Privacy Policy

This policy describes what information SextingFinder ("the Platform") actually collects and how it is actually used, based on how the Platform is built today. It only describes data handling that the Platform's systems genuinely perform — it does not claim broader data collection than what is described here.

Account information

When you register, we collect your email address, chosen username, and password.

Your password is never stored in plain text — it is hashed before storage, and existing account passwords are never exposed to Platform staff or admins in a readable form. Your account also has an internal status (active/suspended/banned), verification status, and role (user/admin), all server-controlled and used to enforce access to the Platform.

Public profile information

If you create a profile, the following is displayed publicly to any visitor browsing the directory: your chosen app (Kik, Snapchat, or Telegram) and the username on that app, age, gender, orientation, an optional description, tags, and any avatar/gallery images you upload. Only the fields you actually submit for a profile are shown — a profile is not linked publicly to your account email.

Uploaded media

Avatar and gallery images you upload for a profile are stored in S3-compatible object storage (an AWS S3-compatible provider) and served from that storage provider's own domain. Deleting an image through the Platform removes it from that storage.

Usage and activity information

We record certain activity needed to operate the Platform's own features: your last login time, and — for Featured campaigns you run — aggregate impression, view-duration, and click counts on your own campaign (not tied to which individual visitor viewed or clicked). We do not run any third-party analytics, advertising, or tracking script on the Platform.

Cookies

The Platform uses two authentication cookies (an access token and a refresh token) to keep you signed in. Both are httpOnly — they cannot be read by JavaScript running on any page, including this one — and are sent only to the Platform's own backend. We do not use advertising or cross-site tracking cookies.

Separately, your browser's local storage is used to remember that you confirmed the age gate on your first visit, so it doesn't reappear on every page load. This value never leaves your browser and is not sent to our servers.

Security and logging

Passwords are hashed before storage. Authentication endpoints are rate-limited to reduce the impact of automated abuse. Administrative actions taken on accounts, profiles, media, and reports are recorded in an internal audit log, visible only to Platform administrators, so that moderation actions are traceable.

Reports and moderation data

If you submit a report against a profile or media item, we store the report's reason, your optional description, your account as the reporter, and the outcome (open/resolved/dismissed) set by an administrator. This information is used only for moderation and is visible only to administrators — it is never shown to the reported user or any other visitor.

Wallet and credit information

We store your credit balance and a ledger of credit transactions (free daily grants, amounts spent on Featured placements, and any administrator adjustment). The Platform does not currently process real-money payments — no payment card, billing address, or other financial information is collected, because there is currently no feature that would collect it.

Data retention and deletion

Deleting a profile removes it from public view; a record is retained internally (rather than permanently erased) so that moderation history and the credit ledger tied to it remain consistent. There is currently no self-service "delete my account" feature. If you would like your account data removed, contact us using the details below and we will address the request manually.

Third-party services

The Platform currently relies on: a database provider (MongoDB) to store the data described above, and an S3-compatible object storage provider to host uploaded images. We do not currently use an email delivery service — account verification and password-reset links are issued directly through the Platform rather than emailed. We do not share your information with advertisers or data brokers.

Your rights

You can update your profile content or delete a profile at any time from your account. For any other request — including access to, correction of, or deletion of your account information — contact us using the details below, and depending on your jurisdiction you may have additional rights over your personal data that we will honor on request.

Children's / minors' policy

The Platform is not directed at, and must not be used by, anyone under 18 years of age. We do not knowingly collect information from a minor. If we learn that an account belongs to someone under 18, the account and any associated content will be removed. See our Terms of Service for more on adult-only eligibility.

Changes to this policy

We may update this policy as the Platform's features change. The "Last updated" date above reflects the most recent revision; material changes will be reflected here before they take effect.

Contact

Questions about this policy, or a data request, can be sent to [Support/contact email — to be provided]. Operated by [Operator legal name/entity — to be provided].