Privacy Policy

Version 1.0 • Effective Oct. 26, 2026

This policy explains how James Smith (individual operator) ("we"), operator of Pornvanta, uses personal data. Controller address: 1168A Concord Rd, Atlanta, GA 30080, USA. Privacy contact: pornvanta@gmail.com. Data protection officer / contact: dpo@pornvanta.com. EU representative: DataRep (Legal Name: Data Protection Representative Limited). UK representative: DataRep (Legal Name: BPM Legal UK Limited).

1. What we collect

• Visitors: IP address, device and browser data, pages viewed and security logs; a session cookie; your cookie choices; the saved-video list stored in your session; the result (pass/fail) of an age check.
• Age checks: the age-assurance provider handles any ID or face data under its own notice. We keep only the outcome and a technical reference, and delete it after the retention period below.
• Creators: username, email, display name, password (hashed), uploaded files, the names and verification records of people appearing in your videos, and your moderation history.
• Comments, reports and requests: name, email, content of your message and the case history.
• Advertising: if you accept advertising cookies, our ad partners may collect identifiers and browsing data to show and measure ads.

2. Why we use it and our legal bases (EU/UK GDPR)

• Run the site and your account (contract).
• Keep the service secure, prevent abuse, fight illegal content and defend legal claims (legitimate interests, and legal obligation).
• Check that visitors are adults and meet legal duties on illegal content, record-keeping and law-enforcement requests (legal obligation).
• Analytics and personalised advertising, only if you consent (consent; you can withdraw at any time in Cookie preferences).

Viewing adult material can reveal information about a person's sex life. We do not build profiles from what you watch, and we do not use that information for advertising unless you have given explicit consent to advertising cookies.

3. How long we keep it

• Age-check records: 7 days by default, then deleted.
• Server and security logs: up to 90 days.
• Unapproved comments: 90 days. Handled report emails: 12 months.
• Safety, privacy and takedown cases: 24 months after closing, then anonymised.
• Creator accounts: until you delete them; verification and 2257-type records for as long as the law requires.

4. Who receives it

Hosting and infrastructure providers, our age-assurance provider, email and security providers, advertising partners (only with your consent), professional advisers, and authorities where the law requires. Providers act under written contracts. We do not sell personal data for money.

5. International transfers

Data may be processed outside your country. For transfers from the EEA/UK we rely on adequacy decisions (including the EU-US Data Privacy Framework and UK Extension where certified), EU Standard Contractual Clauses and the UK IDTA/Addendum, with additional safeguards where needed.

6. Your rights (EU and UK)

You can ask to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. We respond within one month. Creators can download or delete their data from the dashboard. To use other rights, use the Safety Request form (choose "Privacy / data rights request") or email pornvanta@gmail.com. You may complain to your data protection authority, or in the UK to the Information Commissioner's Office (ico.org.uk).

7. Your rights (United States)

Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas and others) you may have the right to know, access, correct, delete and port your personal information, to opt out of its sale or sharing for cross-context behavioural advertising and of targeted advertising, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.

• Sale/sharing: advertising cookies, if you accept them, may count as "sharing" or "targeted advertising". Use "Do Not Sell or Share My Personal Information" (footer) or Cookie preferences to opt out. We honour the Global Privacy Control signal.
• Requests: use the Safety Request form or pornvanta@gmail.com. We respond within 45 days (extendable once where the law allows). An authorised agent may submit a request with your written permission; we may verify identity. You can appeal a refusal by replying to our decision.
• Sensitive information: we do not intentionally collect it, other than what an account or request message may contain.

8. Children

The site is for adults only and we do not knowingly collect data from anyone under 18. If you believe a child has used the site, contact pornvanta@gmail.com and we will act promptly.

9. Security and breaches

We use access controls, encryption in transit, hashing of passwords, private quarantine storage for uploads and audit logging. We will notify regulators and affected people of personal-data breaches as the law requires (for the EU/UK, regulators within 72 hours where required).

10. Changes and contact

We will update this page when practices change and show the effective date. Contact: pornvanta@gmail.com, 1168A Concord Rd, Atlanta, GA 30080, USA.