Privacy Policy

1. What we collect

• Account data: email address (required for sign-in), optional Google OAuth identifier if you sign in with Google.
• Profile data you provide: handle, display name, bio, avatar image, cover image.
• Creator data: subscription tiers you set up, posts you publish, media you upload.
• Engagement data: which videos you liked, favorited, or commented on; the text of comments you posted.
• Payment metadata: the amount, currency, and status of crypto invoices you initiated through our payment processor. We never see your card details. Crypto wallet addresses live on the blockchain, not in our database. (When we enable CCBill for card / SEPA payments, billing details are handled by CCBill directly — we only receive the processor's transaction reference and status.)
• Application data: if you fill out the marketing Apply form, your answers (name, email, social handles, country, content type, etc.) are stored in our applicant tracking system (Airtable) and used to review your application. You can wipe every record matching your email at any time via the Delete my application page.
• Anonymous usage data: page-view counts via Vercel Analytics — no IPs, no identifiers, no cross-site tracking.

2. Who we share data with

We use a small number of subprocessors to run the platform. They process data only as needed to deliver the service:

• Supabase — hosts our database, auth, and file storage. Account data, profiles, posts, comments, media live here, protected by row-level security.
• NOWPayments — processes crypto subscription invoices. They receive the invoice amount, currency, and your email when you initiate a payment.
• CCBill (future) — when card / SEPA payments are enabled, CCBill will process card transactions directly. They will see the billing details you enter on their hosted form; we will only receive a transaction reference + status. Until enabled, no data is sent to CCBill.
• Airtable — stores application form submissions (the marketing Apply survey). Each row contains the answers you entered on the form. Self-service deletion is available via the Delete my application link.
• Vercel — hosts and serves the application; receives anonymous request metadata standard for any web host.
• Eporner — third-party adult video catalog whose player we embed on /explore. We never send them your account info; their iframe may set its own cookies in your browser if you play one of their videos.
• Google — only if you choose to sign in with Google. They receive a confirmation that you authorized the login; we receive your email + a Google user ID.

We do not sell your data, run third-party ad trackers, or share data with marketers.

3. Cookies

We use one essential cookie set — Supabase's auth session cookie — so you stay signed in across page navigations. That's it for first-party cookies. Embedded video iframes from third parties may set their own cookies when you play them.

4. Retention

We keep your account data for as long as your account is active. Payment invoice records are kept for accounting / tax compliance purposes (typically 7 years). When you delete your account, your profile, posts, comments, and uploaded media are removed; payment invoice metadata is retained for the period above with personal identifiers minimized.

5. Your rights

Depending on where you live, you have the right to access, correct, delete, or export your personal data, and to object to certain processing.

• Edit most of your account data directly in Settings.
• Delete every application-form record matching your email at Delete my application — instant, no questions asked.
• For anything else (full account deletion, data export, etc.), contact us through the marketing site and we'll respond.

6. Security

We use row-level security on the database so a logged-in user can only read their own private rows. Media is served from short-lived signed URLs so locked content isn't scrape-able without an active subscription. We don't store payment card numbers (we don't take cards) and we don't store cryptographic wallet keys (those live in the user's wallet).

7. Children

Babe Hub is strictly for users 18 and older. We do not knowingly collect any data from anyone under 18. If you believe a minor has created an account, contact us immediately so we can remove it.

8. Changes

We may update this Privacy Policy over time. The "last updated" date at the top reflects when it was last meaningfully revised. Material changes will be surfaced in-app.