Sosta Glass · Transparency
Everything out in the open. No broker in the background.
Here, in plain words, is what Sosta does with data — and what it deliberately does NOT: no brokering, no following you around the web, your data is yours. Split by guest, talent and establishment.
Sosta's four limits
Sosta is a tool for managing and finding. These four limits are built into the technology and protect guests, talents and establishments alike.
No brokering
Sosta does not bring guest and talent together and brokers neither contact nor appointments. We only provide ways to get in touch: the contact form and the Sosta chat. Contact runs directly through the channels the talent shares herself, or through the establishment; bookings are arranged directly between the people involved. If she switches on the Sosta chat, it is a way to send messages without booking an appointment; messages disappear 24 hours after the last message.
No per-booking commission
Sosta earns from subscriptions at a fixed monthly price — never from the individual deal, never per booking. And: the trust level cannot be bought — it grows only from signs of authenticity, never from a subscription.
No recommendations
We recommend no one and never claim who suits whom. The only paid spot in the order: Talent+ comes before free profiles — but always behind everyone who is there right now.
No public ratings
Nobody is publicly rated or shamed here. Ratings, if any, stay internal and are only shown grouped together, so none can be traced back to a single person.
Business model
Here is what Sosta earns from — and what it explicitly does not.
Not for sale
Visibility and reachability cost nothing. Every talent can be found in the directory and reached through all the contact channels she has shared, without paying a cent.
What is paid for
Convenience and reach tools: all images public, advertising statistics, a second business number, travel planning. Fixed monthly amounts, cancellable monthly — for talents and establishments alike.
Never
No fee per booking or contact. Whoever is open for visits right now always comes first — that is not for sale. There is a paid tier, and we name it: Talent+ comes next, ahead of the free profiles. The trust level is not a product: verification comes from evidence, not from payment.
We abide by the law of each region
Sosta is software for room rental and self-presentation — not a broker. What we enable depends on what is legally permitted locally.
Features follow the law
Where local law does not support an establishment organising a talent or earning from her, we simply do not offer those functions there.
The talent owns her data
Regardless of region, every talent controls her own presentation herself. An establishment presents itself and its rooms — never the person against her will.
Neutral listing or full platform
Some establishments we list only as a neutral directory entry with public business data — no profiles, no brokering. Full management is only available where the law supports it.
For you, specifically
Choose your role and see what Sosta does for you.
You decide what goes public, and you can delete everything.
Photo protection, your choice
You decide for each photo whether photo protection applies — then it can't simply be saved by clicking or dragging. In addition, every protected photo carries a subtle watermark that lets a copied screenshot be traced back. At the start, protection is switched on for every photo.
Your photos reach the linked establishment — but photo protection applies there too. Only what you approve appears publicly (reviewed + with your consent).
Visible on your own — no establishment needed
You don't need an establishment: as an independent advertiser you present yourself in your region, with your own profile and the contact channels you choose to share.
Disappear at the push of a button
Final deletion truly removes everything: your profile and your stored images. The change log is anonymised, and backups are replaced within less than 30 days.
You control all visibility
Per establishment, per surface (establishment website, showcase, directory) — revocable at any time, hidden instantly. Hidden when you're not working.
An establishment cannot show you without asking — visibility stays with you.
Age & identity private
Your date of birth is never public — you choose the displayed age yourself. Pseudonym instead of real name.
No forced direct contact
Depending on the profile, inquiries go directly via the shared channels or via the establishment. In freely written text we automatically remove phone numbers, email addresses and social media names — so Sosta never becomes a way to follow or harass you.
A guest only gets the channels you share yourself — nothing else. We automatically remove contact details from freely written text, and which number goes public is your call — a separate work number, for instance.
Nothing sensitive without your yes
Special-category data (gender, origin, preferences, limits) is stored only with your explicit consent — revocable at any time. You maintain your own profile.
The establishment sees your limits and preferences internally — precisely so that they're respected. It cannot change them.
Understand the data flow
Data flows from you to the next role — and a safeguard applies at every boundary.
Talents decide for themselves whether to share their own ways of contact or have inquiries go via the respective establishment. Sosta only provides the pages for this.
Access rights by role
Five roles — here you can see who may view which areas. The table is generated from exactly the rules our servers actually enforce. It shows the areas guests, talents and establishments work with.
Establishment owner
Establishment owner: full management of their own establishment — talents, website, billing, settings. No access to other establishments.
Office team
Office team: day-to-day work (maintain profiles, publish) — but no final deletion, no billing, no establishment settings.
Talent
Talent: full control over their own profile, images, visibility and consents. Sees only their own data.
Guest
Guest: sees the curated public directory after confirming they are of legal age. No brokering through Sosta — talents decide for themselves whether to share their own contact channels (e.g. phone/WhatsApp) or the Sosta chat.
Sosta platform
Sosta platform: operations and oversight of the rules, management access with a second sign-in step or passkey (recommended), every action logged. No selling of data, disclosure only with a court order.
Data storage location
Database, storage and backups are in the EU. Images are never stored in the database but separately in their own file storage. Backups are encrypted and replaced within less than 30 days — so a final deletion truly takes effect.
Security & service providers
Management accounts have a second sign-in step and passkeys — available and recommended; every sensitive action is logged without gaps.
We answer law-enforcement requests only with a written legal basis — we disclose nothing without a court order.
Your sign-in — you choose the protection
A second sign-in step is optional at Sosta. You stay signed in for a long time, with no code on every visit, and you can sign out everywhere at any time.
If you want extra protection, you can choose:
- Passkey — Face ID, fingerprint or device PIN (recommended on mobile)
- Authenticator code — the 6-digit code from a separate device (ideal on desktop)
Service providers who process data for us
We work with as few service providers as possible. The foundation — servers, storage, backups — is in the EU. Two services (email, maps) are US providers; data goes there only on the basis of the EU's standard contractual clauses. All disclosed here:
- Hostinger Operations UABApplication hostingEU
- MinIO (selbst betrieben)Image and file storage (separate from the database)EU
- Contabo GmbHEncrypted backupsEU
- Plus Five Five, Inc. (»Resend«)System emails (sign-in codes, notifications)USA (DPF/SCC)
- MapboxMaps in the directoryUSA (DPF/SCC)
- CARTOMaps in the directoryUSA (SCC)
- OpenStreetMap Foundation (»Nominatim«)Converting addresses to coordinatesUK
- Umami (selbst betrieben)Anonymous visit counting without cookiesEU
- seven communications GmbH (»seven.io«)SMS delivery for phone verification (talent code)EU
- GlitchTip (selbst betrieben)Technical error monitoring (no personal data)EU
Features and their legal basis
The features catalogue answers the most common questions from guests, talents and establishments — briefly and in depth, with the laws behind them.
To the features catalogueA copy of your data
Signed in, you can download a complete copy of your data at any time — including your consents.
Go to sign-in