DudesChat is for adult Dudes — you have to be 18 or older to enter. We also use cookies to run the site and remember this choice; the details are in our Privacy Policy.
By entering you confirm you're 18 or older and accept our cookies and Terms.
Legal · 01
What data we collect, how we use it, and what you can do about it. The plain‑English version is up top. The fine print is below.
We aim for the highest standards with respect to your privacy. These are the general rules that govern how we operate:
Please read the fine print below to understand the full details of our privacy practices and any possible exceptions to the above.
We are committed to safeguarding the privacy of our users.
This policy applies where we are acting as a data controller with respect to the personal data of our users — that is, where we determine the purposes and means of the processing of that personal data.
We use cookies and similar storage on our website and in our app.
The DudesChat app and website incorporate privacy controls which affect how we will process your personal data. By using the privacy controls you can choose which optional communications you receive and limit the publication of your information. You can access the privacy controls in your Account settings.
In this policy, "we", "us" and "our" refer to DudesChat, a Theme Park AG brand.
In this section we have set out:
We may process data about your use of our website and services ("usage data"). The usage data may include your IP address, browser type and version, operating system, and referral source, obtained from our server and security logs. This usage data may be processed for the purposes of troubleshooting, securing the service and maintaining backups. The legal basis for this processing is our legitimate interests, namely monitoring and securing our website and services. Our page‑level site analytics is separate and cookieless — it is described under "Site analytics" below.
We may process your account data ("account data"). The account data includes your email address provided by yourself and information about your use of the service recorded by our administration team. The account data may be processed for the purpose of operating the service, providing our features, ensuring the security of the service, maintaining backups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our service and business.
We may process information included in your personal profile on DudesChat ("profile data"). The profile data provided by yourself may include your profile text, profile pictures, date of birth, physical attributes and community/interest tags. The profile data may be processed for the purposes of providing our services, enabling your use of the app and maintaining backups of our databases. The legal basis for this processing is consent. Insofar as such data can be considered "special category data" under Article 9.2 of the EU GDPR, our condition for processing is that the processing relates to personal data which are manifestly made public by you choosing to publish said data in your public profile.
We may process information contained in or relating to any communication that you send us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. The correspondence data may be processed for the purposes of communicating with you and record‑keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our service and business and communications with users.
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out‑of‑court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
We may process any of your personal data identified in this policy where necessary for the purposes of managing risks. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks. In addition to the specific purposes for which we may process your personal data set out in this section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. Please do not supply any other person's personal data to us, unless we prompt you to do so.
Your DudesChat login is a Theme Park AG account. The same sign‑in service also powers our other community, DudesNude — if you use both, one email and password can serve the two, while each product keeps its own profile and content. Nothing you do on DudesChat is published on DudesNude (or the other way round), and holding an account on one does not create a profile on the other. The sign‑in service stores your email address, your password in hashed form, and security events such as logins.
DudesChat is a location‑based service, and location is required for its distance features. We process your location to compute distance between you and other members, and we round it before storing (≈ 100m precision in urban areas, ≈ 500m precision in rural areas). Raw coordinates are never shown to other members. To stop sharing your location, disable your profile in the app menu — which hides you from everyone — or delete your account.
If you turn on notifications, we store your device's push token together with its operating system and app version, and your notification preferences. Notifications are delivered through Apple's and Google's push services. You can switch them off at any time in the app's Settings or in your device settings.
Content you provide — profile photos, album photos and videos, messages and profile text — is processed to keep the community safe. Photos and videos are scanned by an automated classifier that suggests a content rating; message and profile text is screened against a keyword list. Flagged items, and anything another member reports, are reviewed by our human moderation team, and that review can include content from private albums and private messages. Every time a moderator views a piece of content, the view is logged. The legal bases for this processing are our legitimate interests in member safety and enforcing our guidelines, and compliance with legal obligations.
DudesChat is 18+, and we verify age. Verification is run by our specialist provider: you photograph an identity document and take a selfie, and the provider compares the two — a biometric check — and confirms the result to us. We retain the outcome and an audit reference; the document and selfie images remain with the provider and are not stored on our servers, though our staff may view them at the provider while handling your verification. Because this involves biometric data, we process it under Article 9(2) GDPR, as documented in our data protection impact assessment, and we keep the audit trail for as long as the law requires.
The Health & Protection section of your profile is optional. Anything you record there is health data, which we process only with your explicit consent — given when you fill it in, and withdrawable at any time by removing the entries. It stays private unless you yourself choose to show an entry on your profile or use it in search filters.
Subscriptions are bought through Apple's App Store. We never see your card or payment details. Our subscription processor tells us only your subscription status — what you subscribed to and whether it is active — so the app can unlock what you've paid for.
If the app crashes or hits an error, technical diagnostics — device model, operating system, app version and a technical trace of what went wrong — are collected through our crash‑reporting provider so we can fix the problem. This data is used for stability only, never for advertising or profiling.
We do not sell your personal data. We share personal data with our service providers (hosting, email delivery, payment processing, age verification) only as necessary to operate the service, under written contracts that require them to protect your data and use it only on our instructions.
DudesChat is operated from Switzerland. Personal data may be processed by our service providers in the European Economic Area, Switzerland, the United Kingdom or the United States. Transfers outside the EEA are made on the basis of Standard Contractual Clauses or other recognised transfer mechanisms under GDPR.
We keep your profile data for as long as your account is active. When you delete your account, your profile is hidden immediately and the account is deactivated for 30 days, so it can be restored if you change your mind. After 30 days we permanently delete your profile, photos and videos, messages, DudesList and settings — and your sign‑in record, unless you keep a DudesNude account on the same sign‑in.
A few things are kept longer:
Under EU/UK/Swiss data protection law you have rights including: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and objection to processing. You can exercise most of these rights directly in your Account settings, or via our contact form. You also have the right to lodge a complaint with a supervisory authority — for Swiss users, that's the Federal Data Protection and Information Commissioner (FDPIC).
DudesChat is for adults only. You must be at least 18 years of age, or the age of consent in the country in which you live (whichever is older), to use DudesChat. We do not knowingly collect personal data from anyone under 18.
To understand which pages help people find DudesChat, we run our own first‑party, cookieless analytics. For each page request it records only: the page path, a timestamp, the response status, your browser and device type, the referring site's host and path, and a two‑letter country code. We likewise record when you click a link on the site (which link, and where it leads — host and path only) so we can see which calls‑to‑action work. That is all.
The analytics record contains no IP address — the country code is supplied by our CDN's edge, and the IP itself is never written into analytics. Two forms are different, and say so here: joining the waitlist and using the contact form each store your IP address alongside your submission, for abuse prevention and as evidence of consent. Beyond that, we do not store your full browser user‑agent string in analytics, and we use no identifier that could single you out or follow you across visits or other sites. No cookies, no localStorage, no third‑party or advertising trackers, no cross‑site tracking. The data is held in our own self‑hosted systems and no outside company processes it; beyond aggregate site measurement, our own team can consult it in our administration tool when operating the service. The legal basis is our legitimate interests (Art. 6(1)(f) GDPR) in measuring and improving the site; because it sets no cookies and stores no personal identifiers, it does not require consent under ePrivacy rules. Because this analytics data is non‑identifying, we retain it for as long as it is useful for understanding the site and review our retention periodically.
One exception to the never‑follows‑you rule: if you go on to create an account, we keep the referral that brought you (which page or campaign) and the country derived from your sign‑up IP as part of your account data, where our team can see them in our administration tool.
The only cookies we set are strictly necessary ones — for session and security. Your age and cookie acknowledgement is stored locally in your browser (localStorage), not in a cookie. Our site analytics is cookieless (see "Site analytics" above). We use no advertising, tracking, or analytics cookies.
We may update this policy from time to time. We will publish the new policy on this page and notify you in‑app of any material change before it takes effect.
Questions about this policy or how we handle your data: our contact form. Postal address: Theme Park AG, Zentralstrasse 43, 8003 Zurich, Switzerland.
Last revised: 2026‑08‑22