Privacy Policy

The data controller is PornWP LLC, Panama. For anything in this policy, use the contact form (topic: Account) or write to admin.pornwp@gmail.com.

Account data - email, password (stored only as a salted hash), display name, avatar, and role. Provided by you when registering.

Content data - what uploaders publish, plus consent and age-verification records required by law for performers.

Usage data - watch history tied to your account only where a feature needs it (favorites, playlists, “following”), aggregate view counters, and short-lived technical logs (IP address, user agent) for security and abuse prevention.

Messages - what you send through the contact form or report buttons, kept so we can handle and audit the request.

We do not sell personal data, and we do not build advertising profiles of visitors.

• Running the service you asked for (contract): accounts, playback, subscriptions, payments.
• Legal obligations: age/consent records for published content, tax and accounting records, responding to lawful orders.
• Legitimate interests: security logging, rate limiting, fraud and abuse prevention, service analytics in aggregate.
• Consent, where we ask for it explicitly - which you can withdraw at any time without affecting prior processing.

We use strictly necessary cookies only by default: a session/refresh token to keep you signed in and a preference cookie (e.g. player quality). These don't require consent banners under the ePrivacy rules because the service cannot work without them.

If advertising is enabled by the operator, ad slots are served without third-party tracking cookies. Should that ever change, a consent banner will be added before any non-essential cookie is set.

• Account data: for the life of the account, then deleted within 30 days of account deletion.
• Security logs (IP, user agent): up to 90 days, then deleted or anonymized.
• Performer age & consent records: for as long as the law requires (these survive account deletion - we are legally required to keep them).
• Contact/report messages: up to 24 months for audit, then deleted.
• Payment records: per tax law, typically 10 years, held by the payment processor and our accounting.

Only processors needed to run the service, each under a data-processing agreement: a hosting/CDN provider (for storage and content delivery), a payment processor (which handles card data directly — we never see card numbers), the email provider for transactional mail, and an identity-verification provider for performer verification.

We disclose data to authorities only when legally compelled, and to the minimum extent required. Transfers outside the EEA, if any, rely on adequacy decisions or Standard Contractual Clauses.

Under the GDPR (and equivalent laws) you can: access a copy of your data, correct it, delete it, restrict or object to processing, take your data with you (portability), and withdraw consent. Deleting your account from account settings exercises deletion for everything not under a legal hold.

You can also complain to your supervisory authority - in Italy, the Garante per la Protezione dei Dati Personali. We'd appreciate the chance to fix it first via the contact form.

Passwords are stored as salted hashes, sessions use short-lived tokens with rotation, all traffic is TLS, media URLs are signed, admin actions are capability-checked and rate-limited, and access to personal data inside the team is role-restricted. No system is perfect; if a breach ever affects your data we will notify you and the authority as the GDPR requires.

This service is strictly for adults. We do not knowingly collect data from anyone under 18; any such account is deleted on discovery. If you believe a minor has accessed the service, report it immediately via the contact form.

Your data may be processed on servers, or by service providers, located outside your country, including outside the EEA. Where that happens we rely on an appropriate safeguard recognised by applicable law — such as an adequacy decision or the European Commission's Standard Contractual Clauses — so your data keeps the same protection wherever it is processed.

If you are unhappy with how we handle your data, contact us first at admin.pornwp@gmail.com so we can put it right.

You also have the right to lodge a complaint with a data-protection supervisory authority — in the EEA, the authority in your country of residence or work; in the UK, the Information Commissioner's Office. Exercising this right does not affect any other legal remedy available to you.