Effective 15 September 2026 · All policies
Draft. Attorney review required before launch. Items in yellow are placeholders.
The data controller is [LEGAL ENTITY NAME], [MAILING ADDRESS]. Privacy questions: [PRIVACY EMAIL].
| Data | Why | Kept for |
|---|---|---|
| Email, username, password (stored hashed), the reason you joined (company, games, or shows) | Your account and login | Life of the account + 90 days |
| Age confirmation and, where required, age-verification result | Legal requirement to keep minors out | Life of the account |
| Token purchases, ledger, tips, show sessions, escrow, payouts | Operate the service, pay performers, detect fraud, tax records | 7 years (financial records) |
| Chat messages, requests, notes, reports | Run the rooms, moderate, handle complaints | 90 days, longer if part of an open report |
| IP address, browser type, timestamps, server logs | Security, fraud prevention, debugging | 30 days |
| Performer identity documents and selfie (held by our verification provider), tax forms, payout details | Required by card networks and 18 U.S.C. § 2257; tax reporting | As long as the law requires, at least 7 years after the last show |
| Optional live thumbnails (performer-consented snapshots of their own stream) | Show the lobby what's on | Deleted when the show ends |
We do not record shows. Video passes through our media server in real time and is not stored.
We use one session cookie to keep you logged in, and browser local storage to remember that you passed the age gate and your volume and layout preferences. We do not use advertising or tracking cookies and we do not load third-party analytics.
We never sell personal data and never share it with advertisers or data brokers.
Your username, spend-tier badge, and chat messages are visible in rooms you take part in. Top-supporter boards show usernames only; Stealth mode hides you from them. Performers can see the usernames of their fan club members and the notes those members chose to share. Nobody but you and us can see your balance, purchases, or email.
Wherever you live, you can ask us to show you, correct, or delete the personal data we hold, or to export it. California residents have these rights under the CCPA/CPRA, and EU/UK residents under the GDPR, including the right to complain to your supervisory authority. Email [PRIVACY EMAIL]. We answer within 30 days. We can't delete records the law requires us to keep, such as financial and 2257 records, but we will restrict them.
We do not sell or share personal data as those terms are defined in California law, so there is nothing to opt out of.
Passwords are hashed with bcrypt. All traffic is encrypted in transit. Payment details never touch our servers. Access to production systems is key-based and limited to the operators. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.
StripsLive is for adults only. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact us immediately and we will remove it.
Our servers are in the United States. By using StripsLive from elsewhere you agree to your data being processed there.
We will post any changes here and announce material ones on the site at least 7 days before they take effect.