Privacy policy
Effective October 29, 2026 · updated October 30, 2026
1. Who we are
The Feminization Institute ("the Institute", "we", "us") runs the website at thefeminizationinstitute.com. For anything about your privacy, write to privacy@thefeminizationinstitute.com.
2. What we collect
| Information | What it is | Why |
|---|---|---|
| Account | Username, email address, password (stored only as a one-way hash; we can't read it), your 18+ confirmation, your photo-storage choice, and whether your email is verified. | To create and secure your account, verify your email, and let you reset your password. |
| Your training | Your plan and settings, the name you use in the app, assignments and what you wrote when handing them in, points, streaks, ranks, standing rules, closet, check-ins (including how you said you were feeling), chastity log, reminders, and your diary. | So your training works and follows you to every device you log in on. This is the core of the service. |
| Photos and recordings | Proof photos, lookbook pictures and voice recordings. By default they stay only on the device where you took them. If you choose "Save them to my account", they're stored on our server so they sync (up to 5 MB each). | Only to show them back to you on your other devices. You can switch this off at any time; doing so deletes the copies on our server. |
| The Salon | What you choose to post: a photo (which we re-encode, removing location and camera data), a caption, your Salon name and rank, plus reactions, comments and reports you make. | To run the members' community board and keep it safe. |
| Keyholder link | If you link your account with a keyholder: the link itself, the reports your app sends them (your last 7 days of training; never photos; your diary only if you tick "Include my diary"), and the orders they send you. | To pass orders and reports between the two of you. |
| Notifications | If you turn on phone notifications: your browser's notification address and keys, your time zone, and which reminders you want. | To send the reminders you asked for, at the right local time. |
| Visit counts | When you open the sign-in page or the app, we count one visit per day for your network connection, together with the country of your device's time zone (for example "United States" or "Germany"). Your network (IP) address is only used to make a one-way code so a visit isn't counted twice, and that code is deleted the next day; we keep only daily totals. For members, we also note which days you opened the app. | To know how many people use the Institute, roughly where in the world they are, and whether new members keep coming back. No outside analytics service is involved. |
| Feedback | What you write in "Send feedback", the kind of feedback, the screen you came from, and your device type (for example "iPhone · Safari · Home Screen app"). | To fix problems and improve the Institute. |
| Security records | Your IP address and the name you typed when logging in, signing up or resetting a password; sign-in sessions; for staff accounts, the devices where they confirmed a sign-in code; a log of staff actions; a short record of emails sent (time, a partly hidden address and the type of email, never the codes or links in it). | To stop password guessing, spam sign-ups and abuse, and to keep staff accountable. |
We don't collect your real name, address, phone number, payment details, location or contacts, and we don't ask for them. Please don't put them in your diary, captions or Salon name.
3. Sensitive information
Much of what you record here relates to your sex life and sexual interests, which privacy laws treat as especially sensitive. We process it only because you choose to use the Institute and give your explicit consent when you create your account. You can withdraw that consent at any time by deleting your account. We use this information only to provide the service to you.
4. Who can see what
- You can see everything in your account.
- Other members see only what you post in the Salon (once a moderator approves it) and your Salon name and rank.
- Your keyholder, if you link one, sees the reports and requests your app sends them. You can unlink at any time.
- Institute staff (moderators and admins) can see your username, email address, account status and a short progress summary (name in the app, points, streak, number of assignments, last activity), plus feedback you send, your Salon posts, comments and any reports. Staff cannot see your diary, your training notes, your private photos or recordings, or keyholder reports. Staff sign in with an extra emailed code, and every staff action is logged.
- Nobody else. We don't sell, rent or share your information with advertisers, data brokers or anyone else.
5. Services that help us run the site
- Hosting: HostGator stores the site and its database on servers in the United States.
- Email: verification codes, password-reset links and staff sign-in codes are sent through our hosting provider's mail servers (or a dedicated email delivery service, if we start using one).
- Phone notifications: delivered through your browser's own push service (Apple, Google, Mozilla or Microsoft). Every notification is encrypted for your device, so those services can't read it.
- Password safety check (staff accounts only): we check staff passwords against the public "Have I Been Pwned" list of leaked passwords. Only the first five characters of a scrambled (hashed) version of the password are sent, never the password itself.
The site loads no third-party scripts, fonts, trackers or advertising.
6. Cookies and storage on your device
- FISESS: keeps you signed in (up to 30 days). Essential.
- FITD: staff accounts only; remembers a device where a sign-in code was confirmed (30 days). Essential.
- Browser storage: your training, photos (if kept on your device) and a copy of the app, so it's fast and works offline. It stays on your device and is separate for each account.
We don't use advertising, analytics or tracking cookies, so there's nothing to opt out of. Visit counting uses no cookies.
7. How long we keep things
- Your account and training: until you delete your account.
- Photos stored on our server: until you delete them, switch photo sync off, or delete your account.
- Salon posts: until you or a moderator delete them, or you delete your account. Posts removed for breaking the law may be kept privately, as the law requires, for law enforcement.
- Login and sign-up attempts: 2 days. Record of emails sent: 90 days. Staff action log: 2 years.
- Backups: a nightly copy of the database is kept for 14 days, so deleted information disappears from backups within 14 days.
- Accounts never verified are removed after 30 days.
- Visit counts: daily totals by country are kept; the one-way codes are deleted after a day. Days you opened the app: 13 months. Feedback: up to 1 year. Both are deleted with your account.
8. Your choices and rights
Wherever you live, you can:
- See and change your information in the app at any time.
- Delete your account and everything in it: Settings → Your account → Delete account. It's immediate and permanent (backups clear within 14 days).
- Get a copy of your information, or ask us to correct something you can't change yourself: email privacy@thefeminizationinstitute.com from your account's email address.
- Choose where your photos live, whether to share your diary with a keyholder, and which notifications you get.
- Withdraw consent by deleting your account.
If you're in the European Economic Area, the UK or Switzerland, you also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. California and other US state residents have the right to know, delete and correct their personal information, and the right not to be discriminated against for using these rights. We don't sell or "share" personal information as those laws define it. We'll answer requests within 30 days and may need to confirm the request comes from the account owner.
9. Security
Connections are always encrypted (HTTPS). Passwords are hashed, sessions are protected, sign-ins and sign-ups are rate-limited, photos and Salon images are kept outside the public website, and staff accounts need an emailed code on each new device. No system is perfect, though: use a strong password that you don't use anywhere else, and log out on shared devices. If we ever learn of a breach affecting your information, we'll tell affected members as the law requires.
10. Adults only
The Institute is only for people aged 18 or over (or the age of majority where you live, if higher). We don't knowingly collect information from anyone younger. If we learn that an account belongs to someone under 18, we delete it. If you believe a minor is using the site, tell us at privacy@thefeminizationinstitute.com.
11. International members
The Institute is run from, and hosted in, the United States. If you use it from elsewhere, your information is transferred to and stored in the US, where privacy laws may differ from yours. By creating an account, you ask us to do this to provide the service.
12. Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app before it takes effect.