Privacy Policy

1. Controller and contact

The controller is the operator of the Site, a Czech limited liability company (s.r.o.) currently in formation. Its registered name, registration number and address will be published here once registration is complete.

For any privacy question or request, write to bill@xxxmedusa.com.

2. What we collect and why

• Your IP address, on every request: to determine your approximate country (and US state) so we can apply the age-verification rule for your region. The lookup uses a database stored on our own server; your IP address is not sent to a third party for this. Legal basis: legal obligation and our legitimate interest in complying with regional law.
• Server access logs: time, IP address, request method, host, path, status code, response size and duration. We do not log cookies, browser details or referrers. Used for security and to investigate abuse. Legal basis: legitimate interest.
• Age-verification result: whether you passed, the method (self-declaration, facial age estimation or identity document), the time, and the country / state and rule version that applied. If you are logged in, this result is linked to your account so we don't ask again on your other devices until it expires. We do not store your ID document, your photos, your date of birth or your estimated age. Legal basis: legal obligation.
• Account (only if you create one): your email address, your password (stored only as a salted scrypt hash, never in readable form) and your login sessions. Failed login attempts are recorded as one-way hashes of the email address and IP address, only to limit password guessing. When a password-reset email is requested, we record one-way hashes of the email address and the requesting IP address, only to limit how many emails can be sent; this happens the same way whether or not the address has an account. Legal basis: performance of our contract with you and legitimate interest in account security.
• Your activity on the Site if you are logged in: watch history (to offer "Continue watching" and personal recommendations), private favorites, votes and "not for me" marks. None of this is ever shown to other users. Legal basis: performance of our contract with you.
• Reports you send us: the content link, reason, description and, if you choose to give it, your email address. Legal basis: legal obligation and legitimate interest in removing unlawful content.
• Paid features (membership, custom orders, coins) are not yet available. When they open, this policy will be updated to describe the payment data involved and who processes it. We will never receive or store your full card number.

3. Age verification by Didit

Where your region requires it, age verification is performed by Didit, an identity-verification provider acting as our processor. You are redirected to Didit, which checks your age either by estimating it from a live selfie or by reading an identity document. Didit returns only the result to us.

Our Didit account is configured to keep verification data for at most 1 month and not to use it to train models. Biometric data used for the check is not kept by us, and according to Didit's processing it is deleted together with the verification session.

4. Cookies

We use only the cookies below. They are all first-party and needed for the Site to work or to remember a choice you made. We do not use advertising, tracking or analytics cookies.

• mdsa_av — records that you passed the age check, so we don't ask again; expires after 30 days if you declared your age yourself, or after 1 hour if you verified with face estimation or an identity document. It only counts where self-declaration is allowed: if you connect from a region that requires verification, it is not accepted there.
• mdsa_age_try — a one-time random value used only while a Didit verification is in progress; expires after 1 hour.
• mdsa_sess — keeps you logged in; expires after 30 days or when you log out.
• lang — remembers the language you chose; expires after 1 year.

5. Who processes data for us

We do not sell your personal data or share it with advertisers. We disclose data to authorities only where the law requires it.

• Vicetemple — hosts our servers and database (Amsterdam, Netherlands).
• Bunny.net — stores and delivers video and images through its content delivery network.
• Didit — age verification, where your region requires it.
• Gandi — hosts our email, used when you write to us or we reply, and sends password-reset emails you request.

6. How long we keep data

• Server access logs: 30 days.
• Failed-login records (hashed): deleted at the first daily clean-up after they are 1 day old.
• Email-sending records (hashed): deleted at the first daily clean-up after they are 2 days old.
• Age-verification records: deleted 30 days after the verification expires.
• Watch history, favorites, votes, "not for me" marks and login sessions: deleted immediately when you delete your account.
• Subscriptions, entitlements, wallet history and custom-order records: deleted 1 year after you delete your account.
• Order and payment records: kept for the period required by accounting and tax law, then deleted. After you delete your account they are no longer linked to your email address.
• Reports: kept as long as needed to handle them and to meet our legal obligations.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Logged-in users can export their data (JSON) and delete their account directly from the account page. For anything else, write to bill@xxxmedusa.com; we reply within one month.

You can also lodge a complaint with a data protection authority, in particular the one in the country where you live, or with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

8. Security

The Site is served only over HTTPS. Explicit content is delivered through short-lived signed links that are issued only after the age check. Access to our servers is restricted to the people who operate them.

9. Minors

The Site is for adults only. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, write to bill@xxxmedusa.com and we will delete it.

10. Changes

We may update this policy. The version number and date at the top of this page show which version applies. If a change materially affects you, we will tell you on the Site before it takes effect.