Who this covers
This notice is for testedcompanions.com only. Email hello@testedcompanions.com. candyai.guide and luckycrushreview.com are separate review hosts with their own notices: candyai.guide/privacy, luckycrushreview.com/privacy. We are not EverAI, Hello World SAS, or any product we review. Their privacy policies govern their apps.
Effective date: 1 September 2026. If we add analytics, this page will say so with a new date.
No account system
There is nothing to sign up for. No email capture form, no password, no profile, no comments database. If a page on this domain asks you to “log in to Candy,” you are not on this domain. Close it.
Mail you send to hello@testedcompanions.com is stored in that inbox for the usual reasons (replying, corrections, legal notices). We do not sell that list. There is no list.
Age gate: sessionStorage only
The 18+ overlay is client-side. If you confirm, the browser sets sessionStorage.tc_age_ok = "1". That is a tab-session flag, not a cookie, not localStorage, not a server record. Close the tab and you will see the overlay again. We cannot read that flag from the server because it never leaves the browser.
If sessionStorage is blocked, the overlay may reappear every load. That is the conservative failure mode. We would rather nag than set a tracking cookie to remember you are an adult.
The “Leave” button sends you to Google. We do not log that click beyond whatever your browser and DNS resolver already log for any navigation.
No analytics yet
As of 1 September 2026 there is no Google Analytics, no Plausible, no Cloudflare Web Analytics pixel, no Meta pixel, no TikTok pixel. Site scripts handle the nav toggle, FAQ accordion, and age gate. They do not phone home.
If we add a privacy-respecting analytics tool later, it will be named here before it ships, with a cookie/no-cookie line. Until that edit exists, treat “we don’t measure you” as the live state.
DNS and hosting
DNS for the public hosts runs on Cloudflare. That means Cloudflare sees DNS queries and, depending on proxy settings, HTTP requests at the edge (IP, user-agent, URL, standard connection metadata). We use Cloudflare as DNS and edge, not as an identity provider.
The origin is a Coolify deployment in the EU, on Mevspace in Poland. Access logs on the origin (nginx) may retain IP, path, status, and user-agent for operations: uptime, 404s, abuse. They are not a marketing database. We do not join them to an account because there is no account.
Fonts load from Google Fonts (Fraunces, IBM Plex Sans, IBM Plex Mono). Google will see a request for those files. If you block third-party fonts, the pages still read in system serif/sans.
Requests
Because we do not keep user accounts, there is usually nothing to export or delete except (a) an email you sent us and (b) origin logs that rotate. Write hello@testedcompanions.com if you want an email thread removed. We are not the controller for candy.ai, luckycrush.com, or the other products; send those requests to them.
EU/UK readers: this is a small editorial site with EU hosting. We process technical logs as legitimate interest in keeping the site up, and correspondence as necessary to reply to you. We do not sell personal data. We do not run automated profiling. If that stack changes, this page changes first.