★ Summary
The short version: we collect what's necessary to run the Service, never sell your data, encrypt what we store, and let you delete your account and most of its data at any time.
1. Information We Collect
1.1 Account Information
- Email & username — required for account creation and login;
- Password — stored only as a salted hash; we never see it in plain text;
- Date of birth — used for age verification, never displayed publicly;
- Profile info — bio, avatar, preferences (only what you choose to provide).
1.2 For Models (Additional)
- Government-issued ID for identity and age verification (encrypted at rest, retained per 18 U.S.C. § 2257);
- Payout details (banking or processor information) handled by our PCI-compliant payment partners.
1.3 Usage Information
- IP address, browser type, device identifiers, language;
- Pages visited, features used, approximate timestamps;
- Content you upload, messages you send (encrypted at rest, decrypted only at the recipient's request).
2. How We Use Your Information
- To provide, operate, and improve the Service;
- To verify age, identity, and eligibility;
- To process payments and creator payouts;
- To detect, prevent, and respond to fraud, abuse, and policy violations;
- To send transactional communications (password resets, receipts, security alerts);
- To comply with legal obligations, including 18 U.S.C. § 2257 record-keeping.
We do not use your data to train third-party advertising models or to sell to data brokers.
3. Sharing
We share information only with:
- Service providers who run infrastructure on our behalf (hosting, payment processing, email delivery), bound by contract to handle data only as instructed;
- Law enforcement or courts where legally required by a valid subpoena, warrant, or court order;
- Successors in interest if ChicaBate Media LLC is acquired or merged (subject to this Policy continuing to apply).
We never sell, rent, or trade your personal information.
4. Cookies & Tracking
We use a small number of cookies for essential functions and for understanding aggregate usage. You can disable non-essential cookies from your account settings.
- Essential — session, CSRF protection, age-gate acknowledgement. Cannot be disabled.
- Functional — language and theme preferences.
- Analytics — privacy-respecting first-party analytics (no third-party trackers).
5. Retention
We keep your account data for as long as your account is active. After deletion:
- Profile, content, and messages are removed within 30 days;
- Anonymised logs may be retained up to 12 months for security and fraud-prevention purposes;
- Records required by law (2257 records, financial records) are retained for the period required by the relevant statute.
6. Security
We encrypt data in transit (TLS 1.3) and at rest (AES-256). Sensitive fields (IDs, payout details) are encrypted with hardware-backed keys and accessible only by a small group of compliance personnel.
No system is perfect — but we run continuous monitoring, regular third-party security audits, and a bug-bounty programme open to researchers.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your account and associated personal information;
- Object to or restrict certain processing;
- Receive a portable copy of your data;
- Withdraw consent at any time.
To exercise any of these rights, email privacy@chicabate.com. We will respond within 30 days.
8. International Users
The Service is operated from the United States. If you access the Service from outside the U.S., your data will be transferred to and stored in the U.S. We rely on Standard Contractual Clauses and other valid transfer mechanisms for transfers from the EEA, UK, and Switzerland.
9. Children's Privacy
The Service is intended exclusively for adults (18+ or local age of majority, whichever is higher). We do not knowingly collect personal information from minors. If we learn that a minor has provided us with information, we will delete it immediately.
10. Changes to This Policy
We may update this Policy. Material changes will be communicated in-product or by email. The "Last updated" date above always reflects the current version.
11. Contact
Privacy questions or requests: privacy@chicabate.com
EU Data Protection Officer: dpo@chicabate.com
ChicaBate Media LLC
Attn: Privacy Team
1209 Orange Street
Wilmington, DE 19801, USA