Collarspace Review: What Its Own Pages Say (and Don't)

Collarspace is a free BDSM personals site that has been online since the early 2000s. It is text-first rather than swipe-first: profiles, forums, journals, and a search that filters on role, orientation, age, location and physical description.

This review is not a tour of its features. It is a read of what the site publishes about itself, because on a platform where you describe your kinks, your role and your location, the policy page matters more than the interface.

Everything below was checked directly against Collarspace's own pages on 11 September 2026 and links to the source. Where the site does not say something, this review says that it does not say, rather than filling the gap.

What it is

A free, long-running BDSM personals and community site. The public homepage carries no paywall we could find: browsing and searching profiles works without an account, and the primary call to action is Join Free.

Its navigation reaches beyond personals into forums, journals, a glossary, live video and a shop. The profile search is unusually specific for a dating site, filtering by role (Dom, sub, switch), orientation, age band, height, weight, country and state.

If you have used FetLife, the shape will be familiar: a community that reads as a forum with profiles attached, rather than a dating app with a feed. If you have used Alt.com, the difference is mainly the absence of a paywall.

If you are here because you are leaving FetLife, it is worth knowing what you are actually replacing first — Collarspace covers some of what FetLife does and none of the rest. Our guide to sites like FetLife sorts the options by job.

The privacy policy has not been updated since 2018

This is the finding that matters most, and it is stated on the document itself.

Collarspace's privacy policy carries two dates at the top:

• Effective date: August 27, 2002
• Last updated: June 9, 2018

June 2018 is a notable moment to stop. The GDPR became enforceable on 25 May 2018, weeks earlier, and the CCPA was signed later that same month, taking effect on 1 January 2020 (California Attorney General). A privacy policy frozen in June 2018 sits right at the edge of the modern privacy-law era without stepping into it.

The document does carry a heading reading Specific Disclosures for the European Economic Area. What follows it does not describe GDPR rights.

What the policy does not contain

Rather than characterise the document, we searched its full text. We extracted the visible text of the policy page on 11 September 2026, about 1,630 words, and counted. These terms appear zero times:

There is no stated right to delete your account, no retention period, and no description of what happens to your profile if you stop using the site.

Be precise about what this means. It does not prove the product has no delete button — we did not create an account, and a control may well exist in the settings. What it means is that nothing public commits the site to one. On a site where the data is your sexual interests and your city, that gap is the thing to weigh.

What the policy does say

In fairness, some of it is candid in a way polished policies often are not:

We take all reasonable measures to prevent such breaches of security, but given the resourcefulness of cyber-criminals we are unable to guarantee that our security is 100% breach-proof. You assume the risk of such breaches to the extent that…

— Collarspace privacy policy, section IX, Our Commitment to Data Security

It also states plainly that it uses cookies to collect information "including, but is not limited to, your username and password", along with browser and IP data.

And one clause worth knowing about, because it shifts a duty onto you:

You agree to re-visit this web page on a weekly basis… You agree to note the date of the last revision to this Policy.

The policy asks users to check it weekly for changes. It has not changed in eight years.

Every URL returns a page — including ones that do not exist

This one is a practical trap, and it changes how you should read anything on the site.

Collarspace resolves usernames at the top level of the domain. So collarspace.com/privacy does not load a privacy policy — it loads the profile of a member named privacy, a switch in Sheffield, UK. collarspace.com/about loads a Dominant's profile named About.

We then requested collarspace.com/zzqqxx9999, a string we invented. It returned HTTP 200 with an empty title rather than a 404.

Two consequences:

1. The real policies are elsewhere. They live under /bdsm/: privacy, safety and a 2257 exemption statement. If you go looking at the obvious URL, you will land on a stranger's profile and may conclude the site has no policy at all.

2. A working link proves nothing. Because no URL 404s, "the page loaded" is not evidence that a profile, feature or page is real. If you are checking whether a username exists, the page loading is not the answer.

Safety: general advice, not platform commitments

The safety page is reasonable and reads as though a person wrote it. Its advice is sound and conventional: never invite an unfamiliar person to your home, never go to theirs, meet in a public venue such as a coffee shop or restaurant.

What it is not is a description of anything the platform does. We found no published commitment to identity verification, photo verification, background screening, or a described moderation and reporting process.

That is not unusual for free BDSM personals sites, and it is not itself a scandal. But it does mean vetting is entirely your job. Our guide to spotting red flags covers the specific patterns worth watching for on any platform of this kind.

The breach question, answered carefully

Search for Collarspace and you will find results implying it was hacked. The honest answer is more specific.

What is documented: the threat-intelligence firm Hudson Rock lists credentials associated with collarspace.com appearing in infostealer logs.

What that means: infostealer malware infects an individual's computer and harvests the passwords saved in their browser, for every site they use. Credentials "associated with a domain" appearing in those logs indicates that some users were personally infected, not that the site's own servers were breached.

What we did not find: any publicly confirmed breach of Collarspace itself.

The practical advice does not depend on resolving this. Use a password unique to this site, and an email address that is not tied to your legal identity. That advice holds whether or not any platform has ever been breached.

Who it suits

Consider it if you want a free, text-first personals site with a genuinely large and active profile base, and you are comfortable treating everything you post as effectively permanent.

Look elsewhere if you need a documented route to delete your data, you are relying on stated GDPR or CCPA rights, or you want the platform to do any vetting on your behalf.

Before you make an account

Four things, all of which apply to any site of this type:

1. Use a unique password. Not a variant of one you use elsewhere.
2. Use an email that is not your legal identity. A dedicated address that is not your work or main personal one.
3. Assume your profile is permanent and public. Nothing published commits the site to deleting it. Write it as though it will outlast your interest.
4. Strip metadata from photos, and think about what is visible in the background of them.

If you are still working out what you would even put on a profile — which role fits, which words you would use, that is worth doing before you write one, not after. Cuffplay's Kink Test is free, needs no account, and gives you the classic vocabulary: Dominant, submissive, switch, and where you sit across five dimensions.