Privacy Policy

1.1 Account Information

When you register, we collect:

• •Email address and password (stored as a salted hash);
• •Username and display name;
• •Profile photo and optional bio;
• •Date of birth (to verify you are 18+);
• •Payment method details (processed by our payment partners — we do not store full card numbers).

1.2 Identity Verification Data

Creators must complete identity and age verification through our third-party provider, Didit. This process may involve:

• •Government-issued photo ID (passport, driver's license, or national ID);
• •A live selfie or short video for biometric matching (liveness detection);
• •Facial geometry data for the sole purpose of identity verification.

Didit processes this data on our behalf. We receive only a pass/fail verification result and basic attributes (name, date of birth, country of issuance). We do not store your raw ID images or biometric templates on our servers.

1.3 Usage Data

We automatically collect certain information when you use the Platform:

• •IP address, device type, operating system, and browser;
• •Pages viewed, streams watched, time spent, and interactions (tips, follows, messages);
• •Approximate location derived from IP address;
• •Cookies, local storage, and similar tracking technologies (see Section 4).

We use the information we collect to:

• •Provide, operate, and maintain the Platform;
• •Verify your identity and age;
• •Process payments, issue payouts, and prevent fraud;
• •Personalize content and recommendations;
• •Communicate with you about your account, updates, and policy changes;
• •Moderate content, enforce our Terms, and maintain community safety;
• •Comply with legal obligations, including 18 U.S.C. § 2257 record-keeping;
• •Detect, investigate, and prevent fraudulent, abusive, or illegal activity.

We do not sell your personal information to third parties.

We use Didit, a third-party identity verification provider, to confirm that creators are who they claim to be and are 18 or older. When you complete verification:

• •Your ID document and biometric data are transmitted directly to Didit over an encrypted connection;
• •Didit processes the data to verify your identity and age, then returns a verification result to us;
• •Biometric data (facial geometry) is used solely for the one-time verification event and is not stored or used for ongoing surveillance;
• •Didit retains verification data only as long as necessary to complete the check, in accordance with their retention policy and applicable regulations (typically no longer than 24 hours for biometric data).

For more information about how Didit handles your data, please review their Privacy Policy. Didit acts as an independent data controller for certain aspects of verification processing.

We use cookies and similar technologies to:

• •Maintain your login session;
• •Remember preferences (theme, language);
• •Analyze Platform traffic and usage patterns (e.g., via analytics tools);
• •Detect and prevent abuse, fraud, and unauthorized access.

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. We do not use cookies for targeted advertising.

We share your information only in the following circumstances:

5.1 Service Providers

• •Didit — identity and age verification;
• •Payment processors (e.g., Stripe) — to handle purchases and payouts;
• •Cloud hosting and infrastructure providers — to operate the Platform;
• •Email and notification services — to deliver communications.

All service providers are bound by data protection agreements and may only use your data to provide services on our behalf.

5.2 Legal Requirements

We may disclose your information when required by law, court order, or government request, including:

• •To comply with 18 U.S.C. § 2257 and 28 C.F.R. § 75 record-keeping requirements;
• •To respond to valid subpoenas, warrants, or law enforcement requests;
• •To investigate, prevent, or take action regarding suspected illegal activity;
• •To protect the rights, property, or safety of TheCamsClub, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or asset sale, user data may be transferred as a business asset, subject to the protections of this Policy.

We retain your personal data only as long as necessary for the purposes described in this Policy:

• •Account data: retained while your account is active and for up to 90 days after deletion;
• •Verification data from Didit: verification result retained for the life of the account + 7 years (for 2257 compliance); raw biometric data is not retained by us;
• •Transaction records (purchases, payouts): retained for 7 years for tax and legal compliance;
• •Usage logs: retained for up to 12 months;
• •Content removal records: retained for 3 years.

You may request earlier deletion of your data, subject to our legal record-keeping obligations.

Depending on your jurisdiction, you may have the right to:

• •Access — request a copy of the personal data we hold about you;
• •Correct — request correction of inaccurate or incomplete data;
• •Delete — request deletion of your data and account (subject to legal retention requirements);
• •Opt-out — unsubscribe from marketing emails or disable non-essential cookies;
• •Data portability — receive your data in a structured, machine-readable format;
• •Object — object to certain processing of your data.

To exercise any of these rights, email privacy@thecamsclub.com. We will respond within 30 days.

If you are a resident of California (CCPA/CPRA) or the EU/UK (GDPR), additional rights may apply. You may also lodge a complaint with your local data protection authority.

We implement industry-standard technical and organizational measures to protect your data, including:

• •TLS/SSL encryption for all data in transit;
• •Encrypted storage for sensitive data at rest;
• •Access controls and regular security audits;
• •Salted hashing for passwords;
• •Segregation of verification and payment data from general platform data.

No system is perfectly secure. In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

The Platform is strictly for adults aged 18 and older. We do not knowingly collect information from anyone under 18. If we become aware that a minor has provided personal data or appears in any content on the Platform, we will immediately remove the data/content, terminate the account, and report to the appropriate authorities, including NCMEC.

To submit a copyright takedown notice, contact our DMCA Agent:

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-Platform notification at least 14 days before taking effect. We encourage you to review this page periodically.

Questions about this Privacy Policy or your data? Contact us at privacy@thecamsclub.com.