Draft — not yet reviewed by a lawyer. This page is structural scaffolding showing what must be covered. It must be replaced with text from a lawyer qualified in each market you serve (UK, USA, Germany) before launch. See docs/COMPLIANCE.md.
Privacy policy
This explains what we collect and why. Adult browsing history is special-category data under UK and EU GDPR, so it is held to a higher standard than ordinary analytics.
What we collect
Account data (email, username, and anything you add to your profile). Uploaded content and its metadata. View records, which store a salted hash of IP address and browser string rather than the address itself, plus a country code. Moderation decisions and their reasons.
What we do not do
We do not store your IP address against your viewing history, and we do not sell personal data.
Cookies
A session cookie keeps you signed in. A region cookie remembers your country selection. An age-acknowledgement cookie records that you passed the age gate. These are necessary for the site to function.
Your rights
Under UK/EU GDPR you may request access to, correction of, or erasure of your personal data, and object to processing. To be completed by counsel: the contact route and response process for these requests, plus the lawful basis relied on for each purpose, the retention schedule, international transfer mechanism, and the supervisory authority for complaints.
Data controller
To be completed: the operating entity's legal name, registered address and contact address, plus a Data Protection Officer or EU/UK representative where required.
Last updated: not yet published.