Privacy policy
Last updated: 13 November 2026
Who is responsible
Pactful is the controller for the personal data described here (Art. 4(7) GDPR). Email: privacy@pactful.net
What we collect
What you tell us in the waitlist form: first name, email, age range, city, languages, your goal and how you'd like to work together, your social profiles if you add them, and, if you choose to share them after a match, your phone number or messenger handle, and anything else you choose to share. Optionally a photo and your gender and buddy preference, only with your explicit consent. We also store when you gave each consent.
Why we use it
To pair you by hand with an accountability partner, to email you about your signup, your intro and short check-ins, and to understand demand in different cities. Legal basis: your consent and the performance of our service (Art. 6(1)(a) and (b) GDPR; Art. 9(2)(a) GDPR for gender data, if you share it).
Newsletter
If you sign up for the Pactful newsletter, we store your email address, language, when and where you signed up and when you confirmed. We only send it after you’ve confirmed by clicking the link in our email (double opt-in). Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe with the link in every newsletter; we then delete your address. Unconfirmed sign-ups are deleted after 30 days.
Pactful Dinners
If you sign up for news about Pactful Dinners, we store your first name, email, city and the languages you’re happy to chat in, to email you about dinners. Your sign-up only counts after you confirm it by email; unconfirmed sign-ups are deleted after 30 days. Every email has a link to leave the list, which deletes all your answers.
Who sees what
Only our founder has access to all of your data, including all your answers. The person we suggest to you sees your first name, photo (if given), city, goal, languages and preferences, and our note on why we paired you. Your email address and any social profiles you added are shared with them only after you both say yes. After that, you can add your number or socials on your match page, and we pass them on to your buddy by email. Your gender is never shown to them.
Service providers
We use these processors, each under a data processing agreement (Art. 28 GDPR): • Database and file storage: Supabase (EU, Frankfurt) • Email: Resend (EU region) • Hosting: Vercel (EU region) • Website analytics: Google Analytics, only if you agree (see below) • Draft translations of our personal note to each pair: Anthropic's Claude API (only that note is sent; processing may happen outside the EU under Standard Contractual Clauses)
Website analytics (Google Analytics)
If you click “Accept” in the cookie banner, we use Google Analytics 4 to understand how people find and use the website: which pages are visited, how long, from which kind of device and browser, roughly from which country or city, and which website sent you here. This helps us improve the site. Without your consent, Google Analytics is not loaded at all. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has found to give an adequate level of protection (Art. 45 GDPR); Standard Contractual Clauses apply as well. Google Analytics sets cookies with a random identifier (_ga and _ga_<ID>, kept for up to 2 years). Google Analytics 4 does not store full IP addresses for visitors from the EU. We have turned off Google Signals and advertising features, and analytics data is deleted after 2 months. Legal basis: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time with “Cookie settings” at the bottom of every page; we then stop loading Google Analytics and remove its cookies. More in Google's privacy policy: https://policies.google.com/privacy
Cookies and similar technologies
Without your consent, the website sets no cookies. We remember your choice in the cookie banner in your browser's local storage, so we don't ask again on every page; this is necessary to respect your choice (§ 25(2) TDDDG). If you start the sign-up form and don't finish it, your answers so far are kept in your browser's local storage on your device, so you can pick up where you left off. They aren't sent to us until you submit the form; consents, your photo and your gender are never kept. The saved answers are deleted when you submit, when you click “Start over”, or after 14 days. Only if you accept analytics are the Google Analytics cookies described above set.
How long we keep it
As long as you're on the waitlist or in a pact. Inactive waitlist entries are deleted or anonymised after 12 months; we email you first. Photos are deleted when you leave or ask us to. Analytics data is deleted after 2 months.
Your rights
You have the right to access your data (Art. 15 GDPR), to correct it (Art. 16), to have it deleted (Art. 17), to restrict processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing (Art. 21). You can withdraw any consent at any time, without affecting what happened before (Art. 7(3)). Every email we send includes a way to delete your data, or just write to privacy@pactful.net. You can also complain to a data protection authority, for example the one where you live, or the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), which is responsible for Pactful.