Who is responsible for your data
The administrator of the omgfans.com service decides how and why your personal data is processed on OmgFans. For any question or request about your data, write to [email protected] from the email linked to your account, so we can match the request to you.
What data we collect
We collect only what we need to run the platform, keep people safe and pay creators.
Account data
Your email address, a hashed password, the 6 digit codes we send you, your sign-in history and your account settings.
Profile data
Your display name, username, photo, bio, the region you choose to show for the Nearby tab, your categories and links you add. Creators decide which of these are public.
Verification data
Creators and co-performers pass age and identity checks. The ID document, a selfie and the result of the check are processed by an identity verification provider on our behalf. We store the result, the date and the records we must keep by law, and nothing more than the check needs.
Payment data
Card and crypto payments are handled by payment processors. We receive the amount, date, status, a payment reference and the last digits or wallet reference needed to resolve problems. We never see or store your full card number. For creators we also keep payout details, tax form data and earnings history.
Content and messages
Posts, media, captions, comments, messages between fans and creators, purchases and subscriptions. Messages are stored so they can be delivered and so we can act on reports.
Technical logs
IP address, device and browser type, pages requested, error logs and security events. We use these to keep the service working and to stop fraud and abuse.
Why we use your data and on what legal basis
Where the GDPR or UK GDPR applies, each use rests on a legal basis.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, delivering content you bought | Performance of our contract with you |
| Processing payments and paying creators | Performance of the contract and legal obligations |
| Age and identity verification of creators and co-performers | Legal obligation and our legitimate interest in keeping minors and non-consenting people off the platform |
| Moderation, hash matching and handling reports | Legal obligation and legitimate interest in safety |
| Fraud and chargeback prevention, security logs | Legitimate interest in protecting users and the service |
| Tax and accounting records | Legal obligation |
| Service emails such as codes, receipts and notices | Performance of the contract |
| Optional product updates by email | Your consent, which you can withdraw at any time |
We do not sell your personal data and we do not use it for targeted advertising.
Who receives your data
We share data only with service providers who help us run OmgFans, under contracts that limit them to our instructions.
- A hosting provider that runs our servers and databases.
- Payment processors for card and crypto payments and for creator payouts.
- An identity verification provider for age and ID checks.
- An email delivery provider that sends codes, receipts and notices.
- A storage and content delivery provider that stores media and delivers it quickly.
We also disclose data when the law requires it, for example to report child sexual abuse material to the relevant authorities (in the US, the NCMEC CyberTipline) or to answer a valid legal order. Public profile details and public posts are visible to other users as set by the creator.
How long we keep data
- Account and profile data: while your account is open, then up to 30 days after closure so accidental closures can be reversed.
- Verification records: as long as the law requires us to keep proof of age and consent for published content.
- Payment, payout and tax records: for the period required by tax and accounting law, usually several years.
- Content and messages: until you delete them or close your account, except copies tied to a report, a dispute or a legal hold.
- Technical and security logs: usually up to 12 months.
After these periods we delete data or make it anonymous.
Your rights
Depending on where you live, you can ask to:
- see the personal data we hold about you and get a copy;
- correct data that is wrong;
- delete your data, where we do not have to keep it;
- restrict or object to some uses, including those based on legitimate interest;
- receive your data in a portable format;
- withdraw consent you gave earlier, without affecting earlier processing.
Send requests to [email protected]. We reply within one month and may ask you to confirm your identity first. In the EU and UK you can also complain to your local data protection authority.
Rights for US state residents
If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia or Texas, you have the right to know what we collect, to access, correct and delete your data, and to opt out of the sale of personal data or targeted advertising. We do not sell personal data or share it for targeted advertising, so there is nothing to opt out of, but you can still make any request through [email protected]. We do not treat you differently for using these rights. If we refuse a request, you can appeal by replying to our answer.
People under 18
OmgFans is for adults only. We do not knowingly collect data from anyone under 18. If we find an account that belongs to a minor, we close it and delete its data, except what the law requires us to keep or report. If you believe a minor is using OmgFans, tell us through the report button or at [email protected]. More on how we protect people is on our safety page.
International transfers
Some of our providers process data outside the country where you live. When data leaves the EU, the UK or another region with transfer rules, we use safeguards such as standard contractual clauses or an adequacy decision, and we require providers to protect the data to the same standard.
How we protect data
We use encrypted connections, hashed passwords, email codes at signup, access limited to staff who need it, and logs that record access to sensitive data. Verification documents stay with the identity verification provider. No system is perfect, so please use a strong password and tell us at once if you think your account was accessed by someone else.
Changes to this policy
When we change this policy in a way that matters, we email account holders and show a notice when you sign in before the change takes effect. The date at the top always shows the latest version. Our terms of service explain the rest of the agreement.
Contact about privacy
Write to [email protected] for any privacy question or request.