[ privacy.lol ]
the privacy promise.
last updated: May 11, 2026
the promise.
if you submit someone's number to ilikeyou.lol, they do not hear a single thing from us unless they have already submitted yours. no notification. no breadcrumb. no "someone is thinking about you." nothing. that asymmetry is the whole product.
what we store.
- an HMAC-SHA256 hash of your number (not the number itself, and not reversible)
- the last four digits and area code, so you can recognize your own pending crushes
- your number encrypted with an app-side key, used solely to send the reveal SMS if a match happens
- timestamps for verification, payment, matches, and revocations
- sms delivery receipts (carrier ID, status, no message bodies)
we do not store names, emails, photos, or any other identifying information. we do not run third-party analytics on phone-number data. we do not sell anything to anyone.
retention.
pending (unmatched) crushes auto-expire after 90 days. you can revoke any pending crush yourself from /me. you can delete every record of your number, including any pending refund, from /data-deletion.
payments.
if there is a verification fee, it's processed by Stripe as a guest checkout. we store the Stripe payment intent ID and customer ID to enable refunds. we do not see or store your card details.
contact.
questions: hi@ilikeyou.lol.