Privacy statement
Last updated: 6 October 2026
This privacy statement explains which personal data MilfBook.app processes, why, and what rights you have.
1. Who we are
The data controller is:
BlueBase B.V.Europark 11D
3620 Lanaken
Belgium
Company no. (KBO/BCE): 1025.309.202
VAT: BE1025.309.202
Email: [email protected]
Questions about privacy? Email [email protected].
2. What data we process
| Type | Examples |
|---|---|
| Account data | email address, password (encrypted), display name, date of birth, country, language |
| Profile data | photos, bio, what you are looking for, appearance, interests, search preferences |
| Communication | messages and photos you send and receive |
| Activity | profiles you visited, who visited your profile, likes, matches, when you are online |
| Payment data | packages purchased, amounts, transaction numbers (no full card details) |
| Technical data | IP address, device and browser, session cookie, signals to detect abuse and bots |
3. Sensitive data
Because this is a dating service, data may reveal something about your sex life or preferences. This is special category personal data. We only process it because you enter it yourself or share it in messages, and on the basis of your explicit consent. You can withdraw that consent by changing the data or deleting your account.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating your account and providing the service (profiles, matches, messages) | Performance of the contract |
| Special category data such as sexual preferences | Explicit consent |
| Payments and accounting | Contract and legal obligation |
| Age verification, preventing fraud and abuse | Legitimate interest and legal obligation |
| Service emails (confirmation, password, account notifications) | Performance of the contract |
| Newsletters and promotions | Consent |
| Improving the service with statistics | Legitimate interest or consent (see cookies) |
5. Emails and notifications
Emails from MilfBook.app are sent from hookupalerts.com. You receive service emails for as long as you have an account. You only receive commercial emails if you opted in. Every email contains an unsubscribe link.
6. Who we share data with
We do not sell your data. We only share data with parties that help us provide the service and that have signed a data processing agreement with us:
- hosting and storage: [hosting provider];
- payments: CURO Payments B.V.;
- sending email;
- staff and partners who run entertainer profiles and handle reports; they only see conversations with the profiles they run.
We also disclose data when required by law.
7. Transfers outside the EU
We store your data within the European Economic Area wherever possible. If a supplier processes data outside the EEA, we put appropriate safeguards in place, such as the European Commission's standard contractual clauses.
8. Retention periods
- Account, profile and message data: for as long as your account exists, and up to 30 days after.
- Visitor and activity data: up to 12 months.
- Abuse-detection signals: up to 90 days.
- Payment data: 10 years, due to the Belgian statutory accounting retention obligation.
- Accounts unused for 24 months are deleted after a warning by email.
9. Security
We protect your data with measures including encrypted connections (HTTPS), securely hashed passwords, secure session cookies and access control for staff.
10. Your rights
You have the right to access, correct or delete your data, to restrict processing, to object, to data portability and to withdraw consent. Send your request to [email protected]. We respond within one month.
11. Minors
The service is only for people aged 18 and older. If we discover that an account belongs to a minor, we delete the account and its data.
12. Complaints and contact
If you are not satisfied with how we handle your data, please contact us first at [email protected]. You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels: dataprotectionauthority.be, or with the supervisory authority in your own country.