Rules and privacy | SissySecrets

About SissySecrets

SissySecrets is an online community for adults who want to explore and enjoy their feminine side. A short quiz sets your starting points and levels, and your profile then holds the rest of the questions as a tree you answer when you like.

The site is for people aged 18 and over. Depending on where you are, you confirm your age with a click or complete an age check before you come in (see How age checks work).

Write to contact@sissysecrets.com with any question about the site, your account or your data.

Privacy notice

The controller of your personal data is SissySecrets. We decide what is collected and how it is used. Send any privacy question or request to contact@sissysecrets.com.

What we keep and why

What	Why we keep it	How long
Username	So you can log in. It is never shown to other members.	Until you delete your account
Password	To check it when you log in. We store it only as a salted hash (PBKDF2-SHA-256), which cannot be turned back into your password.	Until you delete your account
Recovery codes	To let you set a new password if you forget it. We show each set once and store only keyed hashes, which cannot be turned back into the codes. Each code works once. Making a new set replaces the old set.	Until you use each code, replace the set or delete your account
Email address, if you give one	To reach you about your account, for example if your public profile is taken down, and for notices the law requires. We use it for nothing else and never for marketing. Recovery codes are how you get back into your account if you forget your password.	Until you delete your account
Display name	The name you chose in the quiz, shown on your profile.	Until you delete your account
Quiz answers, points, levels and tree answers	To build your profile and keep your progress between visits. Some answers may reveal something about your sex life or gender identity, so we store them only with your explicit consent, which you can withdraw on your profile.	Until you withdraw consent or delete your account
Your public profile, if you publish one	To show the public profile you chose to publish (see Public profiles): the name on the public profile, your level, its title, your points and your six skill levels, with your link and your choices for the public profile. We also keep the date you last changed your link name, to allow one change a week.	While the public profile is on. When you switch it off we delete the name and the numbers on it, and keep its link and your choices for it until you delete your account, so the link stays yours.
Your consent to publish the public profile	The time you last agreed to publish your public profile, and the version of its consent text, so we can show that you consented.	Until you delete your account
Public profile links you gave up	When you change your public profile's link or delete your account, the old link stays blocked for everyone else, so nobody can take over a link you posted elsewhere. Until your account is deleted we also note that the link was yours, so you can take it back.	90 days
Your consent and the rules you agreed to	The time you ticked the consent box at sign-up, or last gave your consent again on your profile, and, while it is withdrawn, the time you withdrew it, with the date of the house rules and privacy notice you agreed to, so we can show when you consented.	Until you delete your account
How you met the age rule	The method (the 18+ confirmation or a check by Didit) and the place the rule was based on, a country or a US state, so we can show that we followed the law where you are. We never keep ID documents, photos of you, your age or your date of birth; the images and documents stay with Didit.	Until you delete your account
Login session	A random token in the `ss_sess` cookie keeps you logged in. We store only a hash of it.	30 days, or until you log out
Technical logs	One line per page view, with the page, your approximate location (country and region), the age rule that applied and whether Cloudflare identified an anonymising network (Tor). One line each time you confirm your age or finish an age check, with the method, the place, the rule and the result (passed, refused or not finished). These lines record a visit to a public profile as a public profile page, without the public profile's link. Each line also carries a short code made from your IP address with a secret key. The code changes every day, and we never store the address itself. We use these logs to keep the site working and secure. They never contain your password or your email.	Deleted automatically within 7 days
Cloudflare's security log	When Cloudflare's rate limit blocks a request, for example after many requests in a few seconds, Cloudflare keeps an entry with your IP address, the full address of the page you asked for (for a public profile, that includes the public profile's link) and your browser's user agent. We can see these entries in our Cloudflare account, and we use them only to protect the site.	31 days
Login attempts, sign-ups, started age checks and public profile lookups	Counted per username, per account and per IP address code (made as for the logs), to stop password guessing, mass sign-ups, repeated paid age checks and the guessing of public profile links. A public profile lookup is counted only when it finds no public profile. Started age checks are also counted per day, per address code and for the whole site (a count that names nobody).	Up to 30 minutes. The daily counts of started age checks: until the first clean-up after midnight UTC, so at most about 24 hours and 15 minutes.
Visit counts	To count visits and daily visitors, and see how people find and use SissySecrets. For outside arrivals on the home page and public profiles, we count the country, source class, referrer website, campaign tags, device type, browser, operating system, first language and region when available. Each detail has its own total. No total combines these details or records a public profile's link. Visits from closed places are counted by country. Daily visitors are counted by country, source class and device type for home-page, public-profile and coming-soon arrivals. Arrivals from closed places make no visitor code or daily visitor count. Our server reads technical details the browser sends with each request, such as its user agent, to tell visits from automated programs and from reloads made by the site and to work out device type, browser and operating system. It keeps none of these request details in the visit counts. Link previews are counted by app, and automated requests as one total. To count a browser once per UTC day, our server makes a daily visitor code from the IP address and browser's user agent with a secret key that changes each day. The code is kept separately from the totals and deleted after that UTC day. The IP address and user agent are not kept in the visit counts. The page reports steps: opening the doors and age screen, starting the quiz, answering 10, 20 and 30 cards, finishing it, opening sign-up, starting Keep going, opening the Tree, Card and Me tabs, being offered card setup after sign-up, opening card setup, copying a public link, completing a share with the share sheet and reaching a new headline level. These reports contain no answers, text, account name or public profile link. The server also counts age passes and checks, limits, quiz file loads, profile buttons, sign-ups and failed attempts, logins, publishing and switching profiles off, and account deletions. Sign-ups are counted by source class and country. The source class stays in the tab's session storage as `ss_src` until the tab closes. It is sent with sign-up for the count and is not saved with the account. Once a day we count accounts, withdrawals, recent saved activity, public profiles and profiles with skills, accounts with email, age methods, saved completed quizzes, live login sessions and accounts by headline level. These are whole-site totals. Each UTC day, the referrer, campaign and tag totals take at most 50 new values for each event. Later new values are counted as "other". Each breakdown still adds up to its event total. Counts are exact. We do not use them to decide anything about a person. Cloudflare Web Analytics also counts page views, as described below. Global Privacy Control does not stop these counts. Pressing "Don't count my visits" stops our server counts and prevents Cloudflare Web Analytics from loading.	Daily visitor codes: until the next cleanup after the UTC day ends. Daily totals: 3 to 4 months. We delete monthly totals after 25 months. Cloudflare Web Analytics: 6 months.
Emails you send us	To answer you and to deal with what you ask: questions, reports, reviews of an age check or a decision about a public profile, and requests about your data. Emails reach us through Cloudflare Email Routing, which passes them on without storing their content but logs the sender, the recipient and the subject (the subject of a public profile report holds the public profile's link). For each report we keep a short record of the date, the public profile concerned, the kind of report and what we decided, without your name or email address.	Cloudflare's log of sender, recipient and subject: 31 days. Your emails and our replies: deleted 6 months after the matter is closed. The record of reports and decisions: 3 years.

When your account is deleted, everything above that belongs to your account is removed from our database at once, and the copies in our backups are gone within 30 days. Technical logs, Cloudflare's security log, attempt counters and visit counts, which name no account, expire as listed, and so do emails and our record of reports. Only your public profile's links stay blocked, with nothing that ties them to you, until their 90 days end.

Public profiles

Your member area is private. You can choose to publish a public profile at a link you pick, such as sissysecrets.com/@yourname, or at a random code that is hard to guess. The public profile stays off until you switch it on, and it is never published as a condition of your account.

Anyone with the link, outside the places where SissySecrets is not available, sees the name you chose for the public profile, your level, its title and your points. That alone shows that you are a member of SissySecrets, which says something about your sex life.
Visitors who meet the age rule where they are also see your six skills and their levels, unless you untick that option.
When the link is shared in a chat or a post, apps fetch the public profile to build a link preview: your level and its title, and your name unless you untick that option. Previews never show your skills.
The public profile never shows your email, your quiz answers, your tree answers, your location or any date. Your name and link can be the same as your username if you choose.
Public profile pages ask search engines not to list them, and we keep no directory of public profiles.

After sign-up and the recovery codes, your public profile is filled in with your chosen name and a suggested link. Your six skills and your name in link previews are selected by default. You consent by pressing "Publish my public profile" below the consent text, or leave it hidden with "Not now". Later, the setup sheet asks you to tick the consent checkbox each time you publish or change it. Showing a hidden public profile again in Settings uses your saved choices and records your consent again. You can switch the public profile off on your profile at any time, and its link stops working at once. Switching off needs no age check, and works from the page shown where SissySecrets is not available too. A new link also stops the old one at once. Withdrawing your consent for your quiz answers, or deleting your account, takes the public profile down as well, and while your consent is withdrawn you cannot publish a public profile.

A link stays reserved for you while your account exists, also while the public profile is off, so that nobody else can take it over. Someone who tries to choose your link for their own public profile is told that it is taken, and so can learn that it is in use.

Anyone who finds your link on a dating profile or in a chat can connect your public profile with that profile, and so with you. Link previews and screenshots that apps or people have already made can outlive the public profile. Switching it off does not remove those copies. SissySecrets cannot delete copies held by other services.

Your profile also offers lines to paste into other apps and a profile image to download. The image is made on your device and never sent to us. It shows your level, its title, your points and, if you choose, your skill levels as coloured gems without their names. It always shows the address SissySecrets.com, with your link under it if you add it, and it never shows your name. Once you post the image or a line elsewhere, we cannot remove it.

On your device

Until you create an account, your quiz answers and points exist only in your browser's local storage on your device. Your answers are not sent until sign-up. The page reports the steps listed under "Visit counts". After sign-up a copy stays in your browser as well. If you start the quiz from a member's public profile, your browser also keeps that public profile's link for up to 30 days, or until you create an account or log in, to show your results next to the public profile's. It is never sent with your sign-up or with the visit counts. If you press "Calculate your sissy score" on a public profile while you are not logged in, the home page opens at an address that tells our server the button was used, without the public profile's link. Clearing this site's data in your browser removes all of it. Logging out or deleting your account also clears your quiz answers and points from the browser, and when you withdraw your consent on your profile you can choose to clear them too.

ss_src (session storage): The source class of the tab's first outside arrival. Sent with sign-up to count its source. Deleted when the tab closes. It contains no public profile link. With "Don't count my visits", the page removes this item and neither stores it nor sends it.

SissySecrets sets these cookies:

ss_age: Records that you met the age rule where you are: the method, the place and the time. Kept for 30 days, or until you close your browser in places that require a check at every visit.
ss_sess: Keeps you logged in. Kept for 30 days, or until you log out.
ss_avs: Links an age check you started to this browser, so only you can finish it. Kept for 60 minutes, or until the check ends.
ss_nocount: Set only when you press "Don't count my visits". It tells our server and Cloudflare Web Analytics to leave this browser out of the visit counts. Kept for 13 months, or until you press "Count my visits again".
ss_dev_geo: Used only on test versions of the site, to preview the rules for another location.

Where an age check is required, the security check by Cloudflare Turnstile runs in a frame from Cloudflare and keeps one item, cf.turnstile.u, in that frame's local storage. It is needed to start an age check, so it runs without asking.

These cookies are needed for the site to work and to follow the law, so we set them without asking. We set ss_nocount only when you ask. SissySecrets uses no advertising tools. The visit counters set no cookie. Our page keeps the first outside source class in ss_src in session storage and sends it with sign-up for an aggregate count. Cloudflare Web Analytics sets no cookie and keeps nothing on your device. The fonts load from our server, so opening a page sends nothing to a font service.

Legal bases

Your account, recovery codes, display name, progress, optional email address and login session: we need them to run the account you asked for (GDPR Art. 6(1)(b)). If the law requires us to send you a notice, our legal obligation is the basis (Art. 6(1)(c)).
Quiz answers that touch on your sex life or gender identity: your explicit consent, which you give with a separate checkbox at sign-up (GDPR Art. 9(2)(a); under Swiss law, express consent for sensitive personal data, nFADP Art. 6(7)). You withdraw it, or give it again, on your profile under "Privacy and data".
Your public profile: your explicit consent to make it public, given by pressing "Publish my public profile" after sign-up, ticking the separate checkbox in the setup sheet, or switching it to Visible in Settings (GDPR Art. 9(2)(a); nFADP Art. 6(7)). You withdraw it by switching the public profile off.
The record of your consents: we must be able to show that you gave them (GDPR Art. 7(1) and Art. 6(1)(c)).
Holding a public profile link you gave up for 90 days: our legitimate interest, and yours, in stopping anyone from posing as you through a link already posted elsewhere (Art. 6(1)(f)).
The age check by Didit and the record of how you met the age rule: our legitimate interest in keeping minors out and in being able to show that we applied the rule of the place you were in (Art. 6(1)(f)).
The face match in the ID step: if Didit asks for an ID document, it compares the photo on the document with your selfie to confirm that the document is yours. That uses biometric data to identify you, so it needs your explicit consent (GDPR Art. 9(2)(a); under Swiss law, express consent for sensitive personal data, nFADP Art. 6(7)). The age screen tells you about the match before the check starts, and you give your consent by pressing "Verify my age". If you do not want the match, stop the check when Didit asks for an ID; you then cannot come in where the law requires a check.
Technical logs, Cloudflare's security log and the counts of logins, sign-ups and age checks: our legitimate interest in keeping the site secure and working (Art. 6(1)(f)).
Visit counts and Cloudflare Web Analytics: our legitimate interest in measuring use of SissySecrets and how people find it (Art. 6(1)(f)). This includes a daily visitor code, the details and page steps listed above, and sign-ups by source and country. You can have your browser left out with "Don't count my visits".
The security check before an age check: our legitimate interest in keeping automated scripts from starting age checks, each of which costs us money (Art. 6(1)(f)).
Emails you send us and our record of reports: our legitimate interest, and yours, in answering you and in dealing with reports (Art. 6(1)(f)); for requests about your data, our legal obligation to answer them (Art. 6(1)(c)).

The Swiss Federal Act on Data Protection (nFADP) applies when you use SissySecrets from Switzerland, the EU GDPR when you use it from the EU or EEA, and the UK GDPR when you use it from the United Kingdom.

Who else handles your data

Cloudflare, Inc. hosts the site, runs our server code and database, and carries all traffic, so it handles your IP address and the data listed above on our behalf. Data may be processed in the United States and in other countries where Cloudflare operates. These transfers rely on Cloudflare's certification under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and on the standard contractual clauses in its data processing terms.
Cloudflare Web Analytics counts page views for us. A script reports the page address, referrer address, browser, operating system, device type, country and page load speed. Cloudflare receives your IP address with the report. The script sets no cookie and keeps nothing on your device. We see totals. Cloudflare keeps this data for 6 months. "Don't count my visits" prevents the script from loading. Global Privacy Control does not prevent it from loading.
Didit Identity Spain, S.L. (Barcelona) runs the age check when the rule where you are requires one. Your selfie, the liveness video and any ID document go to Didit. From Didit's decision our server receives the result and your estimated age, or the age or date of birth on your ID document if Didit asked for one, works out from it whether you are 18 or older, and keeps none of it: we store only that you passed. Our settings with Didit leave your selfie, the liveness video and any ID images out of what Didit sends us, so SissySecrets never receives them. Didit's privacy notice for verifications (version of 23 September 2026) says that check data may be processed in countries other than the one where you started the check, with safeguards such as adequacy decisions or standard contractual clauses where the law requires them, and it names a second company of the group, Didit Identity, Inc., in the United States. Didit is a separate controller for the check data it uses for security, abuse prevention, legal compliance, audit logs and legal claims.
Cloudflare Turnstile is the security check on the age screen where an age check is required. It has to pass before the check can start, so that automated scripts cannot use up the day's age checks. It runs in a frame from Cloudflare, which processes your IP address, your browser's user agent, technical details of your connection (a TLS fingerprint) and the address of the page, to tell people from bots. To confirm the result we send Cloudflare the check's one-time code and your IP address, and we learn only whether it passed; we store nothing from it. Cloudflare also uses these details to improve its bot detection, and for that use it is the controller under its Turnstile privacy addendum.
Our email provider stores the emails you send us and our replies in our mailbox until we delete them, as listed under "Emails you send us".

Your rights

On your profile, under "Privacy and data", you can do the following yourself. If you are logged in but have not met the age rule where you are, withdrawing your consent and deleting your account also work from the age screen, and from the page shown where SissySecrets is not available.

Download my data gives you a file (JSON, which other programs can read) with the data we hold about your account: your account details, how you met the age rule, your consents, your quiz answers and progress, your public profile and its settings, the links held for you, your login sessions and the number of unused recovery codes. It holds no other member's data. Your password, login tokens, recovery codes and recovery-code hashes are not in it.
Withdraw my consent stops the storage of your quiz answers. We delete your answers, points, levels and tree answers from our server, switch your public profile off and empty it, and save nothing more to your account until you give your consent again. You stay logged in, your account, username, display name and email stay, and your public profile's link stays reserved for you. You can also clear the copy in your browser at the same time.
Change my password checks your current password, stores the new password as a salted hash and ends every other login session. Log out on all devices ends every login session, including the one you are using.
Make new codes checks your password, replaces every old recovery code and shows the new set once.
Delete my account, after you enter your password, deletes your account and the data in the table above that belongs to it (logs, counters, Cloudflare's records, emails and our record of reports expire as listed there), logs you out and clears the copy in your browser. Your public profile's link stops working at once and stays blocked for everyone for 90 days.

Visit counts. "Don't count my visits" sets ss_nocount for 13 months. It stops our server counts, page step reports and Cloudflare Web Analytics from this browser. "Count my visits again" removes it. Global Privacy Control does not stop counting. The daily visitor code is deleted after the UTC day. Earlier aggregate totals remain. The page removes ss_src when counting is off. Otherwise, it lasts until the tab closes. It is not saved with your account.

You can also ask us to show you the data we hold about you and send you a copy, to correct it, or to delete it. You can switch your public profile off yourself on your profile at any time. If the age check refused you, you can ask for a person to review the decision (see If the age check refuses you). Withdrawing consent does not make our earlier use of the data unlawful.

Send requests to contact@sissysecrets.com. We reply within one month, and never later than 30 days. We may first ask you to confirm that the account is yours.

If you think we have mishandled your data, you can complain to the data protection authority where you live: in the EU or EEA, the authority of your country; in the United Kingdom, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

Under 18

SissySecrets is for adults only. If we learn that an account belongs to someone under 18, we close it and delete its data.

Changes to this notice

When we change this notice, the date at the top of this page changes with it. If a change affects what you consented to, we ask for your consent again before the change applies.

How age checks work

The law on age checks differs from place to place. When you open SissySecrets, we work out your country, and in the United States your state, from your IP address, and apply the rule for that place.

Where the law allows it, opening the lock at the entrance confirms that you are 18 or older.
Where the law requires an age check, you complete one with Didit before you come in, using a selfie, and an ID document only if your age is estimated close to the limit. A passed check is remembered on your device for 30 days.
Where the law requires a check at every visit, a passed check lasts until you close your browser, or until 60 minutes pass without activity.
If Cloudflare identifies your connection as an anonymising network (Tor), or we cannot tell where you are, we ask for an age check.
In some countries and US states SissySecrets is not available yet, because local law sets requirements we cannot meet yet.

SissySecrets asks for the check and Didit carries it out. Your selfie or document goes to Didit. We receive the result and the age Didit found, use the age only to check that you are 18 or older, and keep none of it. If Didit asks for an ID document, it compares the photo on it with your selfie; the age screen says so before you start. The privacy notice has the details.

If the age check refuses you

Didit's check decides automatically, from the estimate of your age or from your ID document, and nobody looks at it unless you ask. If you are 18 or older and the check refused you, you can ask for a person to review the decision. Write to contact@sissysecrets.com with "Age check review" in the subject, and add the reference shown on the refusal screen if you have it, so we can find your check. You can also tell us why you think the result is wrong.

A person at SissySecrets then reads your message and looks up the result of your check. We cannot change Didit's estimate, but we can explain the result. We reply within one month, and never later than 30 days. We offer this review for every refusal, whether or not the rules on decisions made automatically (GDPR Art. 22; nFADP Art. 21) require it for this check.

House rules

Every member agrees to these rules at sign-up. They apply to everything you post, send or share on SissySecrets.

Adults only. You must be 18 or older to join or take part.
Get consent for anything you share. Anyone who appears in, or is named in, something you post must have agreed to it.
Nothing that shows or suggests anyone under 18, in any form, drawings and role-play included.
Nothing recorded or shared without consent. That includes hidden-camera footage and faked intimate images of real people.
Keep other people's private information private. Never post anyone's legal name, address, workplace or photos that identify them, whether or not they are a member.
No offers or requests for prostitution, escort services or paid meetings.
No hate, harassment or threats.
No illegal content, and nothing that arranges or promotes illegal activity.
Respect stage names and privacy. Call members by the name they chose, and do not try to find out who anyone is outside SissySecrets.
On a public profile, choose a name and a link that do not copy another member or pretend to be SissySecrets or its staff, and that contain no explicit words, no slurs, no threats, no contact details or handles for other apps, no prices and nothing that suggests anyone under 18.

Public profile names and links are checked automatically against word lists each time you publish or change a public profile. The lists cover explicit words, words that suggest someone under 18, slurs and hate symbols, threats and words about suicide or self-harm, the names of terrorist groups, contact details, web addresses and handles for other apps, and prices or payment details. A name or link that fails the check is refused with a message, and nothing is published. If you think a name or link was refused by mistake, write to contact@sissysecrets.com with the name or link: we look at it within 7 days, and if the refusal was wrong, we change the lists.

Reported public profiles can be switched off: we take a public profile down when it breaks these rules or the law (see Reporting). Breaking these rules can also lead to closure of your account. Serious breaches lead to closure straight away. We report illegal material to the authorities. If you see something that breaks a rule, please report it.

Reporting content or an account

To report content or a member, email contact@sissysecrets.com. You do not need an account to report. Every public profile has a "Report this public profile" link that starts such an email, with the public profile's link in the subject. Please include:

the public profile's link, which starts with sissysecrets.com/@, or the name on the public profile
what is wrong, and which house rule or law you think it breaks
an email address where we can tell you what we decided; your name is not needed, and you can leave out your details altogether if the report is about material involving minors
a line saying you believe the report is accurate and complete

What happens after a report

We acknowledge every report within 2 days. The acknowledgement tells you when to expect a decision and what the possible outcomes are.
We decide within 7 days. A public profile reported as belonging to someone under 18, or as containing illegal content (such as content that sexualises children, terrorist content or threats), is taken down as soon as we receive a credible report, and we look into it afterwards. We also deal first with reports from people who are named or shown without their consent.
The possible outcomes: no action, when the public profile breaks no rule and no law; the public profile is taken down, so its link stops working; the account is closed, for a serious or repeated breach; and illegal material is reported to the authorities.
We tell you what we decided and what we did. If you do not want any more emails about your report, say so, and we stop writing to you about it.
The member hears about a report only if we take her public profile down or close her account. We never tell her who reported it, and we never pass on your name or email address.

If you think we are not meeting our duties under the UK Online Safety Act, for example on illegal content, on content harmful to children, or on reporting and complaints, write to contact@sissysecrets.com with "Complaint" in the subject. We acknowledge it within 2 days and answer within 30 days.

If your public profile was taken down

Your profile then says that your public profile was taken down after a report, its link stops working, and you cannot publish it again while it is down. We tell you why: by email if your account has one, otherwise when you write to us. To ask for a review, write to contact@sissysecrets.com with your public profile's link and why you think the decision was wrong. A person looks at the public profile again and decides within 7 days. If the takedown was wrong, we put your public profile back up and its link works again. If we close your account, we tell you why unless the law prevents us, and you can ask for a review in the same way.

If someone is in danger, or a crime is happening now, contact the police first.

Terms of use

By creating an account you agree to these terms and to the house rules.

The account and quiz are free.
You must be 18 or older and meet the age rule for where you are. Keep your password to yourself; you are responsible for what happens in your account.
SissySecrets is offered as it is. We cannot guarantee that it will always be available or free of errors, and features may change.
We can take down a public profile, or close an account, that breaks the house rules or the law, and we tell you why unless the law prevents us. You can ask for a review of that decision, or of a name or link the word lists refused (see If your public profile was taken down, and for a refused name or link, House rules), and if you think we have broken these terms, you can also go to court.
You can delete your account at any time on your profile, under "Privacy and data", with your password, or by emailing contact@sissysecrets.com with your username. By email we may ask you to confirm that the account is yours. Either way we delete your data as the privacy notice describes.
If we change these terms in a way that affects you, we will tell you before the change applies.