Privacy policy

Last updated: 2026-07-24

KeptInCheckMate handles sensitive, personal information. This page explains what we collect, why, and how it's protected. If anything here is unclear, please get in touch.

What data we collect

  • Account data: name, email address, a securely hashed password (never the password itself), your role (keyholder or partner), and an optional profile picture.
  • Device data: the chastity devices you register - manufacturer, model and size fields - linked only to your account.
  • Lockup history: when you lock in and release a device, plus any reason/description you provide when releasing.
  • Partner connections: if you connect with a partner or keyholder, the relationship between the two accounts and its status.
  • Messages and chastity contracts: any messages or chastity contract documents you exchange with a connected partner/keyholder through the app.
  • Contact form submissions: the name, email and message you choose to send us via the Contact page.

How it's stored and protected

  • Data is stored in Google Cloud and test data never mixes with real user data.
  • Passwords are never stored in plain text - they're hashed with PBKDF2-HMAC-SHA256 and a unique random salt per user.
  • Your session is kept in an HttpOnly, SameSite=Lax cookie (marked Secure whenever served over HTTPS), which JavaScript on the page cannot read.
  • Access to your data is restricted to your own account - other users can only see information you've explicitly shared by connecting with them as a partner/keyholder.

Third parties

We do not sell or share your data with advertisers, and we don't run any tracking or analytics scripts. The app does load a few common open-source libraries (Bootstrap, jQuery, Font Awesome, Chart.js) from public CDNs to keep the app lightweight; like any web request, those CDN providers may see the requesting IP address as part of normal web traffic, under their own privacy policies.

Your rights

We aim to follow the core principles behind data protection regulations such as the GDPR: we only collect what's needed to run the app, we keep it only as long as your account is active, and you can ask us at any time - via the Contact page - to receive a copy of your data or have your account and associated data deleted.

This policy may be updated as the app evolves; significant changes will be reflected here with an updated date at the top of this page.