Visitors
Visitors do not need an account. We count profile views and contact-button taps using a random identifier stored in your browser so we can show advertisers anonymous totals and prevent abuse. We do not use third-party analytics, advertising or tracking scripts.
Advertisers
We store your email, profile content, photos and contact details. Email addresses, phone numbers and contact details are encrypted at application level, and we keep keyed hashes so we can detect duplicate or banned details without reading them. Passwords are stored using Argon2id. Two-factor authentication is mandatory.
Identity verification
Our verification partner checks your identity document and a live selfie. LUX never receives or stores your document images or selfie. We keep only the result, the date, the provider reference and whether you are over 18. Only our Compliance team can see verification records.
Photos
Every uploaded photo is re-encoded and all metadata (including EXIF and GPS location) is removed before storage. We store a perceptual fingerprint to detect duplicated or stolen images. Only the processed version is ever shown. An automatic image check screens for nudity and third-party watermarks.
Reports
You can report a profile without an account. If you leave contact details they are encrypted and visible only to Compliance.
Your rights
Under UK GDPR you can access, correct or delete your data. Advertisers can do both themselves from Account & data in the dashboard: download a ZIP copy of everything we hold (including original photos without the LUX watermark) and delete the account. Deletion takes the profile offline immediately, followed by a 30-day grace period in which it can be cancelled; after that all personal data, photos and verification records are permanently erased. Some records (the staff audit trail and hashed safety bans, which contain no readable personal data) are kept where we have a legal or safety reason to do so.