Privacy Policy
Who handles your data
The administrator of the her.direct service is responsible for the personal data described in this policy. Her is a platform for adult creators, fans, and agencies. Contact the administrator of the her.direct service at [email protected] for privacy questions or requests.
Data collected
The administrator of the her.direct service processes information you provide when creating or using an account and technical information generated when you access her.direct.
- Email address and account role, such as creator, fan, or agency.
- Confirmation codes and account confirmation status.
- IP address, browser and device information, operating system, request timestamps, and technical records of access and errors.
- UTM parameters included in a link you use to reach the service, which may identify the source of an account access request.
- Age verification status and information needed to complete required age checks.
- Payment status, transaction references, and payout information when needed for paid features or creator payments.
- Messages and information you send when requesting support.
Purposes and legal grounds
The administrator of the her.direct service uses account details and confirmation codes to create and confirm accounts, provide requested features, and communicate about access. Processing necessary to provide these services is based on performing a contract with you or taking steps at your request before entering a contract.
Technical data supports account security, troubleshooting, abuse prevention, and the protection of users and the service. Where applicable, this processing relies on legitimate interests, balanced against your rights. UTM parameters may provide context about how an access request originated. They are not used for advertising analytics.
Age checks, payment records, and other required records may be processed to meet applicable legal obligations. Where processing requires consent under applicable law, the administrator of the her.direct service requests that consent separately. You may withdraw consent without affecting the lawfulness of earlier processing.
Who may receive data
The administrator of the her.direct service may share information necessary for the relevant task with the following categories of service providers, subject to appropriate confidentiality and data protection requirements.
Information may also be disclosed when required by applicable law or necessary to establish, exercise, or defend legal claims. Personal data is not sold or shared for targeted advertising.
- Hosting and infrastructure providers that operate and secure the service.
- Email delivery providers that deliver confirmation codes and service communications.
- Age verification providers that perform required eligibility checks.
- Payment providers that process transactions and payouts.
Retention and account deletion
Account data is retained while your account is active and needed to provide the service. Confirmation codes expire and are removed when no longer needed for confirmation or security. Technical records and UTM parameters are retained only as long as needed for their stated purposes.
After account deletion, personal data associated with the account is deleted or anonymized when no longer needed. Any remaining retention is limited to applicable legal obligations, unresolved transactions, abuse prevention, or legal claims. Access to retained data is restricted, and that data is deleted or anonymized when the relevant need ends.
Copies in backups expire through the backup replacement cycle. They are not used for ordinary account operations. If a backup is restored, applicable deletion requests must be applied again.
Your privacy rights
Depending on applicable law, you may request access to your personal data, correction of inaccurate information, deletion, restriction of processing, or a portable copy of data you provided. You may also object to processing based on legitimate interests and withdraw consent where processing relies on consent.
Send requests to [email protected]. The administrator of the her.direct service may need information to verify your identity before acting on a request. Rights may be subject to legal exceptions, including required record retention. You will not be treated unfairly for exercising applicable privacy rights.
Technical cookies
Her uses only technical cookies necessary for functions such as sessions, account access, security, and saving essential preferences. Her does not use advertising cookies or advertising analytics.
These necessary cookies do not require an optional cookie consent banner where applicable law permits their use without consent. You can control cookies through your browser settings, but blocking necessary cookies may prevent account access or other essential functions.
Adults only
Her is intended only for people who are at least 18 years old and have reached the age of legal majority where they live. Age verification may be required. Minors must not create an account or submit personal information.
If you believe a minor has provided personal data, contact [email protected]. The administrator of the her.direct service will investigate and remove data associated with an ineligible account, subject to applicable legal requirements.
Security and policy updates
The administrator of the her.direct service uses appropriate technical and organizational measures to protect personal data. No storage or transmission method can guarantee complete security.
This policy may change as the service or legal requirements change. Material changes will be communicated through the service or by email where required. For questions, contact [email protected].