Privacy policy

Last updated: September 25, 2026

Who we are

Charos.org lets women anonymously signal men who constantly and aggressively flirt with every woman they meet. Contact for anything related to your data: support@charos.org.

What we store about you

  • Your email address, to send you sign-in links. Links expire after 15 minutes.
  • Your declaration that you are a woman and accept the terms, with its date.
  • Your Instagram account: its Instagram-scoped identifier and @username, received from Meta when you send us your verification code by DM. We use it to make sure one Instagram account is used by one person only. We don't store the content of your messages, and we reply only to confirm the verification.
  • Your reports: the accounts of the men you signal, and the approximate location you give (country and city).

None of this is ever shown publicly. Other users never see who signaled whom.

What we store about reported men

Only the usernames of their public social accounts (never a name), and the approximate location given in reports (country and city, stored as the city's coordinates, never a precise address), which is not displayed. A man is only listed once several different women have signaled him, and he stops being listed after a set time.

To check that an account exists and show its profile picture, our server reads the account's public profile page on its network. Results and pictures are cached for up to 7 days. Anyone can ask for a profile to be removed with the removal form.

Cookies and analytics

  • A session cookie keeps you signed in. It's required for the site to work.
  • Cloudflare Turnstile checks that requests come from a human, to block spam and abuse.
  • PostHog (EU servers) measures how the site is used and reports errors, so we can improve it. When you're signed in, these events are linked to your account ID and email.

Who processes your data

  • Infomaniak (Switzerland): hosting, database and emails.
  • Meta: delivers the Instagram messages you send us for verification.
  • Cloudflare: bot protection.
  • PostHog (EU): analytics and error reports.

We never sell your data and never use it for advertising.

How long we keep it

Your account data and reports are kept as long as your account exists. Sign-in links are deleted once used or expired. Profile checks are cached for up to 7 days.

Your rights and deleting your data

You can ask to access, correct or delete your data at any time. To delete your account and all its data (email, linked Instagram account, reports), email support@charos.org from the address you signed in with. We delete it within 30 days and confirm by email.

If you think your data is not handled properly, you can also complain to your data protection authority.

Credits

City names: GeoNames, licensed under CC BY 4.0.