| X-Auth-Token | The session token (a UUID) used to access the app API |
| Refresh token | A long-lived token used to get a new X-Auth-Token when the old one expires. It rotates every time it is used. |
| OTP | One-Time Password: the single-use code sent by SMS |
| Protobuf | Google's Protocol Buffers binary format, used by /v3/auth/login |
| Arkose Labs | The CAPTCHA and bot-detection provider Tinder uses |
| recs | Recommendations: the cards in the swipe deck |
| s_number | A per-card number that is sent back in like and pass requests |
| content_hash | A hash of a card's content |
| teaser | A short preview shown on a card or on the "Likes You" screen |
| fast-match | The API name for the "Likes You" feature |
| Boost | Puts your profile in front for a limited time 💳 |
| Super Like | A like the other person is explicitly notified about |
| Passport | Moves your swiping location to another city 💳 |
| Duos | "Double Date" mode, where two people share a profile |
| Global mode | Recommendations from around the world, with language preferences |
| Tinder U | A discovery mode for university students |
| Soft block | A short-lived restriction: an empty deck or errors |
| Circuit breaker | A design pattern that automatically stops requests after an error |
| Jitter | Random variation added to the delay between requests |
| MCP | Model Context Protocol: a standard for connecting AI agents to external tools |
| OpenAPI / Swagger | A standard for describing REST APIs in a machine-readable way |
| GDPR | The EU General Data Protection Regulation |
| KVKK | Türkiye's Personal Data Protection Law (No. 6698) |