Privacy Policy

The short version

Reading a listing is anonymous in the ordinary sense: no sign-up, no email capture, no third-party advertising or social tracking scripts embedded in the page. The parts of a visit that do leave a trace are a session cookie, an optional favourites cookie you create by tapping a heart, and the ordinary web-server log that every site on the internet keeps. Everything else on this page is detail about those three things.

Cookies this site sets, and what each one is for

• Session cookie — issued by the application framework so a page you request comes back to you and not to somebody else. It expires when the browsing session ends.
• Favourites cookie — written only when you add a listing to favourites. It holds a list of listing identifiers so the favourites page can rebuild your selection on the next visit. Clearing site data empties it, and nothing in it identifies you.
• First-party measurement cookies — a visitor cookie and a session cookie used by the site's own traffic counter, if measurement is switched on for this installation. They carry random identifiers, live only on this domain, and are never sold, joined to an advertising network or used to build an interest profile.

No advertising cookie, remarketing pixel, social widget or cross-site identifier is loaded on any page of this directory. That is a design decision about what an adult catalogue may reasonably ask of a reader, not a temporary state.

How measurement behaves when it is on

The traffic counter is first-party: it runs from this domain and reports to a private dashboard rather than an advertising platform. Where it is enabled, IP addresses are truncated before storage rather than kept whole, and both the Do Not Track header and the Global Privacy Control signal are honoured, which means a browser configured to refuse measurement is not measured. Page addresses, referrers, approximate device class and coarse timing are what a report contains; the text you type is not.

What a server log holds

Answering an HTTP request requires an address to answer to. Web-server logs therefore record an IP address, a timestamp, the requested address, the response code and the browser's user-agent string. Those records exist for security and fault diagnosis — spotting an attack, explaining an outage — and are not used to build a reading history tied to a person.

What a review submission stores

Leaving a review on a listing writes exactly what the form asks for: a display name you choose, a rating between one and five, and the plain-text body you type. The form asks for no email address, no phone number and no account. Because a review is published beside a listing after moderation, anything you type into the body becomes public — so a review is the wrong place for your own contact details, a meeting address or another person's identifying information.

Advertiser records are a separate category

Information supplied by an advertiser in order to be listed — display name, district, availability, physical description, rates, languages, photographs and video — is published because publication is the point of submitting it. Material an advertiser sends during onboarding that is not meant for the page, such as documents proving adult age or rights over a photograph, is retained separately for compliance and is never shown on the public site. The terms you accept by browsing set out the matching obligations on the advertiser's side.

Your rights under Hong Kong law

The Personal Data (Privacy) Ordinance covers personal data about an identifiable living individual and gives a data subject the right to ask whether data about them is held, to receive a copy, and to have inaccurate data corrected. Collection must be fair and necessary, retention no longer than the purpose requires, and security proportionate to the harm a leak would cause. The Privacy Commissioner sets all of this out in its official Ordinance at a Glance , which is worth reading directly rather than through anybody's summary of it.

Asking for removal or correction

Two requests arrive here often and are worth separating. A person depicted in a listing who wants it taken down, or corrected, should say which listing and what is wrong with it. A reader who wants a review removed should quote the review and say why. Both go to the channels on the contact page , and both are handled by the moderation route described in how a guest review is handled rather than by an automated system. Send the minimum needed to identify the item — never a passport scan, a password or a payment card — to any address, including one that looks official.

Changes to this notice

The list of cookies above is the operative part of this page, and it changes when the site changes. A material change to what is collected is reflected here at the same time as the change ships, not in a later batch.