Privacy Policy

1. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Tobias Hayda
Ringstraße 5
64331 Weiterstadt
Germany
Email: [email protected]

2. Principle

We take the protection of your personal data very seriously. Since our platform does not maintain user accounts for buyers and does not process payments, we collect only the absolute minimum of data from visitors necessary for technical operation. Separate provisions in section 5 apply to creators who register.

3. Log Files and Server Data

When you visit our website, the server automatically stores information in server log files transmitted by your browser (e.g. IP address, browser type, time of the server request). The legal basis is our legitimate interest in the secure and functional operation of the website (Art. 6(1)(f) GDPR).

4. Hosting and Technical Service Providers

We use the following processors and third-party providers:

• Supabase Inc. – database and storage infrastructure (profile data, images, technical metadata).
• Resend – sending of transactional emails (e.g. confirmations, support replies).
• Google LLC (reCAPTCHA) – protects our login forms from automated abuse. Technical data is transmitted to Google in the process. More information: Google Privacy Policy. Legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
• Cloudflare, Inc. – content delivery network and protection against attacks. We also use Cloudflare Email Routing to technically forward emails sent to [email protected] to a private Google (Gmail) mailbox; Cloudflare and Google thereby gain knowledge of the content of this correspondence.
• CrakRevenue / crxcra.com – provides an embedded live-cam preview widget shown on select listings that are clearly labeled "Sponsored". Loading this widget transmits technical data (e.g. your IP address and browser information) to CrakRevenue already when the page is displayed, independent of whether you click on it, and the widget may set its own cookies for click attribution. Legal basis is our legitimate interest in operating clearly disclosed sponsored placements (Art. 6(1)(f) GDPR).

5. Registering as a Creator

Anyone who registers as a creator actively provides us with data such as name, email address, a password (stored hashed), a self-description, and optionally profile pictures and further voluntary profile attributes (e.g. gender, country). Certain voluntary details (e.g. sexual orientation) may constitute special categories of personal data under Art. 9 GDPR; in that case, processing is based exclusively on your explicit consent (Art. 9(2)(a) GDPR), given by voluntarily entering the information, and can be withdrawn or removed at any time via the creator dashboard. The legal basis for the remaining processing is performance of a contract (Art. 6(1)(b) GDPR). To prevent abuse (in particular the unauthorized circumvention of suspensions or usage limits through multiple accounts held by the same person), we also store the IP address at application and login, as well as the time of the last login. The legal basis for this is our legitimate interest in operating the platform free of abuse (Art. 6(1)(f) GDPR).

6. External Links

When you click on links to creator offers, you leave our platform. The operators there are solely responsible for data processing on the target pages.

7. Cookies

We ourselves only use technically necessary cookies (e.g. language setting, age confirmation) and do not set any profiling or advertising tracking cookies of our own. Legal basis is Art. 6(1)(f) GDPR and § 25(2) TTDSG. Some listings labeled "Sponsored" embed third-party content (see section 4) that may set its own cookies once loaded.

8. Retention Period

Personal data is only stored for as long as necessary for the respective purpose or as required by statutory retention obligations. Creators may request deletion of their profile at any time via support.

9. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).