Privacy & cookies

Last updated: 21 October 2026

This is a translation of the Spanish original. If there is any discrepancy, the Spanish version prevails.

Draft pending legal review. Fill in the details highlighted in yellow before publishing.

Data controller

Christian Martínez Pérez. Contact: soporte@laruletacaliente.com.

What data we process and why

Legal basis

Performance of the contract (your account and Premium), compliance with the legal obligation to prevent access by minors (age verification), our legitimate interest in keeping the community safe (moderation) and compliance with legal obligations. In addition: the legal obligations of the Digital Services Act (notices of illegal content, statements of reasons and appeals); your consent for push notifications, which you can withdraw at any time in “My account → Notifications” or in your browser; and our legitimate interest in knowing how the site is used through anonymous statistics. Spicy mode and showing your compliments are based on your consent, which you can withdraw at any time by turning them off; the “Would you talk to that person again?” counters are based on our legitimate interest in improving matching and safety. The chilis, streak, challenges, badges and superpowers data are based on the performance of the contract (providing those features of your account) and on our legitimate interest in running them fairly and preventing abuse. The weekly ranking is based on our legitimate interest in the gamification of the service, with the option to opt out with “Don’t appear in the ranking”. The promotions (invitations, ranking prizes and, if one is ever offered, a welcome trial) are based on the performance of the contract (providing the promotion) and on our legitimate interest in preventing fraud. Coins, tips and withdrawals are based on the performance of the contract (selling the coins, handling tips and paying out your earnings), on compliance with legal obligations (reporting to the Spanish Tax Agency the details of people who get paid through the site under the EU DAC7 rules, keeping accounts and invoices, and preventing fraud and money laundering where applicable) and on our legitimate interest in preventing fraud, chargebacks and abuse of tips.

How long

For as long as you have the account, with these limits: messages kept as evidence of a report are deleted 180 days after it is resolved, and the sign-up IP after 90 days. Your chat history is deleted after 30 days, and unanswered friend requests too. If you delete the account, we erase your data; payments are kept without personal data for tax purposes and, if the account was banned, we keep only an encrypted code of your email to prevent you from signing up again. Security backups rotate automatically, so deleted data disappears from them within 14 days at most. Contact tickets, notices of illegal content and appeals are deleted 2 years after they are closed. The push subscription is deleted when you turn notifications off, when your browser tells us it has expired, or when you delete the account. Compliment counters, the “Would you talk to that person again?” counters and the spicy mode settings are kept while the account exists, are deleted with it and are included in “Download my data”. The list of who gave you ❤️ is deleted after 24 hours; the other chilis, streak, counters, badges, weekly progress and superpowers data are kept while the account exists, are deleted with it and are included in “Download my data”. Promotions data are kept while the account exists and are deleted with it, except, if a welcome trial is ever offered, the hash of the email used for it, which is kept after the account is deleted only so the trial is given just once; it cannot be reversed to obtain your email. Coin purchases, the tips record and withdrawal requests, with the tax and bank details, are kept for the period required by tax, accounting and platform-reporting law (in Spain, generally up to 6 years), even if you delete your account; they are then deleted. Unused coins and earnings not withdrawn are lost when you delete your account.

Who we share it with

With Segpay to process payments, with Veriff to verify age, with our email provider, with the translation service (only the text of the messages you ask to translate), with our hosting provider and with the authorities when the law requires it (for example, in cases involving minors). If you turn on push notifications, their content passes encrypted through your browser vendor’s push service (for example Google, Mozilla or Apple). If you use coins and tips: Segpay processes coin purchases; Veriff verifies your identity before a withdrawal; your bank and ours handle the transfer; and we report to the Spanish Tax Agency (AEAT) the details of people who get paid through the site and the amounts, under the DAC7 rules (form 238), which may share them with the tax authorities of your EU country. The person who receives your tip only sees the amount, not your details.

With Cloudflare, which manages our domain and the anti-bot check on the signup form (Turnstile; it processes your IP address and technical data of your browser). Our servers are in the European Union (Netherlands). Some providers (Cloudflare, Google if you sign in with it, Segpay) may process data in the United States: they do so under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can download your data and delete your account yourself from “My account”. You can request access, rectification, erasure, objection, restriction and portability by writing to soporte@laruletacaliente.com. You can also file a complaint with the Spanish Data Protection Agency (aepd.es) or the data protection authority of your country.

Cookies and storage

We do not use advertising or tracking cookies. We only store in your browser what is essential for the site to work: your logged-in session, your language and that you have confirmed you are an adult. The font is served from our own server. If you turn on notifications, your browser also keeps the push subscription. The usage statistics do not use cookies. The full list, with names and durations, is in our Cookie policy. If we show ads from advertising networks, their cookies are only used with your consent; banners from our own advertisers are served by us without cookies or personal data.

Security

The connection to the site is encrypted (HTTPS), passwords are stored encrypted, and video and audio travel end-to-end encrypted between the two people. The site only loads its own code and includes no third-party trackers. Moderator and administrator actions are recorded in an audit log (the last 500 entries: action, time and administrator IP).