Guidelines for law enforcement

1. How to contact us

Send all requests by e-mail to info@yestonite.com with the subject "Law enforcement request". Send them from an official government e-mail address, so we can verify where they come from. We read requests every day and answer as quickly as we can, normally within a few working days. Emergency requests are handled first (see section 4).

2. What we need

We disclose member information only when the law requires or allows it. In general we need:

• for basic account information (for example the e-mail address and the date the account was created): a valid legal request under Dutch or EU law;
• for content (for example messages and photos): a court order, warrant or equivalent order that is valid under Dutch or EU law;
• for authorities outside the European Union: a request through the proper international channels, such as a mutual legal assistance (MLAT) request via the Dutch authorities.

Every request should include: the issuing authority, the name and contact details of the requesting officer, the legal basis, the specific account (the e-mail address, or the profile link or screenshot), the information requested, and the period it covers. We may refuse requests that are unclear or too broad, and ask for more details.

3. What information we may have

Depending on how a member used YesTonite and how long ago, we may have:

• account details: e-mail address, sign-in method, date of registration, first name, date of birth;
• profile content: photos, the approximate area set by the member, interest for tonight, search preferences;
• messages and photos sent in chats, events hosted or joined, reports and moderation decisions;
• technical data: IP addresses and countries of recent sign-ins, device type and app version, last activity;
• payment records: what was bought, when and the amount (we never see full card numbers; card payments are processed by Stripe, app purchases by Google Play).

We do not store exact locations. When an account is deleted, its profile is removed immediately and the remaining account data is kept for up to 6 months for safety and legal reasons, then deleted. Payment records are kept for 7 years as Dutch tax law requires. Our Privacy Policy lists all retention periods.

4. Emergencies

If there is a risk of death or serious physical harm to someone, write to info@yestonite.com with the subject "EMERGENCY: law enforcement request" and explain the emergency. We may then disclose the information needed to prevent harm without waiting for a court order, as the law allows.

5. Preserving data

While you obtain formal legal process, you can ask us to preserve the data of a specific account. We keep a snapshot of it for 90 days, which can be extended once on request.

6. Telling members

Our policy is to tell members when their data is requested, unless the law, a court order or the request itself forbids it, or telling them would put someone at risk or hinder an investigation, for example in cases of child exploitation or an emergency.

7. Child safety and illegal content

We report child sexual abuse material and serious threats to the authorities ourselves, including to NCMEC and the Dutch police, without waiting for a request. Our Child safety standards describe this in detail.