Privacy Policy

We collect information you provide directly: email address, date of birth, username, profile content, photos, and messages. We also collect usage data — IP addresses, browser type, and activity timestamps — for security and moderation purposes only.

Your data is used exclusively to operate SDLust. We use your email for account verification and opt-in notifications. We never sell your data to third parties. We do not run advertising. The business model is the community — subscriptions and marketplace fees, nothing else.

When you verify your age for NSFW access, we store only the last 4 digits of your card and the verification timestamp. Your card data is processed by Stripe and never stored on our servers. Stripe's privacy policy governs their handling of your payment information.

Clique votes are stored as cryptographic hashes of your user ID combined with a site-level secret. Your individual votes are anonymous to all other members. Site administrators can verify specific votes only during an active abuse investigation — not on request, not for curiosity.

You can view, edit, or delete your profile data at any time from your account settings. Deleting your account soft-removes it — your profile disappears from public view immediately. If you require a hard deletion of all stored data, contact us at privacy@sdlust.com.

Passwords are hashed using bcrypt (cost 12). Sessions are stored server-side with cryptographic tokens. All data is transmitted over HTTPS. Uploads are stored outside the web root and served through an authenticated proxy — no direct file URLs, ever.