Privacy Policy

What we collect

• Account data: username, email address, stated date of birth, password hash.
• Technical data: IP address, browser and device information, timestamps of sign-in and activity.
• Transaction data: token purchases, spend history, and the ledger of every token movement on your account.
• Performer verification data: legal name, date of birth, government ID images and a verification selfie. Collected only from performers.

What we do not collect

We do not receive or store your full card number, expiry or security code. Card details are handled entirely by our payment processor.

Performer identity documents

Identity documents are stored on encrypted storage outside the public web root, are never served publicly, and are accessible only to compliance staff for the purpose of age and identity verification. Access is logged. Documents are retained for the period required by 18 U.S.C. § 2257 and then destroyed.

Sharing

We share data only with: our payment processor (to take payment), our hosting and media infrastructure providers, and law enforcement where legally compelled or where we believe in good faith that disclosure is necessary to prevent serious harm — in particular any suspected child sexual abuse material, which we report to NCMEC.

Your rights

You may request a copy of your data, correction of inaccurate data, or deletion of your account. Deletion does not remove records we are legally required to retain — notably 2257 performer records and transaction records kept for tax and anti-fraud purposes. Write to privacy@scarletbeast.com.

Cookies

We use a session cookie to keep you signed in, a cookie recording your age confirmation, and a CSRF token cookie. We do not use advertising or cross-site tracking cookies.

Retention

Account and transaction data is retained while your account is open and for seven years after closure for tax and dispute purposes. Chat messages are retained for 90 days. Verification records are retained as required by law.