Privacy Policy

Who is responsible for your data

The company that operates MyFans, shown below, is the controller of the personal data described in this policy. For any privacy question or request, write to support@myfans.site.

Creators are independent businesses. If a creator collects personal data outside MyFans, for example in the records they keep as producers, the creator is responsible for that data.

What we collect from visitors

Anyone who browses the platform website or a creator site, with or without an account, sends us some technical data. We collect:

• Your IP address, browser and device information (user agent), the pages you request and the date and time, recorded in our server logs and used for security, such as rate limiting and abuse prevention.
• Your confirmation of the age gate on creator sites and the language you choose, both stored in cookies.

What we collect from fans

Fan accounts are separate for each creator site: if you sign up on two sites with the same email address, you have two accounts. For each account we collect:

• Account details: your email address, your password (stored only as a one-way hash, never in readable form) and your language.
• A record of when you verified your email address, confirmed the age gate and accepted the Terms of Service.
• Your subscriptions, purchases, tips and gifts: the item, amount, date and status of each one, plus the nickname and message you add to a tip or gift.
• Payment details from our payment service provider: the transaction reference, amount and status. You pay on the provider’s secure payment page, and we never see or store your full card number.
• Fraud prevention data: a buyer record that links the fan accounts sharing the same verified email address, and any bans or risk flags on it. A banned buyer cannot pay on any creator site.

What we collect from creators and performers

If you run a creator site, or appear in content published on one (a “performer”), we collect:

• Creator account details: email address, password (stored only as a one-way hash), display name, language, how you heard about us and your acceptance of the Creator Terms.
• Your site: its design, its texts and images, and the content you upload.
• Identity verification of each performer, including the creator: legal name, any stage names, date of birth, country, the type and number of a government photo ID (the number is encrypted), images of the ID, a selfie holding the ID and the signed 18 U.S.C. § 2257 form.
• Payout details: your bank, ACH or crypto wallet details (encrypted) and your address.
• Your earnings and payouts.

The creator submits the verification data of every performer, including their own, from the creator panel. Our moderation team reviews each performer before any content featuring them is published.

Some of this is public by design: your site’s name, style, profile photo and categories appear on your site and, unless you opt out in your site settings, on Discover and (without the photo) on our home page.

What we collect from people who report content

When you report content, through the “Report content” link on a creator site or by email, we collect your email address, your message and the content you report.

Emails and support

We also process the emails we send you, such as email verification messages, receipts and notices, and the messages you send us, so that we can answer you and keep a record of our communications.

How and why we use your data

We use personal data only to run MyFans securely and lawfully. Where data protection laws such as the GDPR apply, each use relies on one of these legal bases:

• Contract: to provide the service you signed up for. This covers creating and running your account, processing subscriptions, purchases, tips and gifts, giving you access to what you bought, sending receipts and service notices, running creator sites and paying creators.
• Legal obligation: to comply with the law, including verifying the age and identity of every performer and keeping the records required by 18 U.S.C. § 2257 and 28 C.F.R. Part 75, keeping tax and accounting records, and reporting child sexual abuse material to the NCMEC CyberTipline. Where such an obligation comes from a law other than that of your country, we rely on our legitimate interest in complying with it.
• Legitimate interests: to keep MyFans secure, to prevent fraud and chargebacks (for example by linking buyer records and banning buyers who abuse the service), to review content and handle reports, to enforce our Terms of Service and Acceptable Use Policy, and to establish or defend legal claims. We rely on these interests only where your rights do not override them.
• Consent: we rely on it only where the law requires it. Where we do, you can withdraw your consent at any time, without affecting what we did before.

Some of this data can be sensitive, because it may reveal information about your sex life or sexual preferences: for example, the creator sites you use or the content in which a performer appears. We use it only to provide and protect the service, never for advertising or marketing, and where the law sets extra conditions for this kind of data, we process it only as those conditions allow.

What creators can see about fans

Creators do not receive your email address or your account details. The only information about you that a creator sees comes from the tips and gifts you send: the nickname you chose (or that you sent it anonymously), your message and the amount.

If you report content, we do not share your identity or your email address with the creator.

Who we share it with

We share personal data only with these categories of recipients, and only as far as each one needs:

• Our payment service provider, which processes payments on its own secure payment page and sends us the result of each transaction.
• Hosting and storage providers that run our servers and store media in the United States.
• An email delivery provider that sends our emails.
• Professional advisers, such as lawyers and accountants.
• Authorities, when the law requires it, including reports of child sexual abuse material to the NCMEC CyberTipline.
• A buyer or successor, if MyFans or its business is involved in a merger, acquisition or sale.
• Creators, limited to what is described in “What creators can see about fans”.

Our hosting, storage and email providers process data on our behalf and only to provide their services to us.

No sale, no advertising, no tracking

We do not sell personal data, and we do not share it for targeted or cross-context behavioral advertising.

We do not use analytics, advertising or tracking tools, and we do not send marketing emails. The emails we send are about your account, your purchases, your site or our policies.

International transfers

We store and process personal data in the United States, where our servers and media storage are located. If you use MyFans from another country, including from the European Economic Area, the United Kingdom or Switzerland, your data will be processed in the United States, whose data protection laws may differ from those of your country.

Where the law requires specific safeguards for these transfers, we rely on the mechanisms it recognizes, such as standard contractual clauses.

How long we keep it

We keep personal data only as long as we need it for the purposes in this policy:

• Account data: while the account exists and, afterwards, for as long as needed for those purposes, to resolve disputes and to meet our legal obligations.
• Transaction records, such as purchases, subscriptions, tips, gifts, earnings and payouts: for as long as tax and accounting laws require.
• Identity documents, verification data and 18 U.S.C. § 2257 records: for as long as the law requires, even after the content is removed, the site is closed or the account is deleted.
• Other data, such as server logs, reports and support emails: for as long as needed for the purpose for which we collected it, to resolve disputes and to meet our legal obligations.

When we no longer need data, we delete it or make it anonymous. Deleted data may remain in our backups for a limited time.

How we protect your data

We protect personal data with technical and organizational measures suited to its sensitivity. For example:

• Identity documents and 2257 forms are kept in private storage that only our moderation team can access.
• ID numbers and payout details are encrypted.
• Passwords are stored only as one-way hashes.
• Connections to the platform website and to creator sites are encrypted with TLS.
• Staff accounts are protected with two-factor authentication.

No system is completely secure. If a security incident affects your personal data, we will notify you and the authorities where the law requires it.

Your rights

Depending on where you live, and in particular if you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to:

• Access the personal data we hold about you and get a copy of it.
• Correct data that is inaccurate or incomplete.
• Ask us to delete your data.
• Ask us to restrict how we use your data, for example while we check a correction you asked for.
• Object to uses based on our legitimate interests.
• Receive the data you gave us in a structured, machine-readable format, or ask us to send it to another provider (portability).
• Withdraw your consent at any time, where we rely on it.
• Complain to a data protection authority, in particular the one in the country where you live or work.

If a US state privacy law applies to you, you may have similar rights, including to opt out of the sale of your data or its use for targeted advertising or profiling, and to appeal our decision on your request. We do not sell your data or use it for targeted advertising, and we will not treat you differently for exercising your rights.

How to exercise your rights

You cannot yet delete your account or download your data yourself. To make any request, write to support@myfans.site. If you can, send it from the email address of your account and tell us which creator site or sites it concerns, since fan accounts are separate for each site.

Before we act on a request, we verify that it comes from you, for example by confirming that you control the email address of the account. We reply within the time the law requires and, if we cannot do what you asked, we explain why.

We may have to keep some data even after you ask us to delete it: for example, transaction records required by tax law, identity verification and 18 U.S.C. § 2257 records, data about fraud and bans, and anything needed for an open report, dispute or legal claim. In those cases we keep only what we must, for as long as we must.

Minors

MyFans is only for adults. You must be at least 18, or the age of majority where you live if that is higher, to use it, and no one under 18 may appear in any content.

We do not knowingly collect personal data from minors. If we learn that we hold data of a minor, we delete it, except what we must keep or report to the authorities, such as reports to the NCMEC CyberTipline. If you believe a minor is using MyFans or appears in any content, tell us right away at support@myfans.site or through the “Report content” link on the creator site.

Cookies

We use only strictly necessary cookies, to keep you signed in and remember your age confirmation, and one that remembers the language you chose. No analytics, advertising or tracking cookies. Our Cookie Policy lists them all.

Changes to this policy

We may update this policy when MyFans changes or when the law requires it. We post the new version on this page with a new date and, for material changes, we let you know in advance by email or on the site.

Contact

For any question about this policy or your data, write to support@myfans.site. Our postal address is at the top of this policy and on our Contact page.