What we keep about you, and why

Corameo is about the things you don't usually talk about. So you have every right to know exactly what happens to your answers. This page does not describe what sounds nice; it describes what the site actually does.

Who is responsible. Corameo is a sole proprietorship, registered with the Dutch Chamber of Commerce and based in the Netherlands. That is one person; the same person builds the site, runs the server and answers you when you ask something. You can reach him at info@corameo.com. If you need the registered address, for instance for a letter from a lawyer or a regulator, ask at that address and you will have it within a week.

This statement covers corameo.nl and corameo.com and everything behind the login. Last updated 15 August 2026.

What data we hold

Below is everything the site can keep about you. Most of it only appears once you take a further step, and some of it only if you switch it on yourself. So it is listed here in the order in which it happens, rather than all in one heap.

To begin with

When you sign up we ask for two things: the name you want to be addressed by and your e-mail address. On that same screen you can say whether you are coming alone or together, and who you would like to be found by. Those two you may skip. The site makes up a username for you and remembers which language you read in.

That really is all. No password, no phone number, no year of birth, no photo, no question about who you are or what you are looking for. You come in through a link in your mail, and that mail also holds a short code you can type in yourself.

Two things the site fills in by itself. The list exists in two versions and one of them has to be ready for you; you swap it later with a button. And we record the moment you tick the terms, because we have to be able to show that.

Once you start filling in the list

Your answers. Every answer you give, the note you type with it, your answers to the open questions, and how long you took over a question. Also what you think of your own profile picture in words, and the comments you write about it. If you later change an answer, the site also keeps the earlier version. That is needed to show how you shifted over time, but it does mean a changed answer does not disappear.

A password of your own. After three answers we ask you to choose one, so that you can always reach your own work and do not depend on a link that expires. We never keep it as text, only as an irreversible hash.

Who you are. Along the way we ask your year of birth, who you are into, what brings you here and which version of the list you fill in. And the settings you choose yourself, such as your age range and how much mail you want.

Only if you switch it on yourself

Your phone number. Needed for the part of the list about intimacy, for photos, and for inviting someone else. As long as you do not take those steps, we hold no number for you.

Photos. If you choose to add them: your face photos and the check photo with that day's pose. When they are saved, the hidden data inside the file is stripped, so the place where the photo was taken is removed. The check for a face happens on our own server; no image goes to another party.

What you do with others. Who you are linked to and how that came about, the notes you send, the anonymous conversations from the pool, the games (what you guessed about the other, what you predicted about yourself), the time capsules, talk cards, dates you propose and what you write about them afterwards. Whether you take part in the pool is your own choice.

Payment. Your membership, the amounts, its status and the references the payment provider returns to us. Your bank details and card details never reach our server: you enter those with the payment provider itself.

What the site notes by itself

When you logged in, what mail the site sent you (including its content), and, briefly, your IP address after a failed login attempt. For the automated text elements we record usage in counts, without content.

The sensitive answers

A large part of the list is about closeness, desire and intimacy, right into the personal. In law those are special category data: data that gets extra protection. We may only hold them if you give explicit consent.

We do not ask for that consent when you create your account, but at the moment you reach that part of the list. There it says in so many words what it is about and what you are saying yes to, and you can say no: that part then stays closed and nothing else about your account changes. We do it this way because consent you give weeks in advance, for something that is not yet about anything, is worth very little.

And after that you give it again for each question separately, by answering it: no question is compulsory, and every question offers “prefer not to say” as a full answer. What you don't say, we don't keep.

You can withdraw that consent at any time, by changing or clearing the answer, or by deleting your whole account. Withdrawal works from that moment on; it does not undo what happened with your consent before.

Why we use them, and on what legal basis

To deliver the service you signed up for: keeping your list, building your profile picture, letting you compare with someone, letting the two of you carry on, arranging your membership. Legal basis: the contract between you and us (Article 6(1)(b) GDPR).

With your consent for the answers about closeness and intimacy (Article 9(2)(a) GDPR), for your photos, and for the automated text elements you switch on yourself.

To keep things safe: the second step when logging in, the brake on login attempts, the quiet check on the first messages between two people that gives fake profiles away, and the nightly backup. Legal basis: our legitimate interest in protecting members against abuse and in not losing your data (Article 6(1)(f) GDPR).

Because we must: we keep the records around payments because tax law requires it (Article 6(1)(c) GDPR).

To improve the questions and the site we look at how Corameo is used in figures and patterns: how often an answer is chosen, where people stop, which screens get visited. Never as individual answers of a recognisable person. A figure only appears once at least five different people are behind it, and any breakdown that would fall below that stays empty. Legal basis: our legitimate interest in improving the service (Article 6(1)(f) GDPR).

What we do not do: advertising, selling profiles, sharing data with advertisers, or tracking you across other websites. Your e-mail address is used to reach you about your own account and about the site, never to sell you something that isn't ours.

Who can see your data

You. Everything we hold about you is on your own overview page, and you can download it as a single file.

The person you share it with. Someone you invite, or whose invitation you accept, sees your answers per part that you have both finished: not earlier, and only those parts.

The match pool does not see you. There your profile is compared anonymously across the whole list. What another person gets to see is a single overall figure, never an individual answer, and your name only once you have both said yes.

Us, to keep the site running. Corameo is built and maintained by one person, on a server under our own management. For faults, support and administration there is technical access to the data. The notes between you and the other person, and the anonymous conversations, are not shown on any administration screen.

Other parties

For a number of tasks Corameo engages service providers. For each type of provider, the data processed and the purpose are set out below.

• Hosting. The server that runs the site and the database, within the European Economic Area.
• E-mail. Delivery of our messages. Processes the recipient's address and the content of the message. Within the European Economic Area.
• Text messages. Delivery of the login code. Processes the phone number and that one code only. Within the European Economic Area.
• Payments. Handling of the membership. Processes name, e-mail address, amount and a reference to the account. Within the European Economic Area.
• Language model. The automated text elements of the site. Outside the European Economic Area; see below.
• Bot check on the sign-in screen. A check that distinguishes between a person and an automated program signing in. Processes the visitor's IP address and technical characteristics of the browser, only on the sign-in screen and only at that moment. No answers, names or e-mail addresses pass through this party. Outside the European Economic Area.

For each of these providers, data processing terms apply that form part of the agreement with that party. Those terms state that they process the data solely to carry out that one task for us, and for nothing else. No other data is shared.

If you would like to know which companies these are, you can request their names at info@corameo.com.

What goes to the language model

Some of the text on the site is produced automatically: the suggestions for a note, and the letter and portrait at the end of a part. A language model is used for that. What goes there, and what does not, is set out below.

For a suggestion only the question, the answer you chose and your language are sent. No name, no e-mail address, and nothing you typed yourself.

For the letter and the portrait more is sent: the first name as it appears on screen, your answers, the notes you added yourself, your answers to the open questions and your verdict on the profile picture. Anything answered with “prefer not to say” is left out; only the count is included.

What is never sent: e-mail address, phone number, password, photos, your notes to another member and your anonymous conversations.

Generated texts are stored and reused. A suggestion produced for a particular question and answer is stored and later offered to others as well. It contains no reference to any person: those texts are produced without anything personal in the instruction. As that collection grows, the language model is called on less often for this element.

Basis for the transfer. This processing takes place outside the European Economic Area. The standard contractual clauses approved by the European Commission apply (Implementing Decision 2021/914), forming part of the data processing terms for that service. Those terms state that the data supplied is not used to train models and is retained for no more than thirty days for the detection of misuse.

If you would rather not take part. Leave the suggestions unused and ask us not to produce a letter or portrait. For your open texts there is a switch under Correct your details: turn it on and your texts are left out when we look at which subjects come up with several people. The rest of the site works unchanged.

Apart from this processing, no data is transferred outside the European Economic Area.

How long we keep it

For as long as your account exists. Your answers, your texts, your conversations and your photos stay for as long as you keep your account. You decide when it may go, with one button on your overview page.

Everything around that has a term. Every afternoon the site clears out whatever is past it. Below is exactly what, and why.

If you do not come here for a long time. If you have not logged in for a year, we send you one friendly message asking whether you want us to keep this. One click to keep everything, one click to erase everything. If you do nothing, you lose nothing. After eighteen months of silence there is one more message, announcing that the account will be deleted a month later. Simply logging in is enough to stop that. Accounts with a running subscription are left out of this.

When you delete your account, the mail to and about you goes as well. The trail of administrative actions and the usage counts remain: there is no content and no name in those, only that something happened and when.

How we secure it

• All traffic is encrypted (HTTPS), and your browser is told it may never be otherwise, for a year, including every subdomain.
• Your password is not stored. What is stored is an irreversible hash (scrypt) with its own random piece per account, tuned so that guessing at it is slow and expensive.
• Logging in only works with the second step: a code by text message, valid for ten minutes, five attempts at most.
• After five failed attempts within a quarter of an hour the door locks for a while, per username and per IP address.
• Your session lives in a cookie that JavaScript cannot read, expires after three quarters of an hour of silence and after thirty days in any case. Change your password and every existing session ends immediately, including those on other devices.
• The site runs on one server under our own management. The database is copied every night; those copies are locked down and are removed after fourteen days.
• The pages may only load things from the site itself, may not be framed inside another site, and the site never asks for your camera, your microphone or your location.

No site can promise that nothing will ever go wrong. If something ever does go wrong with your data, you will hear it from us, and where the law requires it we report it to the Dutch Data Protection Authority.

Cookies

Three of them, all needed to make the site work. No consent is required for those, which is why you see no cookie banner here.

• vl_sid keeps you logged in. Thirty days, or less if you log out.
• vl_taal remembers which language you read in, including before you log in. One year.
• vl_device only if you tick that this device is trusted, so you can skip the text message step for a while. Thirty days, and gone as soon as you log out.

There is no measurement service, counter or advertising cookie on this site whatsoever. Our e-mail contains no tracking pixel and no read receipt: we do not measure whether you open our mail.

No computer decides about you

The site does calculate: how much your answers resemble each other, who in the pool comes close to you. That figure at most determines the order of what you get to see. The decision itself always rests with people: a link only comes about when you both say yes, and for a threesome or two couples everyone has to say yes. One no closes the door.

So there is no automated decision-making that produces legal effects for you or similarly significantly affects you, in the sense the law means. Where a machine does flag something, whether there is a face in your photo, or whether a first message looks like a scam, a person always decides what happens with it.

What you can ask for, and how

Seeing it and taking it with you. On your overview page there is a button that downloads your data as a single file: your account details, all your answers with notes, your open texts, your choices, your own notes and your feedback. It is an ordinary file that you can use elsewhere too. Since 15 August it also holds: your photos and how they were assessed, your subscription and your payments, when you logged in, the subject lines of the messages you received, the letters the site wrote about you, what the quiet signalling noted about you, which screens you opened and your own reports. If you still miss something in it, mail us and you will have it within a month.

Correcting it. You can change any answer at any time, as often as you like. Your name, your e-mail address and your language you adjust yourself under Correct your details, on your overview page; who you are looking for and your preferences sit with the questions themselves. Three things are fixed, because other things break when they change: your username (it is how you log in, and it appears in links already sent), your phone number (it is the second step when logging in, so a new number has to be confirmed first) and your year of birth (it weighs in on who you get to see). If one of those three really has to change, mail us and we will do it.

Erasing it. On your overview page you permanently erase your account and your data, yourself, with nobody in between. Gone then: your account, your answers and their history, your open texts, your links, your notes (including at the other person's end), your feedback, your games, your letters and the mail about you. What may still be around: the backups of the past few nights (fourteen days at most) and the payment records we must keep for seven years. Photos you uploaded you remove yourself from the photo page; do that before you delete your account and the files go straight away with them.

Restricting and objecting. If you think we are holding something we shouldn't, you can ask us to put its use on hold while we look into it. And you can object to anything we do on the basis of our own interest.

Withdrawing consent. For the sensitive answers, for your photos and for the automated text elements: you may change your mind, whenever you want, without explaining yourself.

You ask for all of the above at info@corameo.com. You will hear from us within a month. To prevent someone else requesting your data, we ask you to write from the e-mail address that belongs to your account.

If we can't work it out

If you feel we are not handling your data properly, tell us first; it is one person and he takes it seriously. If we cannot work it out together, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl. If you live in another EU country you may also complain to your own supervisory authority.

If this statement changes. If something material changes, a new party receiving some of your data, another purpose, another retention period, you will read it here and you will be told before it takes effect. The date at the top says when this text was last updated.

The terms How this works Back