The principle
This is, first of all, a site you read: no account required, no purchase required (the dossier shop is optional), and you can read every page without ever entering anything; an optional account simply lets you find your information again on your other devices. The only data concerning you is what you give us yourself — an address to receive the newsletter, an answer to a poll, a first name for the two-player game — and what analytics (which you can decline; in the European Economic Area, the United Kingdom and Switzerland, it waits for your agreement) and advertising (personalised according to your choices) produce.
Who is responsible
The data controller is CAPIT, the company that publishes this site (SIREN 422 790 931), reachable at webmaster@affection.org. Full identity, postal address and telephone number are in the terms of use.
Analytics
We use Google Analytics 4 to know which pages are read and from which countries, in order to decide what to write next. It is on by default: you can decline it in the consent window shown on your first visit, and no Analytics cookie is then set (Google only receives measurements without cookies; to change your choice: “change my choices”, below). In the European Economic Area, the United Kingdom and Switzerland, it waits for your agreement, given in Google's consent window (or in our banner if that window is not shown): without it, no Analytics cookie is set and only measurements without cookies are sent to Google.
The data involved is technical: pages viewed, duration, approximate country, device type, referrer. It is processed by Google LLC as a processor and retained for the periods configured in the tool, at most fourteen months for user data.
Only with your agreement, Microsoft Clarity records how pages are browsed (scrolling, clicks, areas hovered) to produce heatmaps and session recordings: whatever you type in a field is always masked, and the IP address is used only to estimate the country. Nothing is loaded until you accept. The data is processed by Microsoft Ireland Operations Limited as a processor; recordings are kept for thirty days, apart from a few samples kept for up to nine months.
The search engine of the site and the app. When you run a search (the “Search” button or the Enter key), we record the text searched, the language, the number of results, the day and, if you click a result, the page chosen, under an identifier drawn at random for that search alone. We record no account, no IP address, no cookie and nothing that could identify you. This log is used only to improve the site (missing pages, badly ranked results); it is never published or passed on. Search texts are deleted after twelve months; only anonymous overall counters per keyword are kept (number of searches, of clicks and of searches without results, per language, with the first and last date), with no identifier and nothing that could link a keyword to a search or to a person. Please avoid typing personal information into it.
Advertising
The site displays ads supplied by Google AdSense (auto ads: Google chooses where they appear, and they are labelled as advertising). Ads may use cookies or identifiers to be served and measured and, if you agree, to be personalised. We do not choose the advertisers and we have no access to any personal data linked to the ads.
In the European Economic Area, the United Kingdom and Switzerland, your agreement is requested before any personalised ad is shown, through Google's consent window (a consent management platform certified by Google, IAB TCF framework); this window also covers audience measurement. Without your agreement, only non-personalised or limited ads may appear. Elsewhere, ads follow your Google settings.
You can change your choice at any time: change my choices. Your Google ad preferences can also be set in My Ad Center, and how Google uses data from partner sites is described on this page.
Cookies set
| Consent preference | Stored in your browser (local storage), with no identifier, so the question is not asked again on every page. Kept until you clear it. In the European Economic Area, the United Kingdom and Switzerland, the choice made in Google's consent window is also kept by Google in the FCCDCF cookie (13 months); this window also sets the FCNEC cookie (Google's measurement of how it works, 365 days). |
|---|---|
| Analytics | Google Analytics cookies, set by default (in the European Economic Area, the United Kingdom and Switzerland, only after your agreement); no measurement cookie once you decline. |
| Advertising | Google cookies and identifiers to serve and measure ads; personalisation only after your agreement in Google's consent window (EEA, United Kingdom, Switzerland). |
| Browsing recordings | Microsoft Clarity cookies (_clck, _clsk), only after acceptance. |
| Account sign-in | Strictly necessary cookies of the sign-in service (_session, _interaction, _interaction_resume and their signatures), set only if you sign in: they keep you signed in for thirty days at most and protect the sign-in against tampering. |
| Polls and two-player game | No cookie: a random identifier is kept in your browser (local storage) to recognise your vote or your game. |
| Likes | No cookie: a random identifier kept in your browser (local storage) lets us count your “like” only once, without an account. |
| Google sign-in suggestion | g_state cookie, set by Google's script only if you accepted the banner and are not signed in: it remembers that you closed the “Continue as …” suggestion. |
| Site search | No cookie: search runs entirely in your browser, no query is sent or stored. |
The newsletter
If you subscribe to the newsletter, your address, the language chosen and the date are stored in our database, hosted by OVHcloud (Beauharnois, Canada). The subscription only takes effect once you confirm it through the link you receive. For sending, the address is entrusted to our provider Amazon Web Services (Amazon SES service), which hosts it in the European Union (Ireland region) and uses it for nothing else. Every newsletter contains a one-click unsubscribe link, hosted by Amazon SES, that takes effect immediately: the address is then removed from our lists at Amazon SES, and you can ask us to delete it completely by writing to us. Legal basis: your consent.
Exception: from the member area, a signed-in account can subscribe by ticking a box; as its address has already been verified, no second email is sent. Deleting the account also ends the subscription.
Polls and two-player game
The “What about you?” polls, at the foot of articles and on the polls page, record your answer, the language of the page and, if you give it, your country, with no address: a random identifier kept in your browser prevents double votes, and your IP address is kept only as a hashed fingerprint, to limit abuse. If you have an account, your answer is also linked to it, so you can find it again on your other devices. The two-player game keeps your answers and, if you give one, a first name, under a game code known to both players; games are deleted thirty days after they are created.
Posts we feature (directory subscribers)
If you subscribe to the directory, we read the public posts of the accounts you declare, including those from the two months before your subscription, and an artificial intelligence selects the ones that can enrich our pages. When one of them is online, we tell you in your member area and by email. These notifications are deleted with your account. You cannot reply to them: to write to us, use the email address on the Contact page. Legal basis: performance of the contract.
The AffectionPlus games app on Reddit
Apart from the community activity described below, the AffectionPlus games app on Reddit does not contact any outside website. The birth dates and first names you enter in the compatibility test and the other calculators stay on your device: they are never sent anywhere.
In the AffectionPlus communities on Reddit, players' comments and posts are sent, without any username, to affectionplus.com. An artificial intelligence assistant, Google's Gemini, answers them under the app's account, and draws general ideas from them to improve the games, without keeping your wording. These messages are erased as soon as they are handled, after 30 days at most, and immediately if you delete them on Reddit.
The app's storage at Reddit keeps your Reddit username with your streak (30 days at most), your points in the monthly leaderboard, where your name and points are visible (about two months at most), and “already voted” markers, which do not show your choice (30 days at most). The “My data” button in the app erases them at any time. Poll and sign counters hold only totals: nothing links them to you, so they are neither erased nor limited in time.
The two-player game (“Do we know each other?”) keeps, in that same storage, the answers of both players and the optional first name each one typed. This information is visible only to the two players. Your Reddit username is used only to recognise you and is never shown to the other player. The “My data” button also deletes your games. Games are erased 30 days after their last update.
Your score is shared only when you press the button provided for it, and it is then published under your username.
There is no advertising in the Reddit app, and no data is sold.
If you write to us
By email, no account needed. To write to us, simply send an email to webmaster@affection.org: you do not need an account. This mailbox is hosted by OVH, in France. Your address and your message are kept for no more than three years after the last exchange. Legal basis: our legitimate interest in answering the requests sent to us (or steps taken before entering into a contract, for a business request).
Replies prepared with the help of artificial intelligence. Incoming emails are read, sorted and, in most cases, answered with a reply prepared and sent automatically with the help of an artificial intelligence assistant, Claude, from the company Anthropic, acting as a processor; this processing runs on GitHub Actions (GitHub, a Microsoft subsidiary). Business proposals and requests about your personal data are passed on to the party responsible for the site, the company CAPIT. A question or a suggestion may lead us to clarify a page of the site, without ever publishing your name or address.
Former messaging service. The internal messaging service of the site and the app was removed on 14 October 2026. Messages exchanged until then are no longer accessible; they are deleted with your account, and at the latest three years after the last exchange, as announced. The app no longer sends notifications, and the stored notification identifiers have been deleted.
Your address and the content of your message are used to reply to you and for nothing else. They are not sold, not passed on, not used for unsolicited messages, and are deleted on request.
Third-party services
Google sign-in suggestion. If you accepted the banner and are not signed in, the site loads the Google Identity Services script, which may offer “Continue as …” with your Google account at the top of the screen. Google then receives your IP address and checks its own session; AffectionPlus receives nothing until you click, and then only your address confirmed by Google and your first name. This script is never loaded in the app or without your agreement.
Some pages load an icon font from a content delivery network, which therefore receives your IP address. The share buttons are plain links: they send nothing until you click. The site contains no social-network pixel, no embedded video player and no third-party interactive map.
Account and syncing (optional)
Since 6 October 2026, you can create an account to access your information on your other devices. This is optional: without an account, everything stays in your browser, as before.
Data stored. Your email address (the account identifier) and, as you enter them, the information from “My personal details” (first name, family name, sex, dates of birth, first meeting and wedding, places), your favourites, your poll answers, your quiz scores and the compatibility tests you choose to save (first and family names, sex, dates, times and places of birth, places of residence of both people, and the result). These tests also concern another person: you can delete them at any time on the “My compatibility tests” page. You sign in with your address and a password, or with your Google account (in that case we receive your address, confirmed by Google, and your first name, used only to fill in “My personal details” if it is empty), or with your Apple Account (we then receive your email address, or Apple’s relay address if you choose to hide yours, and your first name if you share it; when the account is deleted, the access granted to AffectionPlus is revoked with Apple), or with your Facebook or LinkedIn account (only when you click the corresponding button: no Facebook or LinkedIn script is loaded on the site, and we receive your email address and your first name, as well as your last name and the address of your photo, kept only as a suggestion, see “Profile photo and bio” below). The password is never stored as such: only a salted fingerprint (scrypt) is kept, which no one, not even us, can read back; a code sent to your address confirms the creation of the account and lets you choose a new password if you forget it. Signing in goes through the shared AffectionPlus sign-in service (affectionplus.com/connexion), which may also be used by our other sites.
Purpose and legal basis. Accessing your information from one device to another, on the basis of your consent, given by ticking the box when you sign up. No other use is made of it: no profiling, no targeted advertising, no disclosure to third parties; the sign-in code is sent through our email provider, Amazon SES (European Union).
Retention. For as long as your account exists; sign-in codes expire after fifteen minutes and site sessions after four hundred days without use and the shared sign-in service session after thirty days; an account that has not been used for three years is deleted.
Account security. Changing your password (“Change my password” page) closes the sessions open on your other devices, where you will need to sign in again with the new one; choosing a new one after forgetting it closes them all.
Anti-robot protection. Forms that send an email (account creation, forgotten password, newsletter) are protected by an invisible anti-robot check, computed by your browser or by the app in a fraction of a second: with no cookie and no third-party service, it is used only to prevent automated submissions.
Sign-in history and presence. Each time a session is opened, and then on each new day you come back or when your IP address changes, we record the date, the IP address, the country it indicates, and the browser and system used; while you are signed in, we also note the time of your last activity (at most once a minute), which, like the rest of this history, is used for account security. You see the date, country and browser of your sign-ins on the “My sign-in history” page; the IP address, the internet provider and any indication of a probable VPN are seen only by the administrator, for account security. The country is requested from the ipwho.is service, which receives the IP address for this purpose; its answer is kept for seven days, linked to a fingerprint of the address. If the country in “My personal details” is empty, it is filled in once with this country. The history is kept for twelve months and deleted with your account.
Likes. The thumb at the top of a page records a “like”: linked to your account if you are signed in, otherwise to a random identifier kept in your browser (local storage), which our servers keep only as a fingerprint. Only the number of likes of each page is shown: nobody can see who likes which page. Your likes are deleted with your account.
Sign-in history and presence. Each time a session is opened, and then on each new day you come back or when your IP address changes, we record the date, the IP address, the country it indicates, and the browser and system used; while you are signed in, we also note the time of your last activity (at most once a minute), which, like the rest of this history, is used for account security. You see the date, country and browser of your sign-ins on the “My sign-in history” page; the IP address, the internet provider and any indication of a probable VPN are seen only by the administrator, for account security. The country is requested from the ipwho.is service, which receives the IP address for this purpose; its answer is kept for seven days, linked to a fingerprint of the address. If the country in “My personal details” is empty, it is filled in once with this country. The history is kept for twelve months and deleted with your account.
Likes. The thumb at the top of a page records a “like”: linked to your account if you are signed in, otherwise to a random identifier kept in your browser (local storage), which our servers keep only as a fingerprint. Only the number of likes of each page is shown: nobody can see who likes which page. Your likes are deleted with your account.
Profile photo and bio. Once signed in, you can add a profile photo and write a short bio. They are private: nobody else sees them, and there is no public member profile. The photo is kept on our server, with no public address, until you remove it or delete your account. Your date of birth, city and country are never requested from Google, Facebook, LinkedIn or Snapchat: you enter them yourself. If the date of birth you entered shows you are under 15, the photo, the bio and the import described below are not offered.
Import from a network. If you sign in with Google, Facebook or LinkedIn, the network sends us your first name, your last name and the address of your profile photo. Snapchat sends us only your display name, with no photo. We keep them only as a suggestion: nothing enters your profile unless you tick what you want to take over, and if you decline, we do not suggest it again until this information changes. The photo is downloaded only to show you a preview, by our server and without being kept, or when you agree to take it over. The suggestions are deleted when your account is deleted.
Your rights. You can view and change this information at any time in “My personal details”, and delete your account (“Delete my account”, then confirm): everything is then immediately erased from our servers, and your newsletter subscription ends. You can also write to the address given below.
Purchases in the shop
If you buy a dossier or subscribe, we process your account (email address), the dossiers bought and their date, the amount, the currency, the payment or subscription status, and your customer identifier at Stripe. The billing details entered on the payment page (name, address, VAT number where relevant) and your card data are collected by Stripe.
Payment and invoices are handled by Stripe Payments Europe, Ltd. (Ireland). For payment, fraud prevention and its regulatory obligations, Stripe acts as a separate controller; it may transfer data outside the European Union with the safeguards required by law. We neither receive nor keep your card number.
Legal bases: performance of the contract (delivering the dossier, managing the subscription), legal obligation (accounting and invoicing) and our legitimate interest (security, fraud prevention). Retention: your purchase history is kept for as long as your account exists, so that you can download your dossiers again; accounting records, including invoices, are kept for ten years, as the law requires. If you delete your account, your purchases are detached from it on our side; the invoice remains with Stripe and in our accounts for the legal period.
We do not sell this data and do not use it for advertising; no purchase event is sent to our audience-measurement services. Our site sets no cookie for the shop; the payment page, hosted by Stripe, may set its own cookies, needed for payment and fraud prevention. To exercise your rights, see “Your rights” below.
Your rights
You have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time — in practice by declining in the consent window, or through the “change my choices” link on this page. To exercise them, write to webmaster@affection.org. You may also complain to your national data protection authority.
Our Facebook and Instagram pages. An application in our name publishes one page of the site each day on our Facebook page “Affection.org” and our Instagram account @affectionorg. It can only access these two accounts: it neither reads nor stores any data about Facebook or Instagram users. Reactions and comments stay with Meta, which is responsible for them. To ask for the deletion of any data about you, write to the same address.
Children
The site is not aimed at children and knowingly collects no data about them. Some pages, in sexual health in particular, are written for teenagers or their parents: they remain information pages and never ask for personal details.
Updates
This policy may change, particularly if a new tool is added. Last updated: 5 November 2026 (profile photo, bio and import from a social network).