We don't keep your details in readable form.
Rekindle is built to carry sealed envelopes between two people who prove to each other that they share a memory. We never hold the keys.
Sealed in your browser
Your phone number or email is encrypted on your own device with a key made from your verification answers, before anything is sent. What reaches our servers is encrypted data that can only be opened with your answers — which is why your answers should be hard for anyone but the real person to guess.
Answers never leave your device
Verification answers are checked by a one-way fingerprint. We can tell that a claimant's answers match — we can never tell what the answers are.
You approve, the system exchanges
No administrator reviews, sees, or hands over anything. The poster approves a verified claim, and the sealed details unlock for both parties in their own browsers, simultaneously. Declined claims are purged.
No tracking
No advertising, no analytics, no third-party trackers, and our fonts are served from our own server. A single essential session cookie protects forms against forgery; it is deleted when you close your browser.
The right not to be found
Nobody is introduced without proving who they are and getting the poster's approval. A decline is final and purges the claimant's sealed details.
What's not allowed
Searches for romantic ex-partners, people who owe you money, anyone avoiding you, or anyone under 18 are removed. Every card has a Report link; administrators intervene only for abuse, fraud or breach — never in exchanges.
Privacy policy
Last updated 4 October 2026.
Who is responsible for your data
Rekindle is operated by Phokonline (phokonline.net), based in Ghana, which is the controller of the personal data described here. Contact: rekindle@phokonline.net.
What we hold, and why
- Your public search card — the name, nickname, years, school or community, places, memory, optional photo and description you choose to publish. Purpose: to display your search so the right person can find it. Basis: your consent, given when you publish.
- Your two verification questions (never the answers), a random salt and a one-way verifier. Purpose: to check a claimant's answers without learning them.
- Sealed contact details — your phone or email, and a claimant's, encrypted in your browser. We cannot read them without the verification answers, which we never receive.
- Claim messages and tips written to a poster. Purpose: to deliver them to the poster's private manage page.
- An optional notification email, only if you give one. Purpose: to tell you about verified matches, tips or decisions. Nothing else — no newsletters, never sold.
- Security records — a one-way, salted hash of your IP address and timestamps when you post, claim, tip or report. Purpose: rate limits, the claim lockout and abuse prevention. Basis: our legitimate interest in keeping the service safe.
How long we keep it
Searches stay up until the poster deletes them from their manage page or we remove them for breaking the rules; deleting a search removes its card, photo, claims, sealed details, tips and reports. A declined claim's sealed details are purged immediately. Claim-attempt security records are deleted after 30 days.
Who we share it with
Nobody, except our hosting provider (Hostinger), which stores the site and its database on our behalf. We do not sell, rent or share personal data for advertising. Sealed contact details are only ever unlocked by the two parties to an approved match, in their own browsers.
Where it is stored
Your data is stored on our hosting provider's servers, which may be outside your country. Contact details stay sealed wherever they are stored.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict its use, and withdraw consent at any time. Posters can delete their search instantly from their private manage link; anyone else can email rekindle@phokonline.net. If you are named in a search and want it removed, use the Report link or email us — we will act quickly. We will not discriminate against you for exercising your rights.
You can also complain to your data-protection authority — for example your EU supervisory authority, the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada, your US state attorney general, South Africa's Information Regulator, Nigeria's Data Protection Commission or Ghana's Data Protection Commission.
Laws we follow
We aim to meet the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, Canada's PIPEDA, US state privacy laws such as the California Consumer Privacy Act, South Africa's POPIA, Nigeria's Data Protection Act (NDPA) and Ghana's Data Protection Act (Act 843).
Children
Rekindle is only for adults aged 18 or over, and searches for anyone under 18 are not allowed.
Changes
If we change this policy we will update the date above; significant changes will be highlighted on this page.