Privacy

PornSleuth is built to know as little about you as possible. Here's everything we handle, and for how long.

Where you are

Whether we can show you the catalogue depends on the law where you are. To decide, we use the country (and, in the US, the state) that Cloudflare works out from your connection. We don't store it with anything about you.

Age checks (not offered yet)

We don't offer age checks yet. Where the law requires one, you see a notice instead of the catalogue. When we add them, this is how they will work.

An independent provider, Yoti, will run the age check under its own privacy notice. We will never see or keep your ID, face scan or date of birth, and we will send Yoti nothing about what you browse here, only a random reference.

If you pass, we will set a random code in a cookie on your browser. We will store only a scrambled copy of that code, an anonymous "over 18" result, the kind of check used (for example "face estimate") and when it expires. It will last 30 days and be deleted a day after it expires. If you choose to save a Yoti Key, it's a passkey held by you and Yoti; we will only ever see the "over 18" result when you use it.

Cookies

Visitors get no cookies from us today. When age checks are offered, they will use two cookies, both needed for the check and neither used for tracking: __Host-ps_age holds your age-check code for 30 days, and__Host-ps_age_txn links you to a check in progress for 15 minutes. Partner accounts use the cookies described below. We use no advertising trackers and no Google Analytics.

Page statistics

We count page loads with Cloudflare Web Analytics, a small script from Cloudflare, which already runs our site. It sets no cookies and doesn't follow you across pages or sites. It records the page address, the site you came from, your country, your browser type and how fast the page loaded, and we only see totals. Cloudflare'sWeb Analytics page explains how it works.

Partner accounts

Studios and affiliate programmes we invite get an account to see the private build. For those accounts we keep the email address, organisation, when the invite was sent and when it expires, sign-in times, and a daily count of activity. We don't record which pages a partner views. Sign-in codes are sent through our email provider, Resend. If a partner chooses Google sign-in, Google tells us only their email address.

We also keep the names and work email addresses of the studio and programme staff who give us permissions, with the dates and wording of what they agreed. That's our record of what we're allowed to show, kept while the permission applies and for as long as we need to show we kept to it.

The account cookie __Host-ps_member lasts up to 7 days (12 hours for operators). Short-lived cookies,__Host-ps_mfa and __Host-ps_google, hold a sign-in in progress for up to 10 minutes. We store only a scrambled copy of the account code, and partner sessions are kept separate from age checks.

Searches and logs

We don't log or store what you search for. Our host, Cloudflare, runs the site. We've switched off request logging and keep only error messages. Rate limits (on age checks, sign-in, search, pictures, likes and links to studios) use a scrambled form of your connection address, which isn't stored by us.

Links to studios

When you follow a link to a studio's site, we record that a click happened: which link, where on our site it was (for example a scene page), your country and the time. Nothing that identifies you, and no cookie. The studio's own site then runs under its own privacy notice; the link carries our affiliate code so it can credit us for a membership.

Likes and saved items

When you like a scene, gallery or picture, or save a pornstar, the list of what you've liked stays in your own browser. We only add one to an anonymous count for that item, which builds the Popular page. To stop the same person counting twice in a day we keep a one-way code made from your connection and the item; it can't be turned back into either, and we delete it after two days. Clearing your browser data clears your list.

"New since your last visit" works the same way: your browser remembers the day you last came and sends your saved pornstars with that one request. We don't keep them.

Where it's kept

Our database is hosted by Supabase in the United States (North Virginia). Images we host are held in private storage with Cloudflare.

Some pictures and trailers load straight from the studio's own servers (Naughty America's, for example). Your browser then asks that studio's server for the file, so the studio sees your connection address and which file was requested, as with any website. We don't tell it which of our pages you were on.

Your rights

You can ask what we hold about you, ask us to correct it, or complain. We hold nothing that identifies you unless you email us. Write to partners@pornsleuth.com. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner.

Operated by AI Smarter Pty Ltd (ABN 95 688 608 835), Sydney, Australia.