Privacy Policy

Who we are

OnlyTens (onlytens.xyz) is a private, self-hosted adult content platform. We take the position that you have a right to browse and pay for content without creating a paper trail. This policy describes exactly what we collect, why, and how long we keep it.

What we collect

Account information

• Username: chosen by you at registration. This is how you appear in the system.
• Email address: required for account recovery. It is stored and is associated with your purchase history. If you want maximum anonymity, use a throwaway email address.
• Date of birth: required to verify you are 18 or older. Stored encrypted; we cannot read it in plaintext without the decryption key.

Activity records

• Credit and purchase records: we record which content you have unlocked and credit transactions. These are linked to your username, not to any real-world identity.
• Server logs: our web server logs IP addresses and request paths automatically for security monitoring, abuse prevention, and diagnosing technical issues. Logs are retained for 30 days and then deleted.

What we do not collect

• Your real name
• Billing address or payment method details
• Browser fingerprints or tracking cookies
• Data from third-party advertisers or analytics services

We do not run advertising networks, sell data, or use any third-party tracking or analytics. There is no Google Analytics, no Facebook Pixel, and no ad targeting on this platform.

Platform analytics

We collect aggregate, anonymised usage data (such as which content is viewed most often, browsing patterns across the catalogue, and feature engagement) to understand how the platform is being used and where it can be improved. This data is also used to provide creators with performance insights on their content.

This analytics data cannot be used to identify you individually. It is never shared with third parties, sold, or used for advertising purposes.

Payments

OnlyTens accepts cryptocurrency only. We never receive your real name, bank account, credit card number, or billing address. Payment records in our system consist of transaction identifiers and credit amounts; never any personally identifiable financial information.

How your data is protected

Sensitive fields (date of birth, performer legal documents) are encrypted at rest using industry-standard symmetric encryption. The platform is operated on private servers in the European Union, not accessible directly from the public internet. Neither databases nor APIs are publicly exposed.

Data retention

• Account data is retained for as long as your account is active.
• Server logs are retained for 30 days.
• Purchase records are retained indefinitely to ensure continued access to content you've paid for.

Your rights (GDPR)

If you are in the European Union, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request that your account and associated personal data be deleted. Purchase records may be retained for accounting purposes after deletion.
• Portability: request your data in a portable format.
• Objection: object to processing of your data.

To exercise any of these rights, use our contact page.

Children

This platform is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover that a user is under 18, their account is immediately terminated and their data deleted.

Changes to this policy

If we make material changes to this policy, we will update the effective date at the top of this page. Continued use of the platform after a change constitutes acceptance of the updated policy.

Governing law

This policy is governed by the laws of the Netherlands. Data protection matters are subject to the General Data Protection Regulation (GDPR) as applicable.