Privacy Policy
Last updated: 9 November 2026
This policy explains what personal information BloodyLoser.com (“we”, “us”) collects when you use this site, why we collect it, who we share it with and what your rights are. We are the controller of this information under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. What we collect
If you join the Bloody Loser Society: your name and email address. There are no passwords: each time you join or log in, we email you a one-time code that works for 10 minutes. We keep only a scrambled (hashed) copy of the code, which we cannot read, and delete it once it is used or has expired. We also keep the date you joined, when you last logged in, whether your account is active or suspended, and any notes our team adds to your account. For each device you are logged in on, we keep the type of browser and device (for example “Chrome on Windows”), its IP address, the country it is in (as reported by Cloudflare) and when it was last active, so you can see where you are logged in under Login activity in your account and log out of any device. If you join using a friend’s invite link, we record which member invited you, so we can give them their referral discount; that member can see your first name in their account. Each member also has a personal invite code.
If you create a dating profile: the profile name, date of birth, gender, who you are interested in, what you are looking for, town or city, the text you write and, if you add them, a photo and links to your Instagram, Facebook, LinkedIn, TikTok or X profiles. We resize your photo and remove hidden details from it, such as where it was taken, and keep it in a private store that is not on the public website. Your gender and who you are interested in can reveal your sexual orientation, which the law treats as special category information, so we only keep it with your explicit consent, which you give when you create the profile. Other Society members who have a dating profile can see your profile, including your photo, with your age instead of your date of birth, unless you hide it. Members can report a profile to us; we receive the reporting member’s name and their reason. We also keep the messages you send and receive, who you like and who likes you, and who you block. Only you and the member you are talking to can see your messages. Our team looks at them only to investigate a report or where the law requires it. Your email address is never shown.
If you share a story: its title and text, and the name on your account, which is shown with the story when we publish it.
If you apply through the Sell Differently page: your name, email address, business or studio name, what you make, a link to your work and what you would make for us.
If you show us your talent: your name, email address, the kind of talent, any stage, artist, band or team name, the title of what you send, a link to it and anything else you tell us about it.
When you visit any page: your IP address and basic technical details about your browser and device are passed to our hosting and security providers, as they are for any website. When you send a form, we briefly keep a scrambled version of your IP address to stop spam and repeated failed logins. It is deleted automatically within two days.
If you accept analytics cookies: Google Analytics collects information about how you use the site, such as the pages you visit, roughly where you are and what device you use. It is used only after you click Accept in the cookie banner.
2. Why we use it, and our legal reasons
- To run your Society account and let you log in and see your stories: this is needed to provide the account you asked for (contract).
- To keep your dating profile and show it to other members: your explicit consent, which you can withdraw at any time by deleting the profile.
- To review and publish your stories with your name: to provide the service you asked for (contract) and with the permission you give when you send the story.
- To read and reply to maker applications and talent submissions: our legitimate interest in finding people to work with, and the steps you asked us to take before any agreement.
- To keep the site safe, stop spam and misuse, and suspend accounts that break our Terms of Service: our legitimate interest in protecting the site and its members.
- To understand how the site is used through Google Analytics: your consent, which you can withdraw at any time.
- To meet legal obligations, for example if the law requires us to keep or share information.
We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
3. Cookies
- bl_member (essential): keeps you logged in to your Society account. It lasts up to 30 days, or until you log out.
- bl_ref (essential for invites): set only when you open a member’s invite link, so that if you join we know who invited you. It holds that member’s invite code, lasts 30 days and is deleted once you join.
- bl_cookies (essential): remembers whether you accepted or rejected analytics cookies, for 6 months.
- _ga and _ga_* (analytics, only if you accept): set by Google Analytics to tell visits apart. They last up to 2 years.
You can change your choice at any time with “Cookie settings” at the bottom of every page, or delete cookies in your browser.
4. Who we share it with
We share information only with companies that help us run the site, and only as much as they need:
- Amazon Web Services, which hosts the site and its database on servers in the United Kingdom.
- Cloudflare, which delivers the site and protects it from attacks. Every visit passes through Cloudflare.
- Google, which provides the site’s fonts (Google Fonts, which receives your IP address when the page loads) and, if you accept analytics cookies, Google Analytics.
Stories we publish, with the name on your account, can be seen by anyone. We may also share information if the law requires it, or to protect people’s safety or our legal rights.
5. Transfers outside the UK
Cloudflare and Google may process information in the United States and other countries. When this happens, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
6. How long we keep it
- Society accounts: until you ask us to close your account, or we close it. Login sessions, with their device, IP address and country details, end and are deleted after 30 days, or when you log out of that device or of all devices.
- Dating profiles, including photos, messages and likes: until you delete the profile or your Society account. Deleting your profile deletes your photo, your messages (for both sides of each conversation) and your likes straight away. Blocks are kept until you delete your account, so the people you blocked stay blocked.
- Stories: published stories stay on the site until you ask us to take them down. Stories we decide not to publish are deleted within 12 months.
- Maker applications and talent submissions: up to 2 years after we last heard from you, unless we start working together, when the details become part of that working relationship.
- Login codes: 10 minutes at most, or until used.
- Spam and login protection records: two days at most.
- Google Analytics data: up to 14 months.
7. Your rights
You have the right to ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. We will reply within one month.
If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Age
Society accounts are for people aged 18 or over. If we learn that we hold information about someone under 18 through an account, we will delete it.
9. Security
The site uses encrypted connections (HTTPS). Society accounts have no passwords: you log in with a one-time code sent to your email, so please keep your email account secure. Only our team can see member details. No system is completely secure.
10. Changes to this policy
We will update this policy when we change how we use personal information, for example when we add new features. The date at the top shows when it last changed.