Session Zero

Privacy policy

Effective July 14, 2026

Session Zero is a dating app for the tabletop RPG community, built by a very small team that would rather earn your trust than mine your data. This policy explains what we collect, why we collect it, and the promises we make about it. We have tried to keep it short enough to actually read.

The short version: we collect what the app needs to work and keep you safe, and nothing else. We do not show ads. We do not sell your data or share it for advertising. We do not use your photos, messages, or profile to train AI models. When you delete your account, your data is deleted.

1. Who we are

Session Zero is operated by 1 Million Little Freaks LLC, a Pennsylvania (USA) limited liability company. We are the controller of the data described in this policy. You can reach us at privacy@sessionzero.love.

2. Where this policy applies

This policy covers the Session Zero mobile app and the sessionzero.love website, including the waitlist. Session Zero is currently offered in the United States.

3. What we collect

CategoryWhat it includes
AccountEmail address, a hashed password (we never see the plain text), your date of birth (used to confirm you are 18 or older, never displayed), and sign-in identifiers if you use Google or Apple to log in.
ProfileDisplay name, username, bio, up to six photos, and your character sheet: class, species, personality stats, campaign preferences. Also gender identity, pronouns, identity tags, and relationship structure (monogamous, polyamorous, ENM, and so on).
ContentMessages with your matches, quest (icebreaker) answers, community board posts and applications, and any reports you file.
LocationApproximate location from your device, with your permission, used to show you people and games nearby. Other members only ever see a distance, never your coordinates. Decline the permission and distance features simply won't work.
UsageLikes and passes, matches, and how you use the app (screens viewed, features used), collected through our analytics tooling to understand what's working.
TechnicalDevice type and operating system, IP address, app version, push notification token, and crash information.
SafetyBlocks, reports, and signals we use to detect bots and fake accounts, such as activity patterns.
PurchasesIf you buy a subscription, the purchase is processed by Apple or Google. We receive your subscription status and expiry. We never see or store your card number.

A note on sensitive data. Things like sexual orientation, gender identity, and relationship structure are considered sensitive information in many places. On a dating app built for the ENM, poly, and queer-friendly TTRPG community, sharing them is the point — but it is always your choice what to put on your profile, and by adding this information you consent to us using it solely to operate the service as described here. We never use it for advertising and never sell it.

4. How we use your data

We do not run ads, so none of your data is used for advertising. We do not sell or rent your data to anyone. We do not use your photos, messages, or any of your content to train artificial intelligence models, ours or anyone else's.

5. Your photos

Your photos stay yours. By uploading them you give us permission to host and display them to other members as part of running the service, and nothing more. We will not use your photos in marketing without asking you separately and explicitly. When you delete your account, your photos are deleted.

6. Who we share data with

RecipientWhy
Other membersYour profile (name, photos, character sheet, bio, distance, and the identity fields you chose to add) is visible to other members — that's how matching works. Your messages are visible to the people you send them to.
SupabaseOur infrastructure provider: database, authentication, file storage, and real-time messaging. Data is stored on Supabase's servers in the United States.
ExpoDelivers push notifications to your device.
PostHogProduct analytics that tell us how the app is used so we can improve it. We do not use analytics providers that resell data.
CloudflareHosts this website and protects the waitlist from bots.
Apple & GoogleSign-in, app distribution, and payment processing for subscriptions.
Law enforcementOnly when required by a valid legal process such as a subpoena or court order, or when necessary to protect someone's safety.
A future ownerIf the company is ever acquired or merged, user data would transfer as part of that transaction under the same commitments in this policy.

7. How long we keep it

We keep your data for as long as you have an account. You can delete your account any time in the app (Account → Delete account). Deletion removes your profile, photos, messages, matches, and quest answers.

Three things survive deletion, all for safety: block records (so people you blocked never see you resurface), records connected to bans or active safety investigations, and reports you were involved in, kept as long as needed to keep the community safe and to comply with law. Copies of data in our encrypted backups age out within 30 days.

8. Your rights

You can see and edit nearly everything we hold about you directly in the app. Beyond that, you have the right to request a copy of your data, correct it, delete it, or object to a use of it — email privacy@sessionzero.love and we will handle it. We may ask you to verify your identity first, because we don't want anyone else driving your data.

If you live in California or another US state with a consumer privacy law, those laws give you rights of access, deletion, correction, and portability, and the right not to be discriminated against for exercising them. Since we do not sell or share data for advertising, there is nothing to opt out of on that front.

9. Age requirement

Session Zero is for adults, full stop. You must be 18 or older, we collect your date of birth to enforce it, and we remove anyone we discover to be underage. If you believe a member is under 18, report them in the app and we will investigate.

10. Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect, so you have time to read them. The effective date at the top always tells you which version you're looking at.

11. Contact

Questions, requests, or complaints: privacy@sessionzero.love
1 Million Little Freaks LLC, Pennsylvania, USA