woodwork website privacy policy

Effective Date: June 23, 2026

IMPORTANT NOTICE REGARDING PROTECTED HEALTH INFORMATION:

This Website Privacy Policy ("Policy") does not govern the collection, use, or disclosure of protected health information ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA"). If you access, submit, or interact with any forms or features on our Website that relate to healthcare goods or services (for example, by beginning a medication intake form) you may be redirected to, or your information may be collected by, a third-party platform operated on behalf of our healthcare partner(s). Any information you submit through such healthcare-related forms or features is governed by the applicable privacy policies and notices of privacy practices of our healthcare partner(s), including OpenLoop Health, Inc. ("OpenLoop"). Please review:

• OpenLoop Notice of Privacy Practices
• OpenLoop Website Privacy Policy

For more information about your rights under HIPAA, please visit https://www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/index.html

If you are experiencing a medical emergency, please call 911 or go to your nearest emergency room. This Website is not designed to provide emergency medical assistance.

1. OVERVIEW AND SCOPE

Woodwork by Grindr ("Woodwork," "we," "us," or "our") recognizes the importance of protecting your privacy. This Policy describes how we collect, use, disclose, and otherwise process personal information about you in connection with your interaction with our website located at www.woodwork.com (the "Website") and when you otherwise contact us (e.g., via phone, email, or mail).

This Policy does not apply to:

• Protected health information collected or processed in connection with healthcare goods or services, which is governed by the privacy policies and notices of our healthcare partners, as described above.
• Information collected or controlled by third parties, including third-party websites, applications, or platforms you may access through our Website (including healthcare-related forms or services hosted by third-party platforms). We encourage you to review the privacy policies of any third party you interact with.
• Workforce members, such as job applicants, employees, retirees, or contractors.

For purposes of this Policy "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household. Personal information does not include publicly available information, deidentified or aggregated consumer information as defined by applicable privacy laws, or PHI covered by HIPAA, the California Confidentiality of Medical Information Act ("CMIA"), or other similar medical privacy laws. "Processing" means any activity relating to personal information, including collection, storage, use, consultation, disclosure, sharing, and transmission.

Woodwork works with a number of trusted partners, vendors, and affiliates, each of whom may have their own privacy policies. We encourage you to review those policies as applicable.

Our privacy practices may vary among the jurisdictions in which we operate to reflect local practices and legal requirements, as explained in any jurisdiction-specific addenda to this Policy. In the event of a conflict between an applicable addendum and the main body of this Policy, the addendum will control.

2. WHAT PERSONAL INFORMATION WE COLLECT AND HOW WE COLLECT IT

This Section describes the personal information we collect through the Website, other than any information collected in connection with healthcare-related forms or services, which is addressed in the privacy policies and notices of our healthcare partners. Depending on how you interact with our Website, we may collect the following categories of personal information:

• Identifiers: Name, email address, telephone number, IP address, unique online identifiers
• Device and Geolocation Information: Device type and identification number, approximate geolocation (e.g., zip code or city-level location derived from IP address), mobile network, operating system type, web browser type and version
• Usage Information: Browsing and click activity on the Website, interactions with features and content, search queries, date and time stamps, pages viewed, links clicked, videos watched, referring/exit URLs
• Inferences: Preferences, interests, or predispositions derived from the information listed above

Sources of Personal Information

We collect this information from the following sources:

• Directly from you. When you contact us via email, telephone, or other means, or when you voluntarily provide information through the Website.
• Automatically as you navigate the Website. Through cookies, web beacons, and similar tracking technologies, as described further in Section 5 below.
• From third-party sources. We may receive information from our partners, affiliates, or service providers and combine it with information we collect directly from you. To the extent we combine third-party-sourced information with personal information collected directly through the Website, we treat the combined information as personal information under this Policy. We are not responsible for the accuracy of information provided by third parties.

Information We Generate

Based on the information we collect, we may generate additional insights or inferences about you, such as inferences regarding your preferences, interests, or predispositions.

3. HOW WE USE YOUR PERSONAL INFORMATION

We use the personal information described above for the following purposes:

• Providing and operating the Website: To operate, maintain, and provide you with access to the Website and its features.
• Communications and customer service: To respond when you contact us, answer your inquiries, and provide information you request.
• Marketing and advertising: To provide you with marketing and promotional content, including targeted advertising tailored to your interests and browsing activity across our Website, affiliated platforms, and other websites.
• Research and analytics: To analyze usage trends, create deidentified or aggregated data, and improve our Website and services.
• Product and service improvement: To evaluate, develop, and improve our products, services, and overall business operations.
• Security and fraud prevention: To detect, investigate, and protect against security incidents, malicious, deceptive, fraudulent, or illegal activity.
• Compliance and legal obligations: To comply with applicable laws, regulations, and internal policies; to fulfill legal obligations; to protect our legal interests; and to address legal claims or disputes.
• Artificial intelligence: We may use AI technologies to enhance our Website and user experience, including to tailor content and recommendations, improve the efficiency and accuracy of our services, enhance customer support through AI-assisted responses, analyze patterns and trends, and detect and prevent fraud or security risks. Critical decisions regarding your safety, health, and wellness always involve human oversight from qualified professionals.
• With your consent: For any purpose where you have provided your consent, where legally required.

4. HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your personal information with the following categories of recipients, as permitted by applicable law:

• Service providers: Companies that perform services on our behalf, including website hosting, data analytics, cloud storage, email delivery, marketing, advertising, and customer support.
• Advertising and analytics partners: Third-party advertising networks, analytics providers, and similar partners who help us deliver, measure, and improve advertising and understand how users interact with the Website.
• Affiliates and subsidiaries: Companies within our corporate family, to deliver and improve products and services and ensure a consistent user experience.
• Professional advisors: Lawyers, accountants, auditors, insurers, and information security and forensics experts as needed.
• Business transfers: In connection with any actual or proposed merger, acquisition, investment, sale of assets, reorganization, or similar corporate transaction, in which personal information may be among the transferred assets.
• Legal and regulatory: Competent law enforcement agencies, government regulators, and courts when we believe disclosure is necessary to (i) comply with applicable law, (ii) exercise, establish, or defend legal rights, or (iii) protect the rights, property, or safety of us, our users, business partners, or others.
• With your consent or at your direction: Any other party to whom you have directed or authorized us to disclose your information.

We may also disclose aggregated or deidentified information that cannot reasonably be used to identify you, at our discretion.

5. HOW WE USE COOKIES AND SIMILAR TECHNOLOGIES

When you interact with our Website, we may use a variety of technologies to automatically collect information about you:

• Cookies: Small text files placed on your device by your browser. Cookies allow us to recognize your browser, remember your preferences, keep you signed in, and understand how you use our Website. They may be set by us (first-party cookies) or by third parties (third-party cookies, such as for analytics or advertising).
• Web beacons / pixel tags: Tiny graphics or snippets of code embedded in web pages or emails that link to our servers (and their cookies). They help us measure the effectiveness of campaigns, understand usage, and deliver content.
• Advertising identifiers: Resettable identifiers provided by mobile operating systems (such as Apple's Identifier for Advertisers (IDFA) or Google's Advertising ID (AAID)), used for advertising and analytics purposes.
• Session replay technologies: Tools that may record how you interact with the Website (such as clicks, scrolling, and navigation) to help us diagnose issues, analyze usage, and improve your experience.
• Local storage and similar technologies: Web browsers and applications may use local storage (including HTML5 local storage and caches) and software development kits ("SDKs") to save information directly on your device. These technologies are often used to remember settings, speed up performance, or support functionality. SDKs may also recognize you across websites and devices and collect data on your interactions with our Website.
• Device and browser fingerprinting: We may use technical information about your browser, device, or network (such as fonts, screen resolution, or plug-ins) to help recognize your device for security, analytics, or advertising purposes.

These technologies may be deployed by us, our business partners, or third-party analytics or advertising providers, either on our behalf or for their own purposes. Tracking technologies such as cookies help enable personalization of your experience via the communications such as SMS messages (e.g., sending you personalized text messages such as shopping cart reminders).

Categories of Cookies

The cookies we use on our Website generally fall into the following categories:

Your Cookie Choices

You can manage your cookie preferences in the following ways:

• Your Privacy Choices tool: Available at any time through the link in the footer of our Website. This tool allows you to learn more about the cookies we use, reject non-essential cookies, and change your preferences at any time.
• Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
• Mobile device settings: iOS and Android operating systems provide options to limit tracking or reset your advertising identifiers.
• Email settings: Your email provider may have settings that prevent the automatic download of images, including web beacons.
• Global Privacy Control ("GPC"): We honor GPC signals as requests to opt out of the sale or sharing of personal information, to the extent required by applicable law. We may not be able to tie a GPC request to all personal information we hold about you. If you wish to exercise your opt-out rights comprehensively, we recommend configuring your browser to send an opt-out signal via GPC, submitting your cookie preferences via our cookie preference center, and submitting a request using one of the methods in the "Exercising Your Privacy Rights" section below.
• Do Not Track: We do not currently respond to web browser "Do Not Track" signals.

In addition, depending on your state of residence, you may have the right to opt out of our use of cookies and tracking technologies for targeted advertising, or from the "sale" or "sharing" of your personal information for purposes of cross-context behavioral advertising, under applicable U.S. state privacy laws. You can exercise these rights by submitting a request using one of the methods described in the "Exercising Your Privacy Rights" section below. For more details about your rights, please see Sections 6 (“Additional Disclosures for Residents of Certain U.S. States”) and Section 7 (“Your Privacy Rights”) of this Policy.

To learn more about cookies generally, visit www.allaboutcookies.org.

6. ADDITIONAL DISCLOSURES FOR RESIDENTS OF CERTAIN U.S. STATES

The personal information we collect about you includes information within the below categories of data. Note that the “category” of data listed below refers to the category of personal information as defined under California law and represents the categories of personal information that we have collected, and how it has been shared, over the past 12 months. Inclusion of a category in the list below indicates only that we may collect some information within that category. We do not necessarily collect all information listed in a particular category, nor do we necessarily collect all categories of information for all individuals. While the categories are as defined under California law, the disclosures below also apply to residents of other states as well.

Sensitive Personal Information

We do not intentionally collect or process sensitive personal information (as defined under applicable state privacy laws) through the Website.

Sale of Personal Information and Sharing for Cross-Context Behavioral Advertising

Certain disclosures of personal information to third parties may constitute a "sale" or "sharing" for cross-context behavioral advertising under applicable state privacy laws. Cross-context behavioral advertising (also referred to as "targeted advertising") means advertising customized based on predictions generated over time from your activity across different websites, devices, and applications.

In the preceding 12 months, we may have sold or shared the following categories of personal information:

• Identifiers;
• Internet or other similar network activity;
• Geolocation data; and
• Inferences drawn from other Personal Information.

We sell or share these categories with the following types of third parties:

• Advertising and analytics partners
• Our partners, to offer you products and services that may interest you

We do not provide directly identifying information (such as your name and address) to third parties when you interact with or view a customized advertisement. However, when you view or interact with an advertisement, the advertiser may infer that you are interested in the subject matter of the advertisement.

For information on how to opt out, please see Section 5 ("How We Use Cookies and Similar Technologies") and Section 7 ("Your Privacy Rights") below.

7. YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may be entitled to exercise one or more of the following rights:

• Right to know / access: Request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which such information is collected, the purposes for processing, and the categories of third parties — or, depending on your jurisdiction, the specific third parties — to whom we have disclosed your information, as well as the categories of personal information disclosed. You may also request to know whether we have sold or disclosed your personal information and the categories of third parties and personal information involved. You may request access to any inferences derived from your personal information. You may also request to know whether we use or sell your personal information for the purpose of training large language models.
• Right to correct: Request correction of any inaccurate personal information we hold about you. We may not be able to accommodate your request if we believe it would violate any law, any legal requirements, or cause the information to be incorrect.
• Right to delete: Request deletion of your personal information, subject to certain legal exceptions.
• Right to opt-out of the sale or sharing of Personal Information for purposes of targeted advertising or profiling/automated decision making. To the extent we engage in profiling or automated decision making, you may have the right to opt-out. Our disclosure of your personal information to third parties may constitute a “sale” or “sharing” of your personal information or constitute processing of your personal information for purposes of targeted advertising under certain state laws. To the extent that our use constitutes such activity under applicable law, you have the right to opt out by (a) enabling an opt out preference signal or Global Privacy Control on your browser which is recognized by our Website, (b) opting out of cookies using the Your Privacy Choices link in the footer of our Website, or (c) submitting a request to us using a method listed in the “Exercising Your Privacy Rights” section below. You may still receive advertising, including tailored ads based on our data. Please note that cookie-based and browser-based opt-out preferences are specific to the browser and device on which they are set. If you access our Website from multiple browsers or devices, you may need to set your preferences on each.
• Right to limit use and disclosure of sensitive personal information: To the extent we process sensitive personal information, you may have the right to limit our use and disclosure of such information.
• Right to opt-in to processing of sensitive personal information. To the extent we process your sensitive personal information, we may have to obtain your consent before processing it.
• Right to data portability: Obtain your personal information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity.
• Right to appeal: Appeal our decision regarding a privacy rights request by emailing [email protected] with "Request to Appeal" in the subject line. Please use the same email address you used for your original request so that we can link the two. Depending on your jurisdiction, you may also have the right to contact your state Attorney General if you have concerns about the outcome of your appeal.

Non-discrimination. We will not discriminate or retaliate against you for exercising any of these rights, and we will not ask you to waive them.

Data solely retained for backup purposes is generally excluded from these rights until it is restored to an active system or next accessed or used. These rights also may not apply to pseudonymous data where the information necessary to identify the individual is kept separately and subject to appropriate safeguards.

Automated Decision-Making

We do not currently use automated decision-making technology (i.e., decisions made solely by a computer without human involvement) in connection with your personal information. If this changes, we will update this Policy.

Exercising Your Privacy Rights

To exercise any of the privacy rights described above, please contact us using one of the methods listed in the "Contact Us" section below.

You may also designate an authorized agent to make a request on your behalf. If you use an authorized agent, the agent must provide your signed written permission or evidence of power of attorney or conservatorship. We may also verify your identity directly and confirm that you have authorized the agent to act on your behalf.

When you submit a request, we may verify your identity by asking for information such as your name, email address, telephone number, and your relationship with us. We cannot fulfill your request if we cannot verify your identity or confirm the personal information related to you. Submitting a request does not require you to create an account.

Depending on your jurisdiction, we have between 45 and 90 days to respond to your request. If we require additional time, we will inform you of the reason and extension period in writing. There may be circumstances in which we are unable to honor your request (e.g., where we must retain information to comply with legal obligations), in which case we will notify you of the reason.

Depending on your jurisdiction, we are obligated to respond, free of charge, to up to two requests from the same consumer in a 12-month period. We may charge a reasonable fee for additional requests.

We may retain records of your privacy rights requests for at least two years for compliance purposes. Such records will not be used for any other purpose and will not be shared except as necessary to comply with legal obligations.

8. DATA RETENTION

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, or as required to comply with applicable legal, regulatory, and business obligations. When determining retention periods, we consider:

• How long the information is needed to provide you with the services you requested;
• How long the information is needed to support our operational processes;
• How long the information is needed to protect our legal rights and interests; and
• How long the information must be retained to comply with applicable laws and regulations.

The same personal information may be included in more than one record and used for more than one purpose, each of which may be subject to a different retention period. Data will not be destroyed before any applicable regulatory retention period expires, or during a pending legal or regulatory investigation.

9. DATA SECURITY

We maintain physical, technical, and administrative safeguards designed to protect your personal information from unauthorized or accidental access, use, alteration, or loss. We limit access to personal information to those individuals with a legitimate business need. Individuals who process personal information on our behalf are required to keep your information confidential. We have procedures in place to manage any suspected data security incidents and will notify you consistent with applicable legal requirements.

While we take reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. CHILDREN AND MINORS

Our Website is not intended for individuals under the age of 18. We do not knowingly collect, store, use, sell, or share personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a child under 18, we will promptly delete such information. If you believe we have collected personal information from an individual under 18, please contact us using the methods described in the "Contact Us" section below.

11. LINKS TO THIRD-PARTY WEBSITES AND SOCIAL MEDIA

Our Website may contain links to third-party websites and social media platforms. If you follow those links, you will leave our Website and this Policy will no longer apply. The personal information you provide at those locations will be governed by the applicable third party's privacy policy. We provide these links solely as a convenience, and their inclusion does not imply endorsement of, or responsibility for, the privacy practices or content of those third-party websites. We encourage you to review the privacy policies of any website you visit.

12. CHANGES TO THIS POLICY

We reserve the right to update or modify this Policy at any time. When we make changes, we will revise the "Effective Date" at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of the Website after any changes take effect constitutes your acceptance of the revised Policy.

13. CONTACT US

If you have any questions about this Policy or wish to exercise your privacy rights, please contact us:

Email: [email protected] or by postal mail at: Grindr LLC, Attn: Privacy Office, PO Box 69176, West Hollywood, CA 90069.