Effective date: October 5, 2026 · Last updated: October 21, 2026
The short version
- You’re in control of what you share. Every profile detail has its own Show switch. Health details start hidden. Hidden means hidden: other members never see it, and member search never finds it.
- Members only. Profiles, photos, posts, messages and member search are only for signed-in, verified members who are 18 or older. Search engines and the public never see them.
- We don’t sell your data, show ads, or use advertising trackers.
- Your messages are private. Our tools don’t let administrators read conversations, unless one of you reports it. Then the site team can read that one conversation to look into the report.
- Photos lose their location data. We re-save every photo you upload, which strips camera and GPS information.
- Chastity verification photos are locked down. They’re encrypted, only you and your keyholder can see them, and they’re deleted 90 days after you take them.
- Leaving is easy. You can download a copy of your data or ask us to delete it from your Account tab.
- No AI and no automated decisions. People, not algorithms, review reports, and we never feed your content to AI tools.
The rest of this statement explains the details.
1. Who we are
Central Ohio Leather & Beyond (“COL&B”, “we”, “us”) is a volunteer community project, not an incorporated company or registered nonprofit. It runs colandb.com, a community site for Central Ohio’s queer leather, kink and BDSM communities, with a public events calendar and a private member area. The project’s organizer is responsible for how your information is handled.
Contact: foxxyforce@gmail.com. Email is the quickest way to reach us. If you need a postal address for a legal request, email us and we’ll provide one.
2. Who this applies to
This statement covers colandb.com, including the public calendar and the member area. It covers anyone who visits the site, subscribes to event updates, RSVPs, submits an event, or creates an account.
You must be 18 or older to create an account. We ask for your date of birth when you sign up and turn away anyone under 18. We don’t ask for ID documents, so we keep no copies of them. If we learn that someone under 18 has an account, we close it and delete their information. Adults-only means adults-only; please tell us at foxxyforce@gmail.com if you see someone who shouldn’t be here.
3. What we collect
When you use the public calendar (no account needed)
| What | Why |
|---|---|
| Event subscriptions: your email address and which updates you chose | To send you the event emails you asked for. Every email has a way to unsubscribe. |
| RSVPs and waitlists: name, email, number of guests, the event | So organizers know who’s coming, and to contact you about that event. |
| Event submissions: your name, email and the event details you send | To review and publish events, and to let you edit your submission later with a private link. |
| Volunteer sign-ups: name, email, phone (if you give it), availability, interests, message | To match you with volunteer opportunities. |
| Web push notifications (only if you allow them in your browser) | To send event announcements. You can turn them off in your browser at any time. |
When you create an account
| What | Why |
|---|---|
| Username, email address, password (stored as a one-way hash, so nobody, including us, can read it) | To run your account and let you sign in. |
| Email verification | To confirm your address belongs to you. |
| Date of birth | To confirm you’re 18 or older and to work out your age if you choose to show it. Your date of birth is never shown to anyone, never searchable, and can’t be changed by you after sign-up (contact us to correct it). If someone gives a date under 18, we record that the account was turned away. |
| Display name | How other members see you. It’s always shown to signed-in members. We suggest a scene name you don’t use elsewhere online, rather than your legal name. |
Your profile (all optional)
You choose what to fill in, and each item has its own Show switch:
- About you: bio, pronouns, location (city, region and country only, never a street address), hosting, how active you are, availability.
- Identity: gender, orientation, roles, position, expression.
- Stats: age (calculated from your date of birth, only if you choose to show it), height, weight, body type.
- Scene: looking for, not looking for, interests.
- Kinks and limits: kinks (with how much and giving/receiving), hard limits.
- Health and safer sex: safer-sex practices, last tested, substances. These start hidden even after you fill them in, and you decide whether to show them.
- Photos: a profile photo and a cover image.
Before you share anything, remember that other members can screenshot or remember what you show them. Leave out anything you wouldn’t want seen outside the site.
What you do in the member area
- Dynamics: relationships you propose or accept with other members (for example Keyholder / chastity wearer). Either of you can end one at any time.
- Homework: programs a member you’re in a dynamic with sets for you, your daily logs and proof (text, and photos that are encrypted and deleted 90 days after the day logged), their reviews, and the consequence agreements you both see.
- Chastity tracking: locks you start, your keyholder’s settings, verification photos (encrypted, and deleted 90 days after you take them) and their daily codes, hygiene openings, releases and unlocks, and any private photo links you make (when you made each one, when it stops working, and how many times it was viewed). If you turn on end-to-end photos, we also keep your public key and your private key locked with your photo passphrase, which we never see.
- Consent to keep intimate photos: when you agreed, before your first chastity or homework photo.
- Feed: your posts and photos, the event you tag, likes, and reports you make.
- Messages: your conversations, message requests, the members you block, and reports you make.
- Your calendar: events you add with “Add to my calendar”, whether you’re going or interested, and who can see each one. Marking an event Going also RSVPs you if the event takes RSVPs here.
- Follows and nods: who you follow, who follows you, and nods you send and receive.
- Member search settings: whether you’ve hidden yourself from search.
- Notifications and preferences: your notification choices and time zone.
Collected automatically
- Cookies and browser storage. Sign-in cookies keep you signed in. A cookie remembers that you confirmed you’re 18 or older, so the age notice doesn’t keep appearing. The accessibility widget remembers your display choices (such as text size) on your device. We don’t use cookies for advertising or tracking.
- Security log. To protect the site, a security log records sign-ins, failed sign-in attempts and changes made by administrators, with the IP address and browser used. It’s deleted after 30 days.
- Server logs kept by our hosting provider and by Cloudflare, which protects the site and helps it load quickly (IP address, browser, pages requested, time), for security and troubleshooting.
- No analytics. We don’t use Google Analytics or any other analytics that track you.
- Fonts. Pages load fonts from Google Fonts, which receives your IP address to deliver them.
- Do Not Track and Global Privacy Control. We don’t track you across other sites or sell your data, so there’s nothing for these signals to switch off.
4. Sensitive information
Much of what members share here is sensitive: sexual orientation, sex life and kinks, health and HIV-prevention details, photos, and relationships. We treat all of it that way:
- It’s your choice. Nothing beyond your display name, date of birth and email is required.
- Health details start hidden.
- It’s never public. Member content is only shown to signed-in, verified adult members. Member pages tell search engines not to index them, and private photos are served only to people allowed to see them.
- Only shown answers are searchable. Member search only matches what you show to all members, so a hidden or connections-only answer can’t be found by searching.
- We never sell it, rent it, or use it for advertising.
5. Who can see what
| Your information | Who can see it |
|---|---|
| Profile items switched on | Signed-in, verified members. |
| Profile items switched off | Nobody else. Older profiles may also have items set to My connections (members you’re in an active dynamic with). |
| Date of birth, email, password | Nobody else. Site administrators can see your email address. |
| Display name | Signed-in members. |
| Feed posts | All members, or only your connections, as you choose for each post. |
| Messages | Only you and the other member, unless one of you reports the conversation (see “Safety and moderation”). |
| Homework and its proof photos | You and the member who set it, while your dynamic is active. When a dynamic ends, they lose access straight away. Proof photos are encrypted and deleted 90 days after the day logged. |
| Chastity verification photos | You, and your keyholder while your dynamic is active. Site administrators have no screen that shows them. If you make a private link to one photo, anyone you give that link to can see that photo until the link stops working. |
| Events on your calendar | Who you choose for each event: all members, your dynamic partners (members you’re in an active dynamic with), or only you. Followers are told you’re going only if they’re allowed to see that event. |
| A “Locked” badge on your profile | Members, only if you turn it on. |
| RSVPs | The event’s organizers and site administrators. A public headcount may be shown, but names never are. |
Blocking. If you block someone, neither of you can see the other’s profile, posts or conversation, follows and nods between you are removed, and any dynamic between you ends. They aren’t told.
Site administrators. Our member area’s tools don’t let administrators read hidden profile answers or private messages. A small number of volunteer administrators, and our hosting provider, have technical access to the server and database. They use it only to keep the site running, to look into a report, or when the law requires it.
6. How we use your information
- To run the calendar and the member area, and to show members what you’ve chosen to share.
- To send the emails and notifications you ask for, plus account emails such as verification, password resets and privacy requests.
- To keep the community safe: age checks, reviewing reports, enforcing blocks, and limits that stop spam (for example on new message requests and nods).
- To keep an audit log of important account events (for example sign-up, changes to who can see your profile, reports, privacy requests). The log records that something changed, not your personal details, so it can’t become a second copy of your profile.
- To meet legal obligations.
We don’t use your information for advertising, profiling for marketing, or automated decisions about you. We don’t use AI or machine learning on your profile, photos, posts or messages, and we don’t give your content to anyone to train AI. Reports and moderation decisions are made by people. If you think a decision about your account was wrong, email foxxyforce@gmail.com and someone other than the person who made it will review it where we can.
7. Who we share it with
We don’t sell or rent personal information, and we don’t share it for advertising. We only use service providers that help us run the site, and only for that purpose:
| Provider | What for |
|---|---|
| Elementor (Elementor Hosting) | Hosting the site and its database, and optimizing images in the site’s media library (event and page images; member photos aren’t stored there). |
| Cloudflare | Protecting the site from attacks and helping it load quickly. Sees your IP address and the pages you request. |
| Brevo | Sending account and event emails, and web push notifications if you allow them. We don’t use Brevo’s marketing tracking, and we don’t copy member accounts into Brevo. |
| Google Fonts | Delivering fonts (receives your IP address). |
Event organizers see the RSVPs for their events.
Legal requests. We don’t hand over member information just because someone asks, including the police. We’ll only disclose it when legally binding process requires it, such as a subpoena, court order or warrant. We’ll check that the request is valid and push back on anything too broad. Unless the law forbids it, we’ll tell you first so you can challenge it. In an emergency involving a risk of death or serious harm, we may share the minimum information needed to prevent it.
If COL&B changes hands or closes, we’ll tell members before any data moves, and you’ll have the chance to delete your account first.
8. Safety and moderation
- Reports. You can report a post, a conversation or a member. When you report a conversation, the site team can read that whole conversation to look into it. They can’t read any others. Opening a report is recorded in the audit log. The report email we receive contains a link, not the messages.
- Intimate images shared without consent. Anyone, member or not, can report one on our Report an intimate image page. We keep the report (your contact details, where the image is, your statement and signature) and act on valid reports within 48 hours. The site team can delete a reported private photo without viewing it. If an image may show someone under 18, we report it to the National Center for Missing & Exploited Children (NCMEC) as US law requires.
- Blocks work as described in section 5.
- Message requests. Members you’re not connected with can send you at most three messages until you accept. You can turn requests off. Requests are limited per day to stop spam.
9. Photos and location
- Every photo you upload, including profile, cover, feed, homework proof and chastity verification photos, is re-saved by our server, which removes camera details and GPS location.
- Profile photos follow your Show switch. Feed photos follow the post’s audience. Homework and verification photos are visible only to the people in that dynamic.
- Chastity verification photos are encrypted before they’re stored, with a separate key for each member’s lock. The key is kept outside the database, so a copy of the database or a database backup on its own can’t show them. Each photo is deleted 90 days after you take it; your lock history keeps the entry and notes that the photo was removed.
- Your consent comes first. Before your first chastity or homework photo, we ask you to agree to how it’s kept. You can withdraw at any time by deleting your photos, and you can download or delete any of them yourself: chastity photos under Your photos on the Chastity tab, homework photos under that day’s log. Homework proof photos are encrypted and deleted after 90 days too.
- Optional end-to-end photos. On the Chastity tab you can turn on end-to-end encryption with a photo passphrase only you know. Your photos are then encrypted on your device, for you and your keyholder, before they’re sent, and nobody else can decrypt them, not even the site or anyone holding a copy of it. If you forget the passphrase, those photos can’t be recovered. Private links to these photos carry the key in the part of the link after “#”, which browsers never send to us.
- Showing a verification photo to someone else. Your daily code is only for writing on paper in the photo; it isn’t a password and doesn’t open anything. To show a photo to someone who isn’t your keyholder or a member, make a private link from Your photos on the Chastity tab. It shows that one photo, needs no account, stops working after 1 hour, 1 day or 7 days (or after one view, if you choose), and you can turn it off at any time. You can see how many times it was viewed, and you’re told the first time it’s opened. The person who opens it could still screenshot it, so only share with people you trust.
- Your location is whatever city, region and country you type in. We don’t collect precise location from your device.
10. How long we keep it
| What | How long |
|---|---|
| Your account and member content | Until you delete it or ask us to (see below). |
| Chastity verification photos | 90 days after you take them. The entry in your lock history stays and says the photo was removed. |
| Homework proof photos | 90 days after the day logged. The log entry stays and says the photo was removed. |
| Reports of intimate images shared without consent | 3 years, for safety and legal reasons. Not deleted on request. |
| Private photo links | They stop working when they expire (1 hour to 7 days), after one view if you chose that, or when you turn them off. The record of the link is deleted a day later. |
| Accounts started but never verified | Deleted 60 days after sign-up (for accounts created from October 5, 2026 on). |
| Event subscriptions | Until you unsubscribe. |
| RSVPs, waitlists and event submissions | 12 months after the event. |
| Events on your calendar | 12 months after the event, or until you remove them. |
| Volunteer sign-ups | 2 years, or until you ask us to remove them. |
| Reports about a member | 3 years, for community safety. |
| Audit log | 2 years. |
| Security log (sign-ins, admin changes, with IP address) | 30 days. |
| Copies of emails the site sends (for delivery problems) | 14 days. |
| Hosting and Cloudflare server logs | Kept by our hosting provider and Cloudflare under their own policies. We don’t keep copies. |
| Backups | Up to 60 days, depending on our hosting plan. Deleted data, including deleted and expired photos, stays in backups until they expire. |
- Deletion timeline: after you confirm an erase request, we complete it within 30 days. Your profile disappears from the site as soon as the request is completed, and the remaining copies leave our backups when they expire.
- Content you delete: posts, photos and conversations you delete are removed from the site. Deleting a conversation from your side leaves the other member’s copy.
- When you erase your account: your profile, photos, posts, likes, follows, nods, homework, chastity records, dynamics, messages (both sides of your conversations), blocks and the reports you made are deleted, and an administrator closes the account. Reports other members made about you are kept for community safety.
11. Your choices and rights
From your Account and Profile tabs you can:
- See and change what you share, item by item (Show switches).
- Download a copy of your data. Request it from the Account tab, confirm by email, and we’ll send you a copy.
- Delete your data. Request it from the Account tab, confirm by email, and an administrator completes it.
- Hide yourself from member search, turn off message requests, choose who sees each post and each event on your calendar.
- Turn off any kind of notification, and unsubscribe from event emails.
- Block and report other members.
You can also email foxxyforce@gmail.com about any of these, or to correct your date of birth. We’ll answer within 30 days.
If you live in a US state with a privacy law (for example California, Colorado, Connecticut, Virginia, Oregon or Texas), you have rights to know, access, correct, delete and get a copy of your personal information, to opt out of sale, targeted advertising and profiling, and to limit how sensitive information is used. We don’t sell or share information for targeted advertising, and we use sensitive information only to provide the service you asked for. We won’t treat you differently for using these rights. To make a request, use the Account tab or email us. If we decline, you can appeal by replying to our answer.
If you’re in the UK or European Economic Area, you have rights under the GDPR, including access, correction, deletion, portability, objection and withdrawing consent. You can also complain to your local data protection authority. Our legal bases are: providing the service you signed up for (contract); your explicit consent for sensitive profile details you choose to share; our legitimate interest in keeping the community safe; and legal obligations. You can withdraw consent at any time by switching an item off or deleting it.
12. Security
We use HTTPS throughout. Passwords are stored as one-way hashes. Every form is protected against forged requests. Private photos are served only after checking who’s asking, and are never cached publicly. Chastity verification photos are also encrypted in our database (XChaCha20-Poly1305), each member’s lock with its own key that’s kept outside the database. Because the site has to show them to you and your keyholder, the site itself can decrypt them; you can turn on end-to-end photos so that only you and your keyholder hold the key (see section 9). Member pages are marked “do not index”. No system is perfectly secure, so please use a strong, unique password. If a breach affects your information, we’ll tell you and the authorities as the law requires.
13. Where your data is stored
Our site is hosted in the European Union (Google Cloud in Belgium, through our hosting provider), and Cloudflare’s network serves it from locations around the world. If you use the site from outside the EU, for example from the United States, your information is transferred there.
14. Changes to this statement
If we make a significant change, we’ll post it here with a new “Last updated” date and let members know with a notice in the member area before it takes effect.
15. Terms of Service
The rules for using the site are in our Terms of Service.
16. Contact
Questions, requests or concerns: foxxyforce@gmail.com. If you need a postal address for a legal request, email us and we’ll provide one.