This Privacy Policy explains what personal data FanBase collects, why, who receives it and what rights you have. The controller of your data is the administrator of the fanbase.org service ("we", "us"), contact support@fanbase.org.
Data we collect
Account data
- Email address and password (stored as a secure hash, never in plain text).
- Handle, display name, avatar, cover image, bio and links you add.
- Settings, including whether you confirmed your age and turned on the Adult 18+ section.
Payment records
- Records of what you paid or earned: amounts, dates, tiers, pay per view purchases, tips, paid messages and wallet top-ups.
- Card payments are handled by our payment partner. We never see or store your full card number. We receive only limited details such as the card brand, the last four digits and whether the payment succeeded.
- For crypto payments we keep the transaction reference and amount.
- For creators, payout details (bank account or crypto wallet address) and payout history.
Identity documents (creators)
- A government ID and a selfie, plus the data on them (name, date of birth, document number), collected to verify that each creator is who they say they are and is 18 or older.
- For adult content, records about co-performers that creators provide to show age and consent.
- Identity documents are stored encrypted and used only for verification and legal record keeping. They are never shown on your page or to fans.
Content and messages
- Posts, media and messages you send or receive on FanBase, so we can deliver them and review them for safety.
- Reports you make or that are made about you.
Technical data
- IP address, device and browser type, and log records needed to run the service securely and prevent fraud.
Cookies
FanBase uses only essential cookies: a session cookie that keeps you signed in, a security cookie that protects forms, and cookies that remember basic preferences. We do not use advertising cookies or ad pixels. Our analytics work without cookies and do not track you across other sites. Because we only use essential cookies, we do not show a cookie banner.
Why we use your data
| Purpose | Data | Legal basis |
|---|---|---|
| Run your account and deliver the service | Account data, content, messages | Contract |
| Take payments and send payouts | Payment records, payout details | Contract |
| Verify creators' identity and age | Identity documents | Legal obligation and legitimate interest in keeping minors and impersonators off the service |
| Keep records for adult content | Co-performer records | Legal obligation |
| Review posts and keep the service safe | Content, reports, technical data | Legitimate interest and legal obligation |
| Prevent fraud and chargebacks | Payment records, technical data | Legitimate interest |
| Send account and security emails | Email address | Contract |
| Keep tax and accounting records | Payment records | Legal obligation |
We do not sell your personal data and we do not use it for advertising.
Who receives your data
We share data only with service providers who help us run FanBase, and only what each one needs. By category:
- Hosting provider in the EU, which stores the service and its data.
- Payment partners for card and crypto, which process fan payments and creator payouts.
- Email delivery provider, which sends account codes and service emails.
- Identity verification provider, which checks creator IDs and selfies.
We also disclose data when the law requires it, for example to respond to a valid legal request, and we report content involving minors to the authorities. Fans and creators see each other's public profile details, and creators see the handles of fans who support them.
International transfers
Some providers may process data outside your country. Where data leaves the EU, we rely on adequacy decisions or standard contractual clauses to protect it.
How long we keep data
- Account data: while your account is open, then deleted within 90 days after closure, except where we must keep it.
- Payment and payout records: as long as tax and accounting laws require, usually up to 10 years.
- Identity documents and co-performer records: as long as the law requires for age verification and record keeping, and no longer than needed for that purpose.
- Technical logs: up to 12 months.
- Content removed for safety reasons and related reports: as long as needed to handle the case and meet legal obligations.
Your rights
Depending on where you live, you have the right to:
- Access the data we hold about you.
- Correct data that is wrong.
- Delete your data (you can also close your account in settings).
- Export your data in a common format. Creators can also export their fan list and earnings as CSV any time.
- Object to or restrict some processing.
- Withdraw consent where processing is based on consent.
- Complain to your local data protection authority.
To use any of these rights, email support@fanbase.org. We answer within 30 days. We may ask you to confirm your identity first.
Security
We use encryption in transit and at rest for sensitive data, limit staff access to what each task requires, and review access regularly. No system is perfectly secure, so please use a strong, unique password.
Children
FanBase is not meant for children. Creators must be 18 or older, and only fans aged 18 or older can access the Adult 18+ section. If you believe a child has given us data, contact support@fanbase.org and we will delete it.
Changes
We may update this policy. For important changes we will tell you by email or in the service. The date at the top shows the latest version.
Contact
Privacy questions: support@fanbase.org.