what you wrote.
• Your messages with them are already stored and a moderator can read them, so you do not have to retype anything you did not want to type once.
• There is an appeal, whichever side of a decision you are on, and it is read by a person rather than by a form that closes itself.

Every photograph is scanned automatically before it is visible to anyone, and it becomes visible only on a clean result. Anything else — a match, an unclear answer, a scanner that cannot be reached, or no scanner configured at all — refuses the photo and leaves it invisible. There is no “show it now and review it later” mode, and there is no way to switch one on: the refusal is the default the software falls back to rather than a setting.

Nothing that is not a picture survives the upload. Photographs are decoded to pixels and re-encoded from scratch, so the GPS coordinates, the camera serial, the timestamps and every other container of metadata are gone by construction rather than by a list of tags we remembered to strip. A file we cannot re-encode is refused before it is stored, rather than kept so that we can explain why we will not show it.

Photo verification — a live selfie pose, checked against the profile photographs, with a badge on the profile — is not built yet. It is written down as something this product should have, and until it exists there is no badge and nobody should read anything into its absence.

And the ones we would add

• Nobody you met here needs your money. A request for money, for a card number, for cryptocurrency, for a gift card, for help moving funds, or for an investment tip is the single most common way people are hurt on dating services, and it does not stop being that because the story is a good one. If it happens, stop replying and report it.
• Be wary of anyone in a hurry to move you off the product. A conversation that moves to another app in the first few messages moves somewhere nobody can be reported, nothing is stored, and no moderator can read what was said.
• Video before you travel. A short video call costs nothing and settles the one question a profile cannot.
• Anything you send can be kept. That is true of a photograph, of a message, and of your chart. We cannot prevent a screenshot and we are not going to claim we can — see below.
• Trust the flinch. You do not owe anybody an explanation for blocking them, and blocking them does not tell them anything.

• It is mutual, and it is per conversation. One of you asks, the other agrees, and only then does either of you see a single row. Agreeing with one match reveals nothing to any other match, and there is no global setting that opens your answers to everybody.
• Every read is logged with a name on it. If the log cannot be written, the chart is not shown — the read fails rather than happening unrecorded. Who opened your chart, and when, comes out in your data export.
• Either of you can close it at any time, which ends future access.
• What somebody already saw cannot be un-seen, and anything you reveal can be screenshotted. There is no technical measure that prevents that on any platform, from anyone, and a promise otherwise would be a lie. Roll out the chart to people you are willing to have know these things.

Other members see your display name, your age, your photographs, your bio, the city you are in, and how far away you are rounded to the nearest kilometre. They do not see your date of birth, your email address, your coordinates, your filters, your dealbreakers, or any answer you have given — unless you have both agreed to roll out the chart.

Your location is stored as a coordinate so that the radius filter can measure from where you actually are. It is never shown to another member and never sent to a browser. Distance is shown rounded, which is coarse and is not the same thing as being unguessable; do not treat a kilometre figure as if it hid your address.

The fastest route to a human about a specific account is the report form, because it arrives attached to the account and to the conversation. For anything else — a question about your data, a complaint about a decision, a legal request — the address is [ contact route not established: LAUNCH-CHECKLIST item 8 ].

This page is written to satisfy the online-dating safety notification requirements of New York (General Business Law § 394-cc), New Jersey (the Internet Dating Safety Act, N.J.S.A. 56:8-168 and following), Texas (Business & Commerce Code chapter 106) and Illinois (815 ILCS 518), and it is a draft that has not yet been reviewed by a lawyer. New York in particular requires the notification to be given when a member registers as well as through a link on the first page of the site. Both halves are in place: this page, and the same three statements on the signup screen itself.