What we collect
Account data: your email address, a hashed password, and for creators the identity and age verification records the law requires. Transaction data: what was bought, when, for how much, and its status. Usage data: the events needed to operate the service and to detect fraud.
What we deliberately do not store
We do not store raw IP addresses anywhere — not in the database, not in logs, and not in analytics. Where an address is needed for rate limiting or fraud detection it is stored only as a salted hash, which cannot be reversed to the original.
We never see or store your full card details. Payment credentials go directly to our payment partner.
Why we process it
To operate your account and deliver what you bought; to take payment and pay creators; to meet the record-keeping obligations that apply to adult content; to detect and prevent fraud and abuse; and to respond to you when you contact us.
Retention
Account and transaction records are kept for as long as the account exists and afterwards for as long as tax, accounting and record-keeping law requires. Verification records for adult content are kept for the period the applicable regulations set. Operational logs are kept for a short, fixed window and then deleted.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to some processing. Write to [SUPPORT EMAIL]. Some data cannot be deleted on request because we are legally required to retain it — we will say so and explain which.
Security
Passwords are stored using a modern memory-hard hash. Media is held in private storage and delivered only through short-lived signed links issued after an access check. Sessions are held in HTTP-only cookies and rotate.