Privacy Policy
Last updated: 10 October 2026
This notice explains how we use your personal data. The controller is GERSOG DIGITAL MEDIA LTD, registered in England and Wales (company number 17247548), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. ICO registration reference: ZC237313. Contact: privacy@kisscat.xyz. We have not appointed a Data Protection Officer; please use this contact for data protection matters.
What we collect and why
We collect information you provide, information about your use of the service, and limited information returned by sign-in, payment and age-check providers.
- Account details: email, username, password hash and sign-in information. An email is optional for an account created with X.
- When you sign in with X: your X user ID, current handle, name, avatar, sign-in time and authorisation. We do not retain the temporary X access token. An approved performer's account can be linked to their model record using their X user ID; changing a handle does not transfer that access.
- Purchases and account activity: subscriptions, invoices, Studio Credits, transaction history, purchased-video access, saved videos, carts, purchase instructions, checkout consent and download records. Payment providers handle payment details; we do not store full card details.
- Technical and usage information: IP address, browser type, device information, page and video activity, and cookies. Optional behavioural analytics requires your consent. Necessary access, security and download records support the service and protect against abuse.
- Messages and files you send to support or through private sharing, and adult casting applications including contact details, experience, availability, boundaries and photographs.
Account and purchase details are needed to perform our contract with you. Required age and location checks protect access to adult content; without them we cannot give you access where a check is required. Analytics and casting applications are optional.
Content reports
The public Report content form collects the content URL, reason, reply email, description and optional original appeal reference. It does not record your raw IP address, account identity or browser details in the complaint. A purpose-separated HMAC IP identifier limits abuse in Redis for up to one hour. Do not send identity documents, intimate images or unnecessary sensitive information. Complaints go to support and the director; relevant evidence may be shared with external counsel for a dispute. No complaint documents are sent to AI by this intake.
Complaint handling protects depicted persons and rights holders and meets applicable legal obligations (Article 6(1)(c)) or our legitimate interests in investigating and resolving disputes (Article 6(1)(f)); sensitive evidence is limited to what is necessary for legal claims (Article 9(2)(f)) where applicable. Closed complaints are retained for three calendar years after closure. Active cases have no submission-based expiry. A documented legal hold suspends deletion until reviewed.
Purpose and lawful basis
| Purpose | Lawful basis |
|---|---|
| Accounts, sign-in, purchases, subscriptions, downloads and customer support, including records of checkout, payment and subscription status | Performance of our contract with you (Article 6(1)(b)). |
| Required UK age and territorial checks | Legal obligation (Article 6(1)(c)), including the Online Safety Act 2023, section 81. |
| Age checks elsewhere, fraud prevention, account and performer-link security, abuse prevention and server logs | Legitimate interests (Article 6(1)(f)): keeping minors out, applying local access restrictions, protecting accounts and performers, and preventing fraud and misuse. |
| Tax and financial records | Legal obligation (Article 6(1)(c)). |
| Optional website, game and email analytics; Google Analytics through Google Tag Manager; marketing emails | Consent (Article 6(1)(a)); consent for optional cookies under PECR. |
| Adult casting applications and sensitive photographs or information about sexual boundaries | Consent (Article 6(1)(a)) and explicit consent for sensitive data (Article 9(2)(a)). |
Location and age checks
IP-based lookups are cached for up to 6 hours using a protected, pseudonymous identifier.
Access decisions are made automatically from your approximate location and age-check result. Access is refused where adult content is unavailable or we cannot determine the required location. A successful required age check is needed before adult content can be shown. If you think a decision is wrong, contact support@kisscat.xyz for a human review, to explain your circumstances and to challenge the decision.
Yoti Ltd (UK) performs the hosted age check. We use whether you meet the required age threshold, the method and time, and technical identifiers needed to confirm the result. We do not receive or store your ID document or face image. A numeric age returned during the check is reduced to whether the threshold is met; we do not store that numeric age in our database or new age-check cookies. How we check age in the UK explains the methods.
A temporary pending record lasts 15 minutes. A signed studio_age_assurance cookie remembers a successful check for one hour; studio_yoti_browser links it to your browser for up to 24 hours. Where self-declaration is permitted, studio_age_decision remembers it for 30 days; self-declaration is not verified age. Age-verification analytics stores hashed technical identifiers, method, result and time for reporting and billing checks. These records are pseudonymous, not anonymous. Yoti's own handling of information is explained in its privacy notice; we do not promise immediate deletion by Yoti.
Cookies and analytics choices
Necessary cookies support sign-in, account security and age checks. Optional analytics cookies, including Google's, are set only after you opt in, and never if your browser sends Global Privacy Control (GPC). Google Analytics is delivered through Google Tag Manager. Your website choice is stored in kisscat_consent for 12 months. After that, optional analytics stays off until you choose again in Cookie settings. The game cookie kisscut_game_analytics controls only game analytics and does not give consent to website Google Analytics.
Use Cookie settings to Allow, Reject or Withdraw analytics consent. Withdrawal stops future optional analytics; it does not make earlier lawful processing unlawful. Blocking necessary cookies may prevent sign-in or age-restricted access.
Who receives information
We use Google (Firebase/Firestore and Cloud Storage) to store data, Heroku (Salesforce) for hosting, Redis for temporary caching, and Yoti Ltd for age checks. Google also receives analytics information when you consent. Payment providers, including NOWPayments and Telegram, receive information needed for the payment method you select. X receives sign-in requests when you choose X. Our email delivery providers handle messages and notifications. Content-delivery, hosting and security providers may temporarily handle requested URLs and IP addresses; private album tokens are not written to our dedicated photo-download audit record. Our authorised team can access information for support and operations. We may disclose information to authorities where required by law, or to professional advisers for legal and accounting work.
International transfers
Some providers process information in the United States or other countries outside the UK and the European Economic Area. Our team also accesses data from Serbia. The UK has not recognised Serbia as providing an adequate level of protection. Team access from Serbia is limited to support and operations; contact privacy@kisscat.xyz for details of the safeguards we use. Transfers without an applicable adequacy decision require appropriate safeguards, such as standard contractual clauses and the UK International Data Transfer Agreement (IDTA) or UK Addendum. Contact privacy@kisscat.xyz for information about the safeguards applicable to a particular transfer and how to obtain a copy.
How long we keep data
These are our retention periods. Records are deleted or made anonymous at the end of the relevant period; cloud deletion can take additional time to finish. We do not keep separate database backups. Residual copies held by our cloud providers follow their standard deletion cycles. The billing and operational file copies listed below are separate from database backups.
| Data | How long |
|---|---|
| Account profile, sign-in details and account links | While your account exists; removed on account deletion. |
| Pending age check | 15 minutes. |
| Successful age-check cookie | one hour. |
| Pseudonymous age-verification analytics | 12 months (365 days). |
| Behavioural analytics (page and video views), only with your consent | 12 months (365 days); afterwards only aggregates without personal data. |
| Analytics guest-to-account links, only with your consent | 12 months (365 days) from the last link update. |
| Purchase and subscription status records (checkout steps, payment and cancellation status) | 12 months (365 days). |
| IP-bearing download and content-link events | 90 days. |
| Content complaint cases and appeal records | Three calendar years after closure; documented legal hold suspends deletion. |
| Content-report HMAC IP rate-limit identifier | Up to 1 hour in Redis. |
| Email analytics and notifications | 90 days. |
| Game events | 90 days. |
| Sign-in codes and tokens | Until the code or token expires, plus 1 day. |
| Pseudonymous IP-location lookup cache | 6 hours. |
| Server logs at Heroku | Up to 7 days, without separate copies. |
| Financial records, pseudonymised after account deletion | 6 years after the end of the financial year. |
| Billing backup files in Cloud Storage | 90 days; the financial originals follow the financial-record period. |
| Operational state snapshots / quarantined files | 14 days / 30 days. |
| Proof of email subscription consent | Until you delete your account. |
| Unsuccessful casting applications | 6 months. |
| Google Analytics data held by Google | 14 months. |
| Cookie recording your analytics choice | 12 months. |
Support messages and private shared files are kept for the time needed to resolve the request or provide the agreed access, and for any applicable legal or dispute requirement. Where a legal requirement or active dispute requires longer retention, we limit use to that purpose.
Account deletion
Deleting your account removes your account, location history and account-linked activity. Financial records are pseudonymised rather than deleted and retained for 6 years after the end of the financial year. Separate pseudonymous age-verification analytics remains until its 12-month retention period ends; it is not linked back to your account by the account-deletion process. Backup files follow the periods above. A positive Studio Credits balance blocks self-service account deletion: spend it or contact support@kisscat.xyz to resolve your balance and any legal rights first.
Casting applications
Sensitive casting information and photographs are processed only with your explicit consent to assess your application and contact you. You can withdraw that consent or request deletion at privacy@kisscat.xyz. Unsuccessful applications are kept for 6 months. If selected, we explain any further retention needed for the performer agreement before proceeding.
Your rights (all users)
You can ask for access, correction, erasure, restriction, and a portable copy of your data where the relevant right applies. You have the right to object to processing based on legitimate interests, and to direct marketing. You can withdraw consent at any time through Cookie settings, an email unsubscribe link, or privacy@kisscat.xyz. Withdrawal does not affect the lawfulness of processing before withdrawal.
Email privacy@kisscat.xyz. We reply within one month. If a request is complex or you make several requests, we may extend this by up to two further months; we tell you within the first month and explain why. We may ask for proportionate information to confirm your identity. Some records must be kept to meet legal obligations.
Complaints
If you are unhappy with how we handle your data, complain to privacy@kisscat.xyz. We acknowledge complaints within 30 days, investigate and keep you informed. You can also complain to the UK Information Commissioner's Office at ico.org.uk. In the EU you may complain to your local data protection authority.
California privacy choices
We do not sell your personal information. Where Google analytics cookies could be considered sharing under California law, they are only set with your opt-in and GPC is honoured. You can reject or withdraw analytics in Cookie settings.