·
Sign in
Last updated: October 2026

Privacy policy

Here we explain which data we process, why, for how long and which rights you have (General Data Protection Regulation, GDPR).

1. Controller

SelfSense, LLC1111B South Governors AvenueDover, DE 19904USAEmail: [email protected]

Data protection officer

To be appointed shortly. Until then, contact us about any privacy matter at [email protected].

2. Data we process

  • Account: email address, username, password (encrypted), language, preferences (optional).
  • Age check: the result “18+ confirmed”, time and provider – not the selfie.
  • Usage: minutes watched, purchases, subscriptions, favourites, messages to Live Creators, technical logs (e.g. IP address, device, time).
  • Payment: payment method, last four digits of the card, expiry date, amounts. Full card data is processed only by the payment provider.
  • Live Creators additionally: ID, liveness selfie, consent form, payout details.

3. Purposes and legal bases

  • Performing the contract – account, live chat, purchases, billing (Art. 6(1)(b) GDPR).
  • Legal obligations – age checks, youth protection, keeping accounting records and 2257 records (Art. 6(1)(c) GDPR).
  • Legitimate interests – security, fraud and abuse prevention, error analysis (Art. 6(1)(f) GDPR).
  • Consent – newsletter and optional details on gender, interests and preferences; these may reveal information about your sex life and are only stored with your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR). You can withdraw it anytime.

4. Selfie age estimation

Before your first live picture a specialised provider estimates your age from a selfie. The image is used only for the estimate and deleted immediately – neither we nor the Live Creator see it. We only store the result (e.g. “18+ confirmed”) and the time.

5. Recipients and processors

We use carefully selected service providers that process data only on our behalf:

  • Supabase – database, sign-in and storage (data centre in the EU).
  • Cloudflare – website delivery and protection against attacks.
  • LiveKit – transmission of live video.
  • Resend – sending emails (e.g. confirmations).
  • Payment providers (e.g. PayPal and card processors) – handling payments.
  • Translation service – automatic translation of chat messages.
  • Age estimation provider – see section 4.

6. Transfers to third countries

SelfSense, LLC is based in the USA, as are some service providers. Transfers to the USA are based on the EU-US Data Privacy Framework where the recipient is certified, otherwise on EU standard contractual clauses (Art. 46 GDPR).

7. Retention

  • Account data: as long as your account exists; after deletion it is removed unless we must keep it by law.
  • Accounting and payment records: as long as tax and commercial law requires (usually up to 10 years).
  • Technical logs: usually 30 days at most, longer in case of security incidents.
  • Live Creators' proof of age: as long as required by law (including 18 U.S.C. § 2257).

8. Your rights

  • Access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR).
  • Objection to processing based on legitimate interests (Art. 21 GDPR).
  • Withdrawal of consent anytime with effect for the future.
  • Complaint to a data protection authority, e.g. in your country of residence.
  • You can export your data and delete your account directly under “Privacy” in your account.

9. Cookies and local storage

We only use technically necessary storage: your sign-in session and small entries in your browser's local storage (localStorage), e.g. your age confirmation, your language and whether you have already seen a notice. We do not use advertising or tracking cookies. No consent is required for this (§ 25(2) German TDDDG).

10. Contact

Privacy questions: [email protected]