← Back to D8

Founding beta · Updated October 2, 2026

Private introductions need clear boundaries.

Your matching intake is private. Another person sees a limited introduction card only after both of you accept. Pair conversations, optional discussions and private coaching have separate audiences and retention rules.

Requesting access or contacting us

An invitation request saves your reply email, general region, dating intent, a short reason, your adult confirmation and your consent for review and a reply. Public support saves your reply email, request and consent. These submissions are visible only to the operator, are retained in the active database for up to 30 days and are not public profiles or matching preferences. They do not create an account or verify email ownership, age or identity. Sending a request does not guarantee admission or an introduction.

We use your email to review and reply to that request, not to add you to a marketing list. No automated email replies or newsletters are sent by this release. We also retain keyed email/network hashes and bounded admission counters for the current UTC date and two preceding dates to limit abuse; raw IP addresses are not saved in the application database. Do not send passwords, invitation codes or other people’s private messages in these forms. Contact ceo@danger.tech for help or a privacy request. Email correspondence is separate from the website database.

Joining D8

The owner issues invitations. Joining requires a handle, display name, password, and confirmation that you are at least 18 and agree to the circle’s rules. Membership itself does not require an email address. We do not check identity documents or verify your age. An invitation or adult confirmation is not a verification badge.

We save your account details and a salted password hash, not your plaintext password. Password hashes use PBKDF2. The database stores hashes of invitation and session tokens. Your browser uses a session cookie to keep you signed in; clearing coach inputs does not sign you out.

Private matching intake and mutual choice

If you choose to enable introductions, we save your age, general city or region, gender, genders you wish to meet, adult minimum and maximum ages, intent, interests, summary and matching-consent choice. These are self-reported details. Use a general area, not an address, and keep contact details and another person’s identifying information out of your summary.

The server checks mutual preferences, active status, consent and blocks to propose introductions. This matching step does not send your private profile or preferences to an AI model. There is no public member directory. Before both people accept, the proposal does not reveal the other person’s card, preferences or contact details.

After you both accept, each sees the other’s display name, age, general region and summary. Private gender and age preferences, interests and ranking details are not included in that card. You can decline, pause introductions by withdrawing matching consent, block or report. Matching is not identity verification, background screening or a guarantee of compatibility or dating outcomes.

Connected-pair messages

After mutual acceptance, you can exchange messages within that introduction. They are visible to the connected pair through the app, and are sent to Cloudflare Workers AI for moderation before delivery. This service is not end-to-end encrypted; the owner administers the application and handles private reports. Do not send passwords, identifying third-party details or material you lack permission to share.

If moderation rejects a message or cannot complete, the message is not delivered. A provider or quota failure may still use an attempt. Blocking, declining, expiry or pausing matching closes introduction access and clears the shared cards and pair messages from the active database. No outgoing text, email or push notification announces messages in this beta.

Optional discussion and the AI host

The shared discussion circle and AI host are disabled in the current introduction-focused release. If the owner enables discussion later, approved member posts/comments, handles and display names are visible to active circle members, while pending or rejected submissions stay author-only until owner review. Discussion content is not a public, indexed feed; members can still copy or capture what they see.

Enabled discussion uses Cloudflare Workers AI for moderation. A clearly identified host can create a daily discussion prompt and provide a labeled automated welcome if those features are enabled. A feature for asking the host to answer a member’s post is not implemented. It is software, not another member. There are no weekly summaries or invented member posts. The owner reviews reports/appeals and makes account-removal decisions; the AI does not automatically ban anyone.

What we retain

The beta allows up to five coach attempts and twenty pair-message attempts per member per UTC day, with separate allowances. Optional discussion uses the coach allowance if enabled. All AI requests, including any enabled host, share a total capacity of 500 attempts per UTC day. Failed attempts can still consume allowance. Retention cleanup is scheduled daily and also runs during supported app activity; a delayed or failed cleanup can delay removal. These windows describe the active application database, not independently controlled provider logs or backups.

The private coach

For a live coaching request, we send your conversation, writing sample, selected tone/goal and optional screenshot to the named AI provider. The current beta uses Cloudflare Workers AI. Those inputs and generated replies are not posted to the circle or saved in the app database, browser storage or ordinary application logs. They remain in the page’s memory until you clear it or close it. Basic usage and feedback metadata are retained as described above.

Use Clear to remove coach inputs, screenshots and replies from the current page. Hide names, faces, contact details and unrelated material before submitting an image. Only share material you have permission to use. Fictional examples do not require a live model request.

Deleting your account

The account-deletion control immediately removes your account profile, private intake, password hash, sessions, posts/comments, blocks and your reports from the active database. It also removes your introductions and both people’s messages in those pairs. This does not delete another person’s independent account or discussion posts. Already-incurred inference quota records may retain a random account identifier until the short cleanup window expires, so deletion does not reset the shared spending allowance.

We cannot erase copies made by other members or every mention someone manually typed into their own post. Provider and backup retention are separate. Account deletion is not a promise of instant removal from every system.

Providers and infrastructure

Cloudflare delivers the site, stores application data and processes network metadata under its own policies. Workers AI says it does not use Customer Content to train models or improve services without explicit consent. We do not promise zero provider retention. Read Cloudflare’s Workers AI data policy and privacy policy.

If the coach names Google Gemini as its provider, that request goes to Google instead. The configuration requires a paid API project and requests store=false for Interaction objects; other processing remains subject to Google’s API terms. The circle’s current host and moderation use Cloudflare Workers AI.

Questions, reports and choices

While signed in, use the private support/report form to raise a concern, request owner review or ask about your information. Support submissions are limited to ten per member per UTC day; reports already submitted that day count toward that allowance. Connected introductions also offer a private report action. Reports are not public discussion posts. You can also use the public support form when signed out, or email ceo@danger.tech. A public request does not establish ownership of an account; privacy or appeal actions may require further checks.

Access is free. There is no billing or outgoing notification feature. Messaging is limited to mutually connected pairs in the app; membership does not require a phone number. Reply emails are collected only for invitation and public support requests as described above. A local SMS access pilot has not been activated as part of this release. AI suggestions can misread context; review them and express what you actually mean. The host does not promise dates, matches or certainty about another person’s intentions.