Privacy Policy

FuckTubly (hereinafter "we") is committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and French data protection law (Loi Informatique et Libertes). This policy explains how we collect, use, store, and protect your personal information.

The data controller for your personal data is FuckTubly. For any questions regarding data protection, you can contact us via our contact page, including 'Data Protection' in the subject. In accordance with the GDPR, we have designated a data protection contact, reachable at the same address.

We collect the following categories of data: - Identification data: email address, username (pseudonym), password (encrypted) - Payment data: order reference, proof of payment (screenshots). Transactions are processed by a secure third-party provider; we do not store any banking data. - Usage data: pages visited, videos watched, preferences, search history - Technical data: IP address, browser type, operating system, session data - Creator data: ID document (for verification), earnings payout information

We process your data on the following legal bases (GDPR Art. 6): - Performance of contract: managing your account, subscription and services (Art. 6.1.b) - Consent: sending marketing communications, non-essential cookies (Art. 6.1.a) - Legitimate interest: site security, fraud prevention, service improvement (Art. 6.1.f) - Legal obligation: data retention required by law, cooperation with authorities (Art. 6.1.c)

Your data is used to: - Manage your account and subscription - Process payments and activate access - Improve our services and user experience - Send you important communications (security, service updates) - Ensure site security and prevent fraud - Moderate content and process reports - Comply with our legal obligations (DSA, DMCA, age verification)

We never sell your personal data. We share data only with: - Supabase (hosting and storage) - EU/EEA - Resend (transactional email sending) - United States, Standard Contractual Clauses - Secure third-party payment processor (payment processing) - Sentry (error monitoring) - anonymized data - Judicial and administrative authorities, if required by law Each sub-processor is bound by a Data Processing Agreement (DPA) ensuring the protection of your information.

Some of your data may be transferred outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place: - Standard Contractual Clauses (SCCs) approved by the European Commission - European Commission adequacy decisions, where applicable You can obtain a copy of the appropriate safeguards by contacting us.

We implement appropriate technical and organizational security measures: - SSL/TLS encryption for all communications - Password hashing (bcrypt) - Strict data access controls - Intrusion detection monitoring - Regular encrypted backups - Staff training on data protection

We use cookies and trackers in compliance with the ePrivacy Directive and CNIL recommendations. See our Cookie Policy for a detailed list of cookies used, their purposes, and how to manage your preferences. Your consent is required before any non-essential cookies are set. You can change your preferences at any time.

Under the GDPR, you have the following rights: - Right of access: obtain a copy of your personal data (Art. 15) - Right to rectification: correct inaccurate data (Art. 16) - Right to erasure: request deletion of your data (Art. 17) - Right to restriction: restrict processing of your data (Art. 18) - Right to data portability: receive your data in a structured format (Art. 20) - Right to object: object to processing based on legitimate interest (Art. 21) - Right to withdraw consent: at any time, without affecting the lawfulness of prior processing (Art. 7.3) To exercise your rights, contact us via our contact page. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected.

We retain your data for the following periods: - Account data: duration of registration + 3 years after account deletion - Payment/order data: 10 years (accounting and tax obligations) - Connection logs: 1 year (legal obligation, LCEN) - Identity verification data (creators): 5 years after end of relationship - Cookies: maximum 13 months (CNIL recommendation) - Report data: 5 years After these periods, data is deleted or irreversibly anonymized.

FuckTubly is strictly reserved for persons aged 18 and over. We do not knowingly collect any personal data from minors. If we discover that a minor has created an account, it will be immediately deleted along with all associated data.

This policy may be updated to reflect changes in our practices or legal requirements. For substantial changes, we will notify you by email at least 30 days in advance. The date of last update is shown at the top of this page.