1. Who is responsible
Escorts Guide (escortsguide.net, "the site") is run by Escorts Guide, 8º arrondissement de Paris, 75056, Paris, a private individual, based in Portugal, who is the data controller for the personal data described here ("we", "us").
For anything about your data, write to [email protected]. We do not have a data protection officer, because the law does not require one for a site of this kind; your message reaches the person who runs the site.
2. What we collect
Everyone who visits
- Technical data: IP address, browser and device type, the page requested and the time. Our web server and the application record this in log files, and the session table keeps your IP address and browser while your session lasts.
- Analytics, only if you click "Accept all" in the cookie banner: Google Analytics measures pages viewed, approximate location (country, city), device and how you arrived. See the Cookie Policy.
Account holders
- Name or alias, email address, password (stored only as a one-way hash, never readable by us) and account type (advertiser or visitor).
Advertisers
- The ad: display name, phone number (and whether it takes WhatsApp), city and country, age, description, website, prices, languages and the profile details you choose to fill in, such as appearance, nationality, ethnicity, orientation and services offered.
- Photos and video you upload. Photos are kept privately until our system adds the site watermark and re-encodes them; only that watermarked copy is published. The original upload is then deleted.
- Records about the ad: when it was created, approved, rejected (with the reason we sent you), published, paused or expired, and the date you gave your consent to publish it.
People who write to us
- Name, email address, subject and message from the contact form, including reports about ads, and our reply. If the form shows a Google reCAPTCHA check, Google receives your IP address and browser data to tell people from bots.
We do not ask for identity documents, payment details or your location from your device. Publishing an ad is free.
3. Sensitive details in ads
Some details an advertiser can add to an ad, such as sexual orientation, the services offered or ethnic origin, are "special categories" of data under Article 9 of the GDPR, and the ad as a whole can reveal information about a person's sex life.
- We publish them only with the advertiser's explicit consent (Article 9(2)(a)), which you give by ticking the consent box each time you create or edit an ad. We record the date.
- Every one of these fields is optional. Leave it empty and it is not shown.
- You can withdraw consent at any time by editing the ad, pausing it or deleting it, or by writing to [email protected]. Withdrawal does not affect what was published before it.
Visitors do not give us sensitive data, and we do not try to infer it from how anyone uses the site.
4. Why we use it and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Run your account and publish your ads | Account, ad, photos, video | Contract, Art. 6(1)(b); sensitive details: explicit consent, Art. 9(2)(a) |
| Review ads before they go live, remove illegal content, handle reports | Ad, photos, account, messages | Legal obligation (EU Digital Services Act), Art. 6(1)(c); legitimate interest in a safe, lawful site, Art. 6(1)(f) |
| Send emails about your account and ads (welcome, approved, rejected with reason, expired) | Name, email, ad | Contract, Art. 6(1)(b) |
| Keep the site secure and working: sessions, login limits, error logs, backups | Technical data, account | Legitimate interest, Art. 6(1)(f) |
| Answer your messages | Contact form data | Legitimate interest, Art. 6(1)(f), or steps you asked for before a contract, Art. 6(1)(b) |
| Measure how the site is used | Analytics data | Consent, Art. 6(1)(a), given in the cookie banner |
| Keep records when the law requires it, or to defend a legal claim | Any of the above, only as needed | Legal obligation, Art. 6(1)(c); legitimate interest, Art. 6(1)(f) |
Where we rely on legitimate interest, we have weighed it against your rights, and you can object at any time (see section 9).
5. What is public
An ad is meant to be seen. Once approved and published, everything in it can be read by anyone, including search engines, which may keep copies:
- the text and profile details, the photos and video, the city and country, and the phone number;
- the phone number is also part of the ad's web address and of the file names of its photos and video.
When an ad expires or is paused, it disappears from listings, search and the ad page. Its photos and video are no longer linked from the site, but they stay on the server, and anyone who saved their direct address can still open them, until you delete the ad. If you want them gone, delete the ad.
We cannot control copies that other people or websites make of public content. If you find a copy of your ad elsewhere, contact that site directly; we will help where we can.
6. Who we share it with
We do not sell personal data and we do not share it for advertising. Only these service providers process it for us, under contracts that oblige them to protect it:
| Provider | What for | Data |
|---|---|---|
| Contabo GmbH (Germany) | Server hosting and storage | Everything stored by the site |
| Our email delivery provider | Sending account and ad emails | Name, email, message content |
| Google Ireland Ltd. | Google Analytics, only with your consent | Analytics data |
| Google Ireland Ltd. | reCAPTCHA on the contact form, when enabled | IP address, browser data |
Apart from the Google services above, fonts and scripts are served from our own server; we use no external content networks. When you tap "WhatsApp" or "Call" on an ad, you leave the site and the advertiser and WhatsApp (Meta) receive what you send them; that is outside our control.
We disclose data to police, courts or other authorities only when the law requires it, for example a valid order, or to report suspected child sexual abuse material or human trafficking.
7. Transfers outside the EU
Google may process analytics and reCAPTCHA data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as adequate (Art. 45 GDPR), and Google also uses the Commission's Standard Contractual Clauses. We do not transfer other data outside the European Economic Area.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account | Until you ask us to delete it |
| Published ad | While you keep it; each publication lasts one month and you can renew it |
| Expired or paused ad | In your account until you delete it (see section 5) |
| Ad you delete | Photos and video: deleted at once. The rest: deleted after 30 days |
| Ad an admin removes | Hidden at once; deleted with its photos and video after 30 days |
| Messages to us and our replies | 12 months |
| Login session | 2 hours of inactivity, or until you log out ("Remember me" keeps you signed in on that device until you log out) |
| Password reset links | 60 minutes |
| Server and application logs | 14 days |
| Failed background tasks (may include an email or file name) | 30 days |
| Backups | Up to 30 days, then overwritten |
| Analytics (Google) | At most 14 months, the retention set in our Google Analytics property |
We may keep specific data longer when the law requires it or when it is needed for a legal claim or an investigation by the authorities, and only for that purpose.
9. Your rights and how to use them
Under the GDPR you can:
- see the data we hold about you and get a copy (access, Art. 15);
- correct it (rectification, Art. 16). You can edit your ads yourself in your account;
- delete it (erasure, Art. 17). You can delete your ads yourself; to delete your account, write to us;
- limit how we use it (restriction, Art. 18);
- take it with you in a machine-readable format (portability, Art. 20);
- object to uses based on legitimate interest (Art. 21);
- withdraw consent at any time: for analytics, open ; for sensitive details in an ad, edit, pause or delete the ad.
Write to [email protected] from the email address on your account, so we know the request is yours. We answer within one month; if a request is complex we may extend that by up to two more months and will tell you why. It is free, unless a request is clearly unfounded or excessive.
10. Complaints
If you think we handle your data wrongly, please tell us first so we can fix it. You also have the right to complain to a data protection authority, in particular in the EU country where you live or work. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal, www.cnpd.pt.
11. Security
- The whole site uses HTTPS, with HSTS and a content security policy.
- Passwords are stored as one-way hashes. Login, registration and the contact form are rate-limited.
- Uploaded photos stay private until they are watermarked, and only the processed copy is published.
- Login links sent by an admin are signed, single-use and expire after 24 hours.
- The database is not reachable from the internet.
No system is completely secure. If we learn of a breach that puts your rights at risk, we will tell the CNPD within 72 hours and, where required, tell you without undue delay.
12. Adults only
The site is only for people aged 18 or over, and everyone confirms this when creating an account. We do not knowingly collect data from minors. If you believe a minor uses the site or appears in an ad, report it and we will remove the content and the data at once.
14. No automated decisions
We do not make decisions about you by automated means alone and we do not build profiles. A person reviews each new or changed ad before it is published.
15. Changes to this policy
When this policy changes, we update the version date at the top of this page. If a change matters for advertisers, we also tell them by email before it applies.