Privacy Policy | HushAffair

Effective date: October 10, 2026

This Privacy Policy explains what personal information YMV Interactive ("HushAffair", "we", "us") collects when you use hushaffair.com (the "Site"), why we collect it, who we share it with, how long we keep it, and the choices and rights you have. Please read it together with our Terms of Service.

1. Who is responsible for your information

YMV Interactive, based in Montreal, Quebec, Canada, is responsible for the personal information described in this policy. We have designated a Privacy Officer, who can be reached through our contact form.

2. A note on sensitive information

Being a member of HushAffair can itself reveal that you are looking for a relationship outside your marriage or relationship, and your profile may describe your personal preferences. We treat all member information as sensitive. By creating an account, you consent to us using your information for the purposes described in this policy. You can withdraw that consent at any time by deleting your account.

Other members can see your profile, so please do not include details you do not want them to see, such as your full name, your workplace or a recognisable face in your public photos.

3. What we collect

Information you give us

Account details: your email address, username and password. We store passwords only in hashed form, never as readable text.
Profile details: your gender, who you are looking for, date of birth, location, answers to profile questions and your profile description.
Photos, including photos you protect with a password.
Your activity with other members: messages, winks, virtual gifts, hot list and bookmark entries, friend requests, and anything you post in the forum or blogs.
Purchases: the membership or credits you bought, the price, the date and the PayPal transaction reference. We do not receive your card or bank account numbers.
Support requests: what you send us through the contact form, by email or on WhatsApp.
Free trial requests: the selfie and email address you send us on WhatsApp. We use them once to grant the trial and then delete them.

Information collected automatically

Technical data: your IP address, browser and device type, the pages you request and when, recorded in our web server logs.
Site activity: when you last signed in or were active, and which profiles you view. Other members may be able to see that you visited their profile.
Cookies, described in section 6.

Information from third parties

If you sign in with a third-party account offered on our sign-in form, that provider shares basic details with us, such as your name, email address and account ID. This sign-in is handled by Google Firebase Authentication.
PayPal tells us whether a payment succeeded and gives us its transaction reference.

4. How we use your information

To create and run your account and show your profile to other members, as your privacy settings allow.
To provide search, match suggestions and location-based features.
To deliver messages and notifications between members.
To process purchases and apply memberships and credits.
To send service emails, such as account, security and purchase messages, and the notifications you choose in your email settings.
To answer your questions and support requests.
To keep the Site secure: to detect fake accounts, spam, fraud and abuse, and to enforce our Terms of Service.
To fix errors and understand, through statistics, how the Site is used.
To meet our legal obligations.

We do not sell or rent your personal information, and we do not share it with advertisers.

5. Who we share it with

Other members

Other members can see your profile and photos, as your privacy settings allow. Password-protected photos are visible only to members you give the password to. Messages you send are delivered to, and kept by, the members who receive them.

Service providers

We use the following companies to run the Site. Each one receives only the information it needs for its task and handles it under its agreement with us and its own privacy policy.

Akamai (Linode): hosting of our servers.
Backblaze and Cloudflare: storage of our backup copies.
Postmark: delivery of the emails the Site sends.
PayPal: payment processing.
Google: Google Analytics (statistics about visits to the Site), Google Firebase Authentication (third-party sign-in) and Google Maps services (location search).
Cloudflare Turnstile: spam protection on our contact form.
Sentry: error monitoring. When something breaks, technical details about the error, which may include your IP address and the page address, are sent to Sentry so we can fix it.
WhatsApp (Meta): only if you contact us on WhatsApp, for example to request a free trial.

Legal and safety reasons

We may disclose information when the law requires it, for example in response to a court order or a request from authorities that we are legally obliged to answer, or when it is necessary to protect someone's life, health or safety.

If the business changes hands

If HushAffair is sold or transferred, your information may be transferred to the new operator, who must continue to protect it in line with this policy.

6. Cookies

Essential cookies keep you signed in and remember your choices, such as "Remember me". The Site cannot work properly without them.
Analytics cookies are set by Google Analytics to count visits and understand how the Site is used. You can block them in your browser settings or with Google's opt-out browser add-on.

We do not use advertising cookies.

7. Where your information is stored

Our servers are located in Canada (Toronto). Some of our service providers, listed in section 5, process information in the United States and other countries. When your information is held in another country, it is subject to that country's laws, and the authorities there may be able to access it.

8. How long we keep it

Account and profile information: for as long as your account exists.
After you delete your account: your profile and photos are removed from the Site. Messages you have already sent remain with the members who received them. Copies in our backups are removed as the backups are replaced, within about six months.
Purchase records: for as long as tax and accounting law requires, generally six years.
Web server logs: about six weeks.
Free trial selfies: deleted once the trial has been granted.
Support messages: for as long as needed to handle your request, and a reasonable time afterwards in case you follow up.

9. How we protect it

All connections to the Site use HTTPS encryption.
Passwords are stored only in hashed form.
Access to our servers and administration tools is limited and protected.
Our servers receive security updates, and we keep regular backups.

Messages are stored on our servers and are not end-to-end encrypted. No system is completely secure. If a security breach creates a real risk of significant harm to you, we will notify you, and the authorities, as the law requires.

You can help protect your privacy: use a password you do not use anywhere else, sign out on shared devices, and remember that your PayPal and bank records will show your purchases.

10. Your rights and choices

Access: ask for a copy of the personal information we hold about you.
Correction: update your profile at any time, or ask us to correct anything you cannot change yourself.
Deletion: delete your account from your account settings, or ask us to delete it.
Withdraw consent: delete your account, or ask us to stop a particular use of your information.
Emails and privacy settings: choose which notifications you receive and what other members can see, in your settings.

To make a request, write to our Privacy Officer through our contact form, starting your message with "Privacy request". We may need to confirm your identity first. We will reply within 30 days, or tell you if the law allows us more time and why we need it.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, to the Commission d'accès à l'information.

If you live in the European Union or the United Kingdom, you also have the rights the GDPR gives you, including the right to restrict or object to how we use your information and to receive your data in a portable format, and you can complain to your local data protection authority. We use your information because it is needed to provide the service you signed up for (contract), with your consent (including for sensitive information), for our legitimate interests in keeping the Site secure, preventing fraud and understanding how the Site is used, and to meet legal obligations.

11. Children

The Site is only for adults aged 18 or over. We do not knowingly collect information from anyone under 18. If we learn that a member is under 18, we will close the account and delete the information. If you believe a minor is using the Site, please tell us.

12. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date and, for significant changes, tell you in advance by email or by a notice on the Site.