Privacy Policy

What we collect, why we hold it, and how long we keep it.

Last updated: 2026-09-12

Draft pending legal review. Data protection duties depend on where the operator is established and where its users live. If you have users in the EU or UK, the GDPR applies regardless of where you are — have this reviewed.

1. Who is responsible

The controller of your personal data is operator legal name not set. Contact: contact e-mail not set.

2. What we collect and why

Data	Why we hold it	How long
Telegram ID, username, first name, profile photo	To identify your account. Telegram provides these when you open the Service; we never see your phone number or password.	Until the account is deleted
Profile you fill in: display name, bio, country, gender, prices	To show your profile to other users	Until you change or delete it
Photos and posts you upload	To display them to the people entitled to see them	Until you delete them, then up to 30 days in backups
Messages you send in chats	To deliver them and to show your conversation history	Until the account is deleted
Age confirmation: the moment you declared you are 18+	To prove the declaration was made, if we are ever asked	Retained after deletion as legal evidence
Identity documents — photo of an ID and a selfie, submitted by Creators only	To verify a Creator is over 18 before any payout is possible	Deleted immediately once the check is decided. We keep only the decision, the date of birth stated and who reviewed it
Transactions: what was bought, from whom, for how many Coins, when	To run balances and payouts, and to answer disputes	Retained for accounting purposes after deletion
Crypto wallet address, payout requests	To pay Creators	Retained for accounting purposes after deletion
Reports and moderation decisions	To act on complaints and to show a pattern of repeated abuse	Retained after deletion

We do not collect your phone number, e-mail, contacts, precise location, or card details. Payments happen inside Telegram and card data never reaches us.

3. Identity documents deserve a separate paragraph

An ID scan is the most sensitive thing we ever ask for, so we treat it differently from everything else:

it is stored outside the public web directory and is not reachable by any URL, guessable or otherwise;
it is readable only through the admin console, by an administrator who is logged in;
it is deleted permanently the moment the check is approved or rejected — we keep the outcome, not the document;
it is never shown to other users, never used for anything but the age check, and never passed to advertisers.

4. Why we are allowed to hold it

Where the GDPR applies, our legal bases are: performance of a contract for everything needed to run your account and its transactions; legal obligation for age verification and financial records; and legitimate interests for security, fraud prevention and moderation. Consent is used where we ask for it explicitly, and can be withdrawn.

5. Who else sees your data

We do not sell personal data. It is shared only with the parties needed to run the Service:

Telegram — authentication and payments, under its own terms;
Our hosting provider — stores the database and uploaded files;
Cloudflare — relays video-call traffic when a direct connection is impossible. The media is a live stream that is relayed, not recorded or stored;
Law enforcement — when we receive a lawful, specific request, or where reporting is mandatory, in particular for content involving minors.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how it is used, or object to a particular use. Write to contact e-mail not set from the Telegram account concerned, or contact support contact not set. We answer within 30 days.

Deletion has limits we should be honest about: transactions, payouts, age declarations and moderation records are kept even after an account is deleted. We need them to keep our books straight, to answer a chargeback or complaint, and to stop a banned user from simply starting over. Everything else goes.

If you think we have handled your data badly, you may complain to the data protection authority where you live.

7. Security

Traffic is encrypted in transit. Every request is authenticated against a signature issued by Telegram, so one account cannot act as another. Paid content is withheld at the server until it is paid for, rather than merely hidden in the interface. Identity documents are stored outside the web root and deleted after review. Administrative access is password-protected and every action that touches money or access is logged.

No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.

8. Children

The Service is for adults only. We do not knowingly hold data about anyone under 18. If we discover such an account we delete it and its data immediately. If you believe a minor is using the Service, report it at once through the Content Policy — this is treated as the highest priority.

9. Changes

We may update this policy. The date at the top shows the last change, and material changes are announced in the Service before they take effect.