The short version
We collect what the site needs to work: an email address to hold your account, a record of what you bought and unlocked, and first-party analytics about how the site is used.
We do not sell your data, we do not share it with advertisers, and there are no third-party advertising or tracking cookies on this site. Analytics are our own, stored in our own database.
What we hold
- Account: your email address, and your name if you give one. Sign-in itself is handled by Clerk.
- Age check: whether you confirmed you are 18 or over, when, how it was checked, and your year of birth. We deliberately do not keep the full date of birth — we do not need it again.
- Identity documents, only if you send one for review rather than using our verification partner: encrypted the moment it arrives, readable by one administrator, and destroyed as soon as the check is decided — or after 30 days if it never is. We keep the verdict, not the document.
- Purchases and credits: your credit balance, the packs you bought, and what you unlocked. Card details are handled by Stripe through cred and never reach us.
- Mailing list: your email address and first name if you subscribed, plus where you signed up.
- Usage: pages viewed, referrer, country, device and browser type, and the members-area actions that matter (a photo served, a stream started, a purchase). We do not store IP addresses.
- Correspondence: anything you email us.
Why we hold it
- To give you what you paid for, and to keep a record of it — our contract with you.
- To keep the site secure, to stop paid content leaking, and to understand what people actually read and watch — our legitimate interests.
- To meet the law on age-restricted material — a legal obligation.
- To send you marketing email, if you asked for it — your consent, withdrawable at any time.
Who else touches it
Only the services the site is built from, each for one purpose:
- Clerk
- Accounts, sign-in and session cookies.
- Persona
- The verified age check, when you choose it. They see your ID; we see a yes or no.
- cred.diy
- Credit balances, purchases and the hosted checkout.
- Stripe
- Card payments, taken through cred. Card details go to Stripe, never to us.
- Mux
- Delivery of the members-only live streams.
- Resend
- Sending email — receipts, confirmations and the mailing list.
- Neon
- The database holding the mailing list, credit records and analytics (AWS, United States).
- Vercel
- Hosting and delivery of the site itself.
They act on our instructions, and only on our instructions. Data is stored in the United States, so it leaves the UK: those transfers rely on the UK International Data Transfer Addendum, or the EU standard contractual clauses with the UK addendum, in our agreements with each provider.
How long we keep it
- Account and purchase records: while you have an account, and then for six years after your last purchase — UK tax and company law require us to keep records of sales.
- Mailing list: until you unsubscribe. One-click, from the footer of any marketing email.
- Analytics: up to 24 months, then deleted automatically.
Your rights
Desantos World Ltd is the data controller. Write to hello@desantosworld.com and we will act on it: you can ask for a copy of your data, ask us to correct or delete it, ask for it in a portable form, object to how we use it, or withdraw consent for marketing at any time. We answer within one month.
If you think we have handled your data badly, you can complain to the Information Commissioner (ico.org.uk, 0303 123 1113), or to your own supervisory authority if you are in the EU. We would rather you told us first.
If you are in California, we do not sell or share personal information as those words are defined there, and we will not treat you differently for exercising your rights.
Children
This site is not for anyone under 18. We do not knowingly hold data about children, and we delete it if we find it.
Security
Paid photography is never served as a public file: every image is delivered through a request that re-checks your unlock, and the streams need a short-lived token issued to you. The site runs over HTTPS throughout.
No system is perfect. If you think you have found a hole in ours, tell us at hello@desantosworld.com and we will fix it.