Privacy Policy

This explains what Blixcy collects, why, who we share it with, how long we keep it, and what you control. We collect as little as we need.

1. What we collect

• Account information: email, display name, password (stored hashed, never in plain text).
• Membership and purchase history, to enforce access to content you're entitled to see. Card details are handled by our payment processor; we never see or store them.
• Consent records: age confirmation and terms acceptance, with a timestamp, policy version and browser user-agent.
• Basic access logs for protected media, used for security and abuse prevention.
• Signed-in devices: a browser and system label (for example “Chrome on macOS”) and when each was last active, so you can sign devices out. We don't keep your IP address or location for this.
• Preferences you set, such as notification choices and your default feed.
• Reports, takedown requests and complaints you send us, including the contact details you give.
• Anonymous profile-visit counts for creators: one daily count per visitor using a key that changes every day. Creators never see who visited. Opt out in Settings, or by enabling Global Privacy Control / Do Not Track.
• Your country, derived from your connection by our hosting provider, only to apply legal restrictions and show the right currency.

Because a subscription to adult content can reveal sensitive information about you, we never show your memberships or activity to other members, creators or the public.

2. Creator verification (biometric data)

Creators who verify take a short live selfie. With their explicit consent we compare it with photos they choose from their own profile. This is a trust signal, not a government ID check.

• Captures are stored privately and visible only to trained reviewers. They are never shown publicly or used for advertising, recommendations or model training.
• Raw captures are deleted as soon as a decision is made. Captures nobody has reviewed are deleted after 30 days; captures left behind by an interrupted upload are deleted within hours.
• We keep the outcome, the reviewer's decision, similarity scores and a one-way fingerprint (hash) of each capture so decisions can be audited.

3. Why we use it

• To provide the service you asked for (account, access, payments) — contract.
• To keep the platform safe and meet legal duties (age checks, content safety, records, responding to authorities) — legal obligation and legitimate interest.
• To prevent fraud and abuse and secure the service — legitimate interest.
• Optional features such as biometric verification — your explicit consent, which you can withdraw (withdrawal does not affect earlier lawful use).

We do not sell your data, and we do not use it for third-party advertising.

4. Who we share it with

Only service providers acting for us: hosting and database, object storage, payment processing, email delivery, and identity or liveness verification (creators only). We also disclose data where a court, regulator or law enforcement lawfully requires it, to protect someone's safety, or to report child sexual abuse material. We require providers to protect data and use it only for our purposes.

5. International transfers

Our providers may process data in countries other than yours. Where the law requires it, we use recognised safeguards such as standard contractual clauses.

6. Retention

Consent records and moderation reports are retained as long as required to demonstrate compliance and resolve disputes. You can delete your account in Settings. Deletion takes effect after a 30-day grace period, during which you can cancel by signing in. We then erase your profile, preferences, follows, likes, saves and history. We keep records the law or our payment partners require — payments, consent attestations, verification outcomes and safety reports — without your profile details.

7. Your rights

Depending on where you live (including India's Digital Personal Data Protection Act, the UK and EU GDPR, and US state laws such as the CCPA/CPRA) you may have the right to access, correct, delete or export your data, to withdraw consent, to object to or restrict some processing, to nominate someone to act for you, and to complain to a regulator. Most of this is self-service in Settings → Privacy. For anything else, or if we have not resolved your request, use the Grievance officer page; we reply within the legal time limits, and at the latest within 30 days.

8. Children

Blixcy is for adults only. We do not knowingly collect data from anyone under 18, and delete it if we learn we have.

9. Security and incidents

Protected media is only ever delivered after a server-side access check, via short-lived signed links — not by exposing storage URLs directly. Passwords are hashed and sessions can be revoked. No system is unbreakable; if a personal-data breach affects you we notify you and the regulators as the law requires (in India, incidents are reportable to CERT-In within six hours).

10. Cookies

We use only essential cookies, listed in our Cookie policy.

11. Changes

We will post the new version here and ask you to accept it if the change is material.