Privacy

What is collected

• A random device id in a cookie (cl_did, kept for 365 days) and a random session id (cl_sid, for the visit).
• Viewing behaviour on this site: which rooms were shown, opened, skipped, how long they were on screen, and clicks to a room or on an ad (which page and which place on it).
• "Record her" votes, stored only as a keyed hash of this browser's anonymous id, never the id itself, so each browser counts once. Where there is no device id, a random id is kept in a cookie (cl_bid) after your first vote.
• Favourites you save (in your browser, and on your account if you sign in).
• If you create an account: your email address and the username you choose. Sign-in codes are emailed through Cloudflare, our hosting provider. A code is kept only as a one-way hash until it is used or expires, and a keyed hash of your email and of your IP address is kept for two days, only to limit how many codes can be asked for. While you are signed in, the sign-in service (Supabase Auth, which also hosts our database) keeps the IP address and browser type of each sign-in session with that session; signing out ends the session, and deleting your account removes them.
• Search terms you type here and how many results they returned.
• Your country and region as reported by our hosting provider, used only to hide rooms that must not be shown where you are and to decide whether consent is required. Apart from a sign-in session (above), your IP address itself is not stored anywhere.

Why

To order and personalise the rooms shown to you, to measure which surfaces of the site lead to a room being opened, and to keep the site working. Nothing is sold. Ads here are plain links this site draws itself; no advertising network or ad script is involved.

How long

Event rows are kept for 13 months and then folded into per-device aggregates that no longer contain individual events. Click and revenue records are kept for accounting but are unlinked from your device when you ask for deletion.

Consent and Global Privacy Control

Visitors in the EU and the UK are asked before any tracking cookie is set; without a yes, nothing is recorded. A browser Global Privacy Control signal is honoured everywhere and switches tracking off.

Your controls

Reset my taste removes everything stored against your device id and issues a fresh id. Delete my data does the same and also clears your consent choice. Both clear this browser's local storage. Delete my account, on the sign-in page, removes your account, its username and the favourites saved on it.

A performer listed here can remove her own profile, and stop recordings of her, on Remove my profile.

Third parties

Live video is played by the Stripchat player, loaded from their servers; the player and the snapshot images are served by their content delivery networks and are subject to their own privacy terms. This site hosts neither the live video nor the snapshots.

On the Chaturbate pages (/chaturbate), your browser asks Chaturbate directly which rooms are live and loads their images from Chaturbate's servers, so Chaturbate sees that request as it would on its own site. Asking from your browser is what lets Chaturbate leave out rooms that are not available where you are. Nothing about that request reaches this site, and their room links lead to Chaturbate under its own privacy terms.

Recorded shows (/videos) are played by voe.sx, a video host, in its own player. The player loads only when you press play, from voe's servers and under its own privacy terms; until then a recorded show page loads nothing from it. A recorded show's still and its strip of preview frames are cut from our own recording and served from cumlov.com, like the page itself, and they are removed with the recording.