Privacy policy
Last updated: October 17, 2026
We collect as little as we can, keep it only as long as we need it, and never sell or share it. This policy explains what watchaiporn ("we", "us") collects, why, who can see it, how long we keep it, and your rights under the EU and UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar laws.
- The short version
- Who we are
- What we collect
- Sensitive information
- Why we use it (legal bases)
- Who can see it
- Cookies and browser storage
- How long we keep it
- Illegal content and abuse
- Your privacy rights
- California residents (CCPA)
- Security
- International transfers
- Minors
- Changes and contact
The short version
- No selling, no sharing, no ads profiling. We don't sell your personal information, share it for advertising, or build profiles of your tastes.
- No trackers. No analytics, advertising cookies, tracking pixels, or third-party fonts. The only cookie keeps you signed in.
- Private by default. What you like or dislike, who you follow, and your pools are visible only to you unless you make a pool public. Your email and sign-in username are never shown to other users.
- Your data, your call. Download everything or delete your account yourself, any time, from Settings.
- One exception. Attempts to post content that sexualizes minors are recorded and may be reported to the authorities. See Illegal content and abuse.
Who we are
watchaiporn is responsible for your information (the data controller, and the "business" under the CCPA). For anything about privacy, including requests about your data, email watchaiporn@protonmail.com.
What we collect
When you browse without an account
- Nothing that identifies you is stored. Your IP address is used in memory to deliver pages, to slow down abuse (for example repeated sign-in attempts), and to look up your country and state or region so we can make the site unavailable where the law requires. It is not written to our database, and the location isn't stored either.
- Failed sign-ins. If you try to sign in with a username or email address that has no account, what you typed is recorded with the time (but not your IP address) for 90 days, to spot automated password guessing.
- Anonymous counts. We count video and pool views and which tags are searched as totals only. To avoid counting the same search twice, a one-way code derived from your IP address with a secret key that is replaced every day is kept for 30 minutes. It can't be turned back into your IP address.
When you create an account
- Account details: a sign-in username, an email address, and a password (stored only as a salted scrypt hash, never in readable form).
- Profile: your public display name and, if you add one, a profile picture. Pictures are re-encoded, which removes hidden data such as camera details and GPS location.
- What you post: videos with their titles, descriptions, and tags; comments; pools and their names. Hidden metadata inside uploaded video files is removed during processing. For each upload we also record your confirmation that the video is AI-generated, shows no real person, and shows only adults.
- Your activity: videos you like or dislike, accounts you follow, and videos you add to pools. Only each video's overall score (likes minus dislikes) is shown to others, never who voted.
- Sign-in sessions: a random session token with when it was created and when it expires.
- Sign-in and upload record: each attempt to sign in to your account and each video you try to upload: when it happened and whether it worked (for uploads, also the title and, if it was refused, why). No IP address is recorded. It's used to spot automated abuse, such as password guessing or mass uploading, and is deleted after 90 days.
- Moderation records: if you're timed out or banned, and blocked-word attempts (see below).
- Reports: when you use a Report button, the reason and details you give, which account sent it (or, if you're signed out, the email address you choose to add), and a copy of what was reported. The person you report is never told who reported them.
We don't collect your real name, phone number, date of birth, payment details, precise location, or contacts, and we don't buy information about you from anyone.
Sensitive information
On an adult site, what you watch, like, dislike, follow, and collect can reveal information about your sex life or sexual orientation, which the GDPR treats as a special category and the CPRA as sensitive personal information. We treat all of it that way:
- It's stored only when you choose to act (like, dislike, follow, add to a pool, upload, comment), and you can undo any of these at any time.
- Likes, dislikes, follows, and private pools are never shown to other users. Pools become visible only if you make them public.
- Content preferences you set in the site menu (for example hiding certain types of videos) are saved only in your browser. They're sent along with page requests so we can filter the results, but never stored on our servers.
- We use it only to provide the features you use. We never use it for advertising, profiling, or inferring anything about you, and never disclose it except as described in Illegal content and abuse.
Why we use it (legal bases)
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Running your account and the features you use | Account details, profile, posts, activity, sessions | Performing our contract with you (art. 6(1)(b)); for activity that reveals sexual preferences, your explicit consent, given by choosing to take that action (art. 9(2)(a)) |
| Sending the email that verifies your address when you sign up | Email address | Contract (art. 6(1)(b)) |
| Emailing you a password-reset link when you ask for one | Email address | Contract (art. 6(1)(b)) |
| Keeping the site secure (rate limits, preventing account takeover, spam) | IP address in memory, sessions, the record of sign-in and upload attempts | Legitimate interests in protecting users and the service (art. 6(1)(f)) |
| Enforcing the content rules; detecting, preventing, and reporting illegal content | Moderation records, blocked-word attempts, related account details | Legal obligations (art. 6(1)(c)) and legitimate interests in protecting children and the public (art. 6(1)(f)) |
| Showing view counts and popular tags | Anonymous totals | Legitimate interests (art. 6(1)(f)) |
Where we rely on consent, you can withdraw it at any time by undoing the action (removing a like or dislike, unfollowing, removing from a pool) or deleting your account. Where we rely on legitimate interests, you can object; see Your privacy rights.
Automated filtering. Text you post and search for is automatically checked against a list of blocked words, and posts containing them are refused. This doesn't have legal or similarly significant effects on its own: timeouts and bans are decided by a person.
Who can see it
- Everyone: your display name, profile picture, follower count, join date, public videos with their titles, descriptions, and tags, your comments, and pools you've made public.
- Only you: your email, sign-in username, likes and dislikes, who you follow, private pools, and your sessions.
- The site administrator: can see account details (including email and sign-in username), moderation records, and all pools, only to run and moderate the site.
- Service providers that process data only on our instructions: our hosting provider, which stores the site and database, and our email provider, which delivers the signup verification and password-reset emails. They may not use your information for anything else. To find out which companies these are and where they're based, email watchaiporn@protonmail.com.
- Authorities: only when the law requires it, in response to a valid legal request, or to report content that sexualizes minors (see below).
We don't sell personal information, don't share it for cross-context behavioral advertising, and don't let any third party collect information on our pages.
Cookies and browser storage
We only use storage that the site needs to work, so no consent banner is needed. There are no analytics or advertising cookies.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
bs_session | Cookie (secure, HTTP-only) | Keeps you signed in. Can't be read by page scripts or sent to other sites. | 7 days, or until you sign out |
bs_age_confirmed_at | Browser storage (never sent to us) | Remembers that you confirmed you're 18+ | 30 days |
wap_hidden_main_tags | Browser storage (not stored on our servers) | Remembers the video types you chose to hide | Until you change it or clear your browser data |
wap_watched | Browser storage for this tab only (never sent to us) | Remembers which videos you've watched, so "Up next" shows you new ones | Until you close the tab |
When you follow a link to another website, it isn't told that you came from watchaiporn.
How long we keep it
| Information | Kept for |
|---|---|
| Account, profile, posts, likes, dislikes, follows, pools | Until you delete them or your account |
| Accounts whose email was never verified | Deleted automatically after 30 days |
| Sign-in sessions | Up to 7 days; removed within hours of expiring |
| Email verification links / password-reset links (emailed, or created by the administrator) | 24 hours / 1 hour |
| Anonymous search-counting code | 30 minutes (the key behind it is replaced daily) |
| Blocked-word attempts | 90 days |
| Record of sign-in and upload attempts (no IP address) | 90 days, or until your account is deleted |
| Reports you send, and what was reported (including if it's later deleted) | Until resolved, then 1 year |
| Attempts involving content that sexualizes minors | 1 year, even if the account is deleted (see below) |
| Accounts banned for breaking the rules | Kept while the ban applies, so it can't be avoided by signing up again |
| Server error logs | Up to 30 days |
When you delete your account we delete, straight away, your account, profile picture, videos (including the video files), comments, likes, dislikes, follows, pools, and sessions. Copies in backups are removed when those backups are replaced or deleted. For questions about this, email watchaiporn@protonmail.com.
Illegal content and abuse
Protecting users' privacy never extends to protecting people who try to share content that sexualizes minors. Our systems automatically block words associated with that content in everything users write and search for. When someone tries to use them:
- The attempt is recorded, with what was written, where, when, and which account (or that it came from a signed-out visitor), and shown to the site administrator for review.
- These records are kept for 1 year. If the account is deleted in that time, its email address is kept with the record so the person can still be identified.
- Where the law requires it, or where we believe in good faith that a child may be at risk, we report it, with the relevant account details, to the competent authorities, such as the National Center for Missing & Exploited Children (NCMEC) in the US or the police.
- So that investigations aren't compromised, these records may be left out of data downloads and aren't deleted on request while a legal basis to keep them applies (GDPR arts. 17(3) and 23; CCPA exceptions for legal compliance and security).
Attempts involving other blocked words are recorded only when someone actually posts or searches, and are deleted after 90 days. Text you type but don't send is never stored, except for words associated with content that sexualizes minors.
Your privacy rights
Depending on where you live, you have the right to:
- Access and portability: get a copy of your information in a machine-readable format. Use Settings → Download my data.
- Deletion: delete your account and its content. Use Settings → Delete your account, or delete individual videos, comments, and pools yourself.
- Correction: change your display name and profile picture in Settings. To correct anything else, such as your email address, contact us.
- Objection and restriction: object to processing based on legitimate interests, or ask us to limit how we use your information while a concern is looked into.
- Withdraw consent: at any time, without affecting what happened before.
- Complain: to your local data protection authority (in the EU/EEA, the authority in your country; in the UK, the ICO). We'd appreciate the chance to help first.
For anything you can't do in Settings, email watchaiporn@protonmail.com from the address on your account (so we can confirm it's you). We'll answer within one month (GDPR) or 45 days (CCPA), and tell you if we need longer. It's free. You can also sign out everywhere if you think someone else has access to your account.
California residents (CCPA/CPRA)
In the last 12 months we collected these categories of personal information, from you directly and from your use of the site, for the purposes described in Why we use it:
- Identifiers: sign-in username, display name, email address, account ID.
- Internet activity on our site: likes, dislikes, follows, pools, uploads, comments, sessions.
- Audio and visual content: videos and profile pictures you upload.
- Sensitive personal information: account login (username and password), and activity that may reveal your sex life or sexual orientation. We use it only to provide the service you asked for, so the right to limit its use doesn't apply beyond that; we don't use it to infer characteristics about you.
We do not sell or share your personal information (as those terms are defined by the CCPA), and haven't done so in the last 12 months, including for anyone under 16. We honor Global Privacy Control signals, although because we don't sell or share, there is nothing further to opt out of.
You have the right to know what we collect, use, and disclose; to access, delete, and correct it; to opt out of selling and sharing; and not to be discriminated against for using these rights. You can use them yourself in Settings, by email, or through an authorized agent (we'll ask the agent for your signed permission and may verify your identity with you directly).
Security
The site is served only over encrypted HTTPS. Passwords are hashed with scrypt; sign-in cookies are secure and HTTP-only; sign-in attempts are rate-limited; uploads are checked before processing; and other websites are blocked from making requests on your behalf. Access to the database and administration is limited to the site operator. No system is perfectly secure: if a breach puts your information at risk, we'll notify you and the authorities as the law requires.
International transfers
Our servers may be in a different country from the one you live in. If your information is transferred outside the EU/EEA or UK to a country without an adequacy decision, we protect it with the European Commission's Standard Contractual Clauses (and the UK Addendum) or another safeguard recognized by law. To ask where your information is stored, or for a copy of these safeguards, email watchaiporn@protonmail.com.
Minors
watchaiporn is only for adults aged 18 or older (or the age of majority where you live). We don't knowingly collect information from anyone younger. If we learn that an account belongs to a minor, we delete it and its content. If you believe a minor is using the site, contact us.
Changes and contact
If we change this policy, we'll update the date at the top, and for significant changes we'll let account holders know by email or on the site before they take effect. Questions, requests, or complaints: watchaiporn@protonmail.com.