Privacy Policy

This Privacy Policy explains how TrueFans ("TrueFans", "we", "us") collects, uses, discloses and protects personal data of users of truefans.fun (the "platform"). It applies to all visitors, fans and creators. Because TrueFans is an adults-only platform, all data processing described here relates exclusively to adults aged 18 or over.

By using the platform you acknowledge the practices described in this Policy. Where we rely on consent as a legal basis, you may withdraw it at any time as described below.

We collect the following categories of personal data:

• Account information: email address, username, password (stored only as a cryptographic hash), date of birth confirmation, profile details, avatar and bio.
• Payment data: payments are processed by third-party payment processors. We receive and store transaction metadata (amounts, dates, subscription status, last four digits of the card where provided by the processor) but we never store full payment card numbers.
• Creator identity (KYC) data: for creators, government-issued photo ID, verification selfie, legal name, date of birth, address and payout details, collected directly or through our identity-verification providers, as required by law (including 18 U.S.C. §2257) and for fraud prevention.
• Usage data: pages viewed, content interactions, subscriptions, purchases, messages metadata, search queries, device and browser information, IP address and approximate location derived from it.
• Content data: content you upload, messages you send, and communications with support.
• Cookies and similar technologies: as described in our Cookie Notice.

We use personal data to:

• Provide, operate and maintain the platform, including subscriptions, payments and payouts;
• Verify age and identity, and comply with legal obligations (including §2257 record-keeping and tax reporting);
• Process transactions and prevent fraud, chargebacks and abuse;
• Moderate content and enforce our Terms of Service;
• Personalize content discovery and recommendations;
• Communicate with you about your account, transactions and platform updates;
• Analyze and improve platform performance, security and features;
• Comply with legal process and protect our rights and the safety of users.

Where the EU/UK General Data Protection Regulation applies, we process personal data on the following legal bases: (a) performance of a contract — to provide the services you sign up for; (b) legal obligation — age and identity verification, record-keeping, tax and anti-money-laundering compliance; (c) legitimate interests — platform security, fraud prevention, analytics and product improvement, balanced against your rights; and (d) consent — for optional cookies and certain marketing communications, which you may withdraw at any time.

We do not sell your personal data. We share data only with:

• Payment processors, to process purchases and payouts, subject to their own privacy policies and PCI-DSS obligations;
• Identity-verification providers, to perform creator KYC and age checks;
• Service providers (hosting, analytics, email delivery, customer support) under data-processing agreements;
• Authorities and legal parties, where required by law, court order, or to protect rights, safety and prevent fraud;
• Other users, only the information you choose to make public (username, profile, published content). Fans' purchase activity is visible to the creators they pay, to the extent needed to deliver the service.

We retain account data for as long as your account is active. After account deletion, we delete or anonymize personal data within a reasonable period, except where retention is required by law — notably, creator age-verification records are retained as required by 18 U.S.C. §2257, and transaction records are retained for tax, accounting and anti-fraud purposes (typically up to 7 years). Backup copies are purged on a rolling schedule.

Depending on your jurisdiction (including under GDPR and CCPA/CPRA), you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Request erasure of your data, subject to legal retention obligations;
• Data portability — receive your data in a structured, machine-readable format;
• Object to or restrict certain processing, including direct marketing;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at privacy@truefans.fun. We may need to verify your identity before acting on a request. We do not discriminate against users for exercising their privacy rights.

We use cookies and similar technologies for authentication, security, preferences and analytics. Full details — including the categories of cookies we use and how to control them — are set out in our Cookie Notice.

We implement technical and organizational measures appropriate to the sensitivity of the data we handle, including encryption in transit (TLS), hashed password storage, access controls, least-privilege internal access to identity documents, and monitoring for unauthorized access. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

We may process and store data in countries other than your own, including the United States. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, and we require equivalent protections from our service providers.

TrueFans is strictly for adults. We do not knowingly collect personal data from anyone under 18, and no part of the platform is directed at minors. If we learn that we have collected data from a person under 18, we will delete it and terminate the associated account promptly. If you believe a minor is using the platform, contact us immediately at privacy@truefans.fun.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date and, where appropriate, notified by email or in-platform notice. Continued use after the effective date constitutes acknowledgement of the updated Policy.

For privacy questions, requests or complaints, contact our Data Protection Officer at privacy@truefans.fun. We aim to respond to all verified requests within 30 days.