Last updated: 2 November 2026
LatePals ("we", "us") is the social network you use at latepals.com and in the LatePals app. This Privacy Policy explains what information we collect, why, how it's used and shared, and the choices you have.
Questions about your data? Reach us at support@latepals.com.
We only collect what's needed to run a social network:
We use your information to:
We never sell your personal data.
LatePals is free and funded by advertising from Google AdSense. Ads only appear on pages with content, such as our Journal articles, and are always labelled as ads.
Your consent: visitors in the EU/EEA, the UK and Switzerland are asked for consent before advertising cookies are used, through Google's certified consent banner. You can change your choice at any time with the "Privacy and cookie settings" link the banner leaves on the page.
Our own cookies: we use one required session cookie that keeps you logged in and remembers your language, and store your chosen theme locally in your browser. Neither is used for advertising or tracking.
Push messages only come if you say yes โ to us and to your phone's or computer's own question. We then keep the address your browser's message service (Google, Apple, Mozilla or Microsoft) gave your device, and two keys, so each message is encrypted for your device only. Turn it off under Notifications; when you log out, the device stops getting messages.
Text messages (SMS) only come if you add your mobile number under Notifications yourself and confirm it with a code. We use the number for that code, at most one text a day with news from LatePals, and a warning if your password is changed โ never for advertising, and we don't pass it on. Texts are sent through GatewayAPI (Denmark). Turn SMS off and we delete the number. Our log only keeps the last four digits.
Your mobile number is given when you sign up, and we confirm it with a code by text message. We only use it so you can always get back in (a one-time password by SMS if you forget your password or your e-mail), so you can log in with the number, and for warnings about your account โ never for advertising. We don't show it to others or pass it on. Codes are only kept as an encrypted fingerprint and work for a short while.
Logging in with Steam, Discord, Google, Microsoft, Facebook, Twitch, GitHub or another service is optional. If you connect one of them to your account, we keep your ID at that service and your name there, so we know you next time. We only ask the services for your name and e-mail (the e-mail is only used to fill in your sign-up). We never get your password there, and we never post anything there. If you connect Discord, we also add you to the LatePals Discord server with the guest role (Discord asks you first); disconnect it or delete your account and we take the role away again. You can disconnect them at any time under Account & security.
Your recent logins: for 90 days we keep when and how you logged in, what kind of device it was (e.g. "Chrome ยท Windows") and part of the network address. Only you can see it, under Account & security โ so you can spot a login you don't recognise and log out on every other device.
We keep your information for as long as your account is active. If you delete your account, we permanently delete your profile and content โ see how to request deletion of your account and data for exactly what gets deleted and how quickly.
Private messages are end-to-end encrypted. The text is locked on your device and only opened on the recipient's. We only keep the encrypted text and can't read it โ not even the owner of LatePals. Your private key stays on your own devices; we only hold it sealed with your recovery code, which we never see. Who writes to whom and when, we can still see, or the messages couldn't be delivered. Posts, comments and your profile aren't encrypted that way, because they are meant to be shown to others.
The whole site only runs over HTTPS (an encrypted connection), and a strict script policy makes your browser run only our own scripts โ not code someone tries to plant on the page. Passwords are never stored in plain text โ only as a secure hash. We use CSRF protection on forms and watch for changed files and suspicious logins. No system is 100% secure, but we work to protect your data as well as we can.
LatePals is not directed at children, and we do not knowingly collect information from children under the digital age of consent in your country (13 in Denmark). If you believe a child has created an account with us, contact us at support@latepals.com and we'll delete the account.
You have the right to access, correct, restrict or delete your information, as well as the right to data portability and to object to our processing. Contact us at support@latepals.com for access, corrections or an export of your data, or use the account and data deletion page directly. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk), or your own country's data protection authority, if you believe we're not complying with applicable data protection law.
We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page.