Draft — pending legal review. This text has not yet been reviewed by a lawyer and may change.

Privacy Policy

Last updated 21 October 2026

1. Who is responsible for your data

The controller of your personal data is PartFans (operator details to be added). Until they are, you can reach us about anything in this policy at [email protected].

2. What we collect

Account data

Your e-mail address, username and display name, a password (stored only as a one-way hash, never in readable form), and, if you turn it on, the secret for two-factor sign-in. Your profile picture, cover picture and bio, if you add them.

Date of birth

To confirm you are at least 18, and to keep anyone younger off PartFans.

Gender and interests

Your gender (woman, man or non-binary) and the genders you are interested in. Interests can reveal your sexual orientation, which is a special category of personal data, so they have their own section below.

What you post and send

Posts, pictures, videos, comments, albums, likes, reposts, bookmarks, follows, subscriptions, blocks and reports, and the direct messages you exchange with other members.

Technical data

Your IP address and browser details when you connect, used to keep you signed in, to limit how often requests can be made (rate limiting), and to detect and stop abuse and attacks. Sign-in sessions record when they were created and last used.

Push notifications

Push notifications are optional and turned on per device. If you allow them, we store the push subscription your browser gives us: an endpoint address at your browser vendor’s push service and the keys needed to send to it. Turning notifications off, or signing out, removes it.

Payments (when available)

Payments go directly from a member’s wallet to a creator’s wallet on a public blockchain. We may record the wallet addresses and transaction references needed to confirm that a subscription has been paid. Blockchain transactions are public by nature and cannot be deleted by anyone, including us.

3. Why we use it, and on what basis

• To provide PartFans to you — your account, your profile, showing your content to the audience you chose, delivering messages and notifications. Basis: performing our contract with you (the Terms of Service).
• To keep PartFans adult-only — checking your date of birth. Basis: our legal obligations and our legitimate interest in protecting minors.
• To personalise what you see — using your gender and interests to shape your “For you” feed, trending and suggested people. Basis: your explicit consent (see section 4).
• To keep PartFans safe — rate limiting, preventing abuse, handling reports, moderation and keeping a record of moderation decisions. Basis: our legitimate interest in a safe service, and legal obligations where they apply.
• To contact you — service e-mails such as verifying your address, resetting your password and important changes to these policies. Basis: performing our contract with you.
• To meet the law — answering lawful requests from authorities and reporting illegal content, especially content involving minors. Basis: legal obligation.
• To measure our advertising — the Meta Pixel on partfans.com and on the app’s sign-in and sign-up screen tells Meta that someone visited and whether they created an account (section 10). Basis: our legitimate interest in knowing whether our advertising works, which you can refuse at any time; where we ask first, your consent.

We do not sell your data. The Meta Pixel is our only advertising tool, and it never runs on the pages you use after signing in: what you look at, follow, buy or write on PartFans is not sent to Meta.

4. Your gender and interests (special-category data)

The genders you say you are interested in can reveal your sexual orientation. The law treats that as special-category data, and so do we:

• We only collect it with your explicit consent, which you give separately when you fill it in. You do not have to give it to use PartFans; without it, your feeds are simply not personalised by it.
• It is never shown to anyone else — not on your profile, not to other members, not to creators. It is used only on our server to rank and suggest content for you.
• You can withdraw consent at any time in your settings. Withdrawing clears your stored interests; it does not affect the lawfulness of what was done before you withdrew.
• We do not share it with anyone, and we do not use it for anything other than personalising PartFans for you.

Your gender is handled the same way: it is used to personalise feeds and suggestions and is not displayed to other members.

5. Sensitive content

Posts can be marked sensitive. Sensitive pictures are blurred until you choose to see them, and are served only through short-lived signed links, so a copied link stops working soon after. Your choice to view sensitive content is stored as a setting on your account.

6. How long we keep it

• Your account and content — for as long as your account exists. When you delete a post, a picture or your account, it is removed from the service.
• Backups — deleted data may remain in backups until they are overwritten in the normal cycle.
• Technical and security data — kept only as long as needed for security and rate limiting.
• Reports and moderation records — kept for as long as needed to keep PartFans safe, to deal with repeat abuse and to answer legal claims, even after the account concerned is deleted.
• Content we must preserve — where the law requires us to keep material for the authorities, for example evidence of child sexual abuse, we keep it securely and only for that purpose.

Exact retention periods are being set and will be added to this section.

7. Who else handles your data

We use a small number of providers, only for what they do for us:

• Cloudflare — sits in front of PartFans as a content delivery network and security proxy, so your requests, including your IP address, pass through it.
• Our hosting provider (Contabo) — our servers, database and uploaded files are on a server in Germany.
• Your browser vendor’s push service — if you turn on push notifications, notifications are delivered through the service your browser uses (for example Google, Mozilla or Apple). We send it as little as possible.
• Meta (Meta Platforms Ireland Ltd.) — the Meta Pixel on partfans.com and the app’s sign-in and sign-up screen sends Meta the address of the page, your IP address and browser details, a cookie identifier, and whether you created an account. Meta also uses this under its own privacy policy, for example to show and measure ads. Not on any page after you sign in.

E-mail is sent from our own mail server, not a third-party mailing service. We use no third-party analytics, and the Meta Pixel is our only advertising tool. We disclose data to authorities only when the law requires it or to protect someone from serious harm; see Report & Takedown.

8. International transfers

Your data is stored in Germany, in the European Union. Operating PartFans from North Cyprus, and routing traffic through Cloudflare’s global network, means data can also be accessed from or pass through other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses. What the Meta Pixel sends goes to Meta, which may process it in the United States.

9. Your rights

Under the Turkish Republic of Northern Cyprus Law No. 89/2007 on the Protection of Personal Data, and, if you are in the European Union, under the General Data Protection Regulation (GDPR), you have the right to:

• access the personal data we hold about you and get a copy;
• rectification — have inaccurate data corrected (much of it you can edit yourself);
• erasure — have your data deleted, including by deleting your account;
• object to processing based on our legitimate interests, or restrict it;
• portability — receive the data you gave us in a machine-readable form;
• withdraw consent at any time, where we rely on it;
• complain to a data protection authority — in North Cyprus, the Personal Data Protection Board, or, in the EU, the authority where you live or work.

To use any of these rights, write to [email protected] from the e-mail address on your account. We may need to confirm it is you before we act, and we will reply within the time the law allows (under the GDPR, one month).

10. Cookies and browser storage

The session cookie keeps you signed in. It is strictly necessary for the service to work, so it does not need your consent.

On partfans.com and on the app’s sign-in and sign-up screen we use the Meta Pixel, an advertising tool from Meta, to measure whether our ads bring visitors and sign-ups. It sets Meta’s cookie (_fbp) and sends Meta the visit, and, after a sign-up, the fact that an account was created — not your name or e-mail. It is never loaded on the pages you use after signing in. Your choice about it is kept in a cookie of ours (pf_consent, 180 days). You can refuse it at any time with “Cookie preferences” at the bottom of this site or in the app under Settings → Cookies and storage; a refusal is always honoured. Where we ask first, the pixel loads only after you accept.

The app also keeps a few display preferences, such as light or dark theme, in your browser’s own storage. They stay on your device and are not sent to us.

11. Children

PartFans is not for anyone under 18. We do not knowingly collect data from anyone under 18. If we learn an account belongs to someone under 18, we close it and delete its data, except anything the law requires us to keep. If you believe a minor is using PartFans, tell us at [email protected].

12. Security

Connections are encrypted, passwords are hashed, sensitive media is served only through expiring links, and two-factor sign-in is available. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

13. Changes and contact

We will update this policy when what we do changes; the date at the top shows the latest version, and we will tell you in advance of significant changes. Questions or requests: [email protected].