1. What we collect
1.1. Account data. Email address, password (stored only as a secure hash), display name, plan, language and account settings.
1.2. Membership and purchase data. Plan, billing period, purchase history, renewal dates and the last four digits and type of your card or the fact that you paid with crypto. We do not receive or store your full card number.
1.3. Usage data. Pages and titles viewed, watch time, favorites, watch later lists, downloads (for VIP), device type, browser, IP address and approximate location derived from it, and security logs.
1.4. Creator data. Legal name, stage names, payout details, tax information where required, uploaded content, earnings and messages with fans.
1.5. Communications. Messages you send us at support@fellate.com, messages between fans and creators on the service, and reports.
1.6. Removal requests and reports. Your email, the links you send, your relationship to the content and your description.
2. Verification data
2.1. Creators and co-performers. To meet the record keeping duties described in our 2257 statement, we keep a copy of the government ID, the result of the live selfie check, legal name, date of birth, stage names and signed consent records. This data is stored with restricted access, never shown to members or other creators, and kept for as long as the law requires.
2.2. Fans. Where the law of your state or country requires an age check, we keep only the result (verified adult, yes or no), the method and the date. We do not keep a copy of your document. See age verification.
2.3. Verification is carried out with an identity verification partner that processes the images on our behalf and deletes them according to its retention rules and the law.
3. Why we use your data and on what legal basis
Creating and running your account, providing memberships and creator subscriptions
- Legal basis under GDPR
- Performance of a contract
Taking payments, preventing fraud and chargebacks
- Legal basis under GDPR
- Contract and legitimate interest
Age and identity verification, consent records, 2257 records
- Legal basis under GDPR
- Legal obligation
Reviewing uploads, handling reports and removal requests, reporting abuse material to NCMEC
- Legal basis under GDPR
- Legal obligation and legitimate interest in protecting people
Paying creators and splitting the library revenue pool
- Legal basis under GDPR
- Performance of a contract
Security, logs and keeping the service working
- Legal basis under GDPR
- Legitimate interest
Service emails such as receipts, renewal notices and policy changes
- Legal basis under GDPR
- Performance of a contract
Optional emails about new drops
- Legal basis under GDPR
- Consent, which you can withdraw at any time
| Purpose | Legal basis under GDPR |
|---|---|
| Creating and running your account, providing memberships and creator subscriptions | Performance of a contract |
| Taking payments, preventing fraud and chargebacks | Contract and legitimate interest |
| Age and identity verification, consent records, 2257 records | Legal obligation |
| Reviewing uploads, handling reports and removal requests, reporting abuse material to NCMEC | Legal obligation and legitimate interest in protecting people |
| Paying creators and splitting the library revenue pool | Performance of a contract |
| Security, logs and keeping the service working | Legitimate interest |
| Service emails such as receipts, renewal notices and policy changes | Performance of a contract |
| Optional emails about new drops | Consent, which you can withdraw at any time |
Data about sexual preferences that may be inferred from what you watch is treated as sensitive. We use it only to provide the service you asked for, such as your favorites and collections, and never for advertising.
5. Who receives your data
We do not sell or rent personal data, and we do not share it for advertising. We share data only with these categories of recipients, each bound by a contract to use it only on our instructions:
- our hosting provider and storage provider for the service and its video files
- our adult payment processor and a crypto payment provider, which handle payments and fraud checks
- an identity verification partner for age and identity checks
- an email delivery provider for confirmation codes, receipts and service emails
- professional advisers, such as lawyers and accountants, where needed
- NCMEC, law enforcement and courts, when the law requires it or a person may be in danger
Creators see your display name and the messages and purchases you make with them. They never see your email, legal name or payment details.
6. How long we keep data
Account data
- How long
- While your account is open, then deleted within 90 days of closure, except as below
Purchase and tax records
- How long
- As long as tax and accounting laws require
Fan age check result
- How long
- While your account is open, deleted at closure
Creator and co-performer verification and consent records
- How long
- As long as 18 U.S.C. 2257 and other applicable laws require after the content is removed
Security logs
- How long
- Up to 12 months
Removal requests and reports
- How long
- As long as needed to handle them and to show we handled them lawfully
| Data | How long |
|---|---|
| Account data | While your account is open, then deleted within 90 days of closure, except as below |
| Purchase and tax records | As long as tax and accounting laws require |
| Fan age check result | While your account is open, deleted at closure |
| Creator and co-performer verification and consent records | As long as 18 U.S.C. 2257 and other applicable laws require after the content is removed |
| Security logs | Up to 12 months |
| Removal requests and reports | As long as needed to handle them and to show we handled them lawfully |
7. Your rights
7.1. If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format and withdraw consent at any time. You may also complain to your local data protection authority.
7.2. If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect and how we use it, to access and delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross context behavioral advertising, so there is nothing to opt out of.
7.3. To use any right, write to support@fellate.com from the email on your account. We may ask you to confirm your identity and we reply within the time the law sets, usually one month under GDPR and 45 days under California law.
7.4. Some data, such as 2257 records and tax records, must be kept even after a deletion request because the law requires it. We will tell you if that applies.
8. International transfers
Our providers may process data in the United States, the European Union or other countries. Where data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on standard contractual clauses or another lawful transfer mechanism.
9. Security
We protect data with encryption in transit, hashed passwords, restricted staff access to verification records and regular security reviews. No system is perfectly secure, so please use a strong, unique password.
10. Children
Fellate is only for adults. We do not knowingly collect data from anyone under 18. If we learn that a person under 18 has created an account, we close it and delete the data, except where the law requires us to keep and report it.
11. Changes to this policy
We update this policy when the service or the law changes. The effective date at the top shows the latest version, and we tell members and creators about material changes by email.
12. Contact
Questions and requests about privacy can be sent to the administrator of the fellate.com service at support@fellate.com. See also our terms of service and discreet billing pages.