Privacy Policy

Last updated · September 2026

1. What we collect

Account data (email, username, display name, date of birth for age verification), transactional data (coin ledger entries, request event timelines), and technical data (session cookies, rate-limit counters, audit logs).

Creators additionally submit identity documents for verification. These are stored encrypted, access-restricted to trust operations, and never shown to other users.

2. How we use it

To operate escrow and payments, enforce age and identity requirements, prevent fraud and abuse through automated scoring, resolve disputes, and meet legal obligations. We do not sell personal data.

3. Live sessions

The platform does not record live sessions. Real-time video is relayed between participants and not persisted. Chat messages are retained for moderation and dispute evidence windows.

4. Your controls

You control DM privacy and activity visibility in your profile. You may report or block any participant at any time. You may request export or deletion of your data; transaction ledgers are retained where required for financial-records law.

5. Security

Passwords are hashed (scrypt), sessions are httpOnly cookies with CSRF protection, all mutations are origin-checked and rate-limited, and financial events are append-only. Payment webhooks are HMAC-SHA256 verified.