Spoofy

Legal

Privacy Policy

Last updated 9 October 2026

The short version

  • Spoofy is a companion for your own Tinder account. It is not affiliated with, endorsed by or operated by Tinder or Match Group.
  • We never ask for, see or store your Tinder password.
  • To work, Spoofy holds the signed-in Tinder session you give it. On the web that session is kept encrypted on our server; in the Android app it stays on your phone.
  • You can download everything we keep about you, or delete it, at any time from Settings, Sessions and data in the web app.
  • We do not sell your data and we do not show ads.

What we store, and why

Web app (app.sspoofy.com)

  • Your Tinder session. The session token and the device and session identifiers Tinder's own web client uses, plus the browser storage from the secure login window when you log in that way. We need this to make Tinder requests on your behalf and to renew the session when it expires. It is stored encrypted and is never sent to your browser.
  • A sign-in cookie. One cookie that tells our server which stored session is yours. It cannot be read by scripts and lasts 90 days from your last visit.
  • Your Spoofy data. Things you create by using Spoofy: your like and super-like history, profiles you passed in the last 7 days (Second look), counts of likes, matches and messages for Insights, saved openers and their reply counts, private notes and tags on matches, alerts, and your settings and filters. This is what makes the features work and follow you between browsers.
  • Basic details from your Tinder profile. Your Tinder user id, first name and first photo address, so the app can greet you and show your avatar.

Profiles of other people (recommendations, matches, messages) are fetched from Tinder when you look at them and shown to you. We do not build a database of other people's profiles. A profile you like, super-like or pass leaves a small record in your own history: their id, first name and one photo address.

What you type into the secure login window goes to Tinder's own login page running in a browser on our server. We do not record your keystrokes, phone number, codes or password. Only the resulting signed-in session is kept.

Android app

  • Your Tinder session and all Spoofy data (history, filters, openers, alerts, settings, PIN lock) are stored on your phone only.
  • The app sends anonymous usage events (screen names, session length, app version and a random install id) so we can see which features are used. Once your own profile has loaded, the event includes your Tinder user id in place of the install id.
  • If the app crashes, or you use "Report a problem", it sends the app version, Android version, phone model, the screen name and the crash details or your message.

This website

  • Page views with a random visitor id kept in your browser, the page address, the referring site and your browser language.
  • Your IP address is used to estimate your country and city through a geolocation service, for our visitor map.
  • A count of APK downloads.
  • If you comment on the blog, the name and comment you submit.

Background activity you switch on

If alerts are on, our server checks your Tinder matches and messages about every 15 minutes so it can tell you about new ones. If you switch on scheduled Auto-Swipe, our server likes and passes profiles on your behalf at the times and limits you chose. Both stop when you switch them off, log out everywhere, or delete your data.

How long we keep it

  • A signed-in session is removed 90 days after it was last used, or immediately when you log out.
  • Second look entries are removed after 7 days. Histories and logs are capped (for example 500 history entries and 200 alerts) and older entries drop off.
  • Everything else is kept until you delete it.

Your choices

  • See and download: Settings, Sessions and data, Download a copy.
  • Delete: Settings, Sessions and data, Delete everything. This removes your Spoofy data and every signed-in session from our server. It does not affect your Tinder account.
  • Sign out other browsers: the same page lists every browser signed in to your account.
  • Android: clearing the app's data or uninstalling it removes everything stored on the phone.

Who else is involved

  • Tinder. Every action you take in Spoofy is a request to Tinder made with your session. Tinder's own privacy policy applies to your Tinder account and to what Tinder does with those requests.
  • Our hosting provider runs the server the site and web app live on.
  • An IP geolocation service receives visitor IP addresses to return an approximate location.
  • TipIns handles tips if you choose to send one. We do not receive your payment details.

We do not share your data with anyone else, unless the law requires it.

Security

Connections use HTTPS. Tinder sessions are encrypted in our database, and the web app cannot read them from your browser. No system is perfectly secure: if you think your account was misused, log out everywhere in Spoofy and sign out of all devices in Tinder's own settings.

Age

Spoofy is for adults only. You must be 18 or older, as Tinder itself requires.

Changes and contact

If this policy changes in a way that matters, we will update the date above and say so in the app. Questions or requests: use "Report a problem" in the app's Settings.