Privacy Policy

Last updated: June 2026

1. Data we collect

We collect email addresses, usernames, and payment-related data. We do not store plaintext passwords. Payment details are processed by our payment provider and we do not store card numbers.

2. Age verification data

Identity verification data is processed by our third-party verification vendor. We store only the verification status and reference ID, not the underlying identity documents.

3. Content data

Uploaded content is stored securely with access controlled by role-level permissions. Private content is only accessible to authorised subscribers and platform administrators.

4. Your rights

Under UK GDPR, you have the right to access, rectify, or erase your personal data. Contact us via the settings page to make a request.

5. Data retention

We retain your data for as long as your account is active, plus any period required by law (e.g. financial records for 7 years).

This is a placeholder privacy policy. Have it reviewed by a solicitor and registered with the ICO before going live. See docs/TODO_HUMAN.md.