Privacy Policy
Effective from 5 November 2026. This policy explains what personal data we process when you use naughtyirish.com, why, on what legal basis and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Irish Data Protection Act 2018.
1. Controller
Questions about our processing and requests to use your rights can be sent through the contact page.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Username, email address and password (stored only as a cryptographic hash) | Creating and managing your account, confirming your email | Contract (Art. 6(1)(b)) |
| Details you write in an ad yourself: text, photos, phone number, WhatsApp, Viber, Telegram, email, town, age | Publishing the ad | Contract and your consent |
| Public details in ads taken from publicly available classifieds sites: text, photos, contact number, town | Showing the ad on the Website | Legitimate interest (Art. 6(1)(f)); you can object and have the ad removed, see section 6 |
| Photos and comments in the nude photo gallery | Publishing in the gallery | Consent of the uploader (confirmation of 18+ and agreement) |
| Details in the contact form and reports: name, email, message | Answering questions, handling reports | Legitimate interest and legal obligation |
| IP address, time, browser details, country (via Cloudflare) | Security and preventing abuse (votes, ratings, reports, posting, login attempts), troubleshooting | Legitimate interest |
| Approximate town level location based on the IP address (Cloudflare) | Showing ads and towns near the visitor | Legitimate interest; the location is not stored and not linked to any person |
| Usage statistics (Google Analytics 4): pages visited, clicks, device, approximate country | Improving the Website | Legitimate interest |
3. Recipients
- the web host and server (TMD Hosting) storing the Website and the database;
- Cloudflare, Inc. (network, protection and caching);
- Google Ireland Ltd (Google Analytics 4);
- public authorities, where the law requires it.
When you click a link to a partner service (dating) you leave the Website; the partner then processes data under its own policy. We do not send any personal data to partners, only a technical identifier for where the link was placed. Some recipients may transfer data to countries outside the EU/EEA on the basis of the European Commission's standard contractual clauses or an adequacy decision.
4. Cookies and local storage
We use a session cookie for logging in, a cookie showing that you are the author of an ad (so that you cannot rate your own ad) and your browser's local storage (localStorage) to remember your choices, for example that you closed the cookie bar or voted. Google Analytics sets its own cookies for statistics. You can delete cookies and local storage in your browser settings.
5. How long we keep data
- account: until you delete it;
- ads: until you or we delete them (ads have no time limit);
- security and abuse logs: normally no longer than twelve months;
- block lists (numbers, emails) used against abuse: as long as needed for that purpose.
6. Your rights
You have the right to request access, rectification, erasure, restriction and data portability, and to object to processing based on legitimate interest. Ads with your number or your photos published without your consent are normally removed within 24 hours of a report. You also have the right to lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, www.dataprotection.ie.
7. Security
The Website uses an encrypted connection (HTTPS), passwords are stored as hashes and access to the administration is restricted and protected against repeated login attempts.
8. Minors
The Website is only for people over 18. We do not knowingly process data about minors and remove such content immediately.
9. Changes
We may update this policy. The current version is always on this page.