Privacy Policy
Last updated: March 2026
1. Information We Collect
We collect information you provide directly when you create an account: email address, username, date of birth (for age verification), and profile information (display name, bio, avatar). If you are a creator, we also collect payment and banking information for payouts. We automatically collect usage data including IP address, browser type, device information, pages visited, stream viewing history, and interaction data (tips, messages, follows). We collect this data through server logs and optional analytics cookies.
2. Legal Basis for Processing
We process your personal data under the following legal bases as defined by the GDPR: (a) Contract performance — processing necessary to provide our services (account management, payments, content delivery). (b) Legitimate interests — platform security, fraud prevention, service improvements, and anonymous analytics. (c) Consent — optional analytics cookies and marketing communications. (d) Legal obligation — financial record keeping, tax reporting, and law enforcement requests.
3. How We Use Your Information
We use your information to: provide and maintain the Platform, process transactions and payouts, send essential notifications (account security, payment confirmations), personalize your experience (content recommendations, "For You" feed), enforce our Terms of Service and Community Guidelines, prevent fraud and ensure platform safety, and respond to support requests. We do not sell your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
4. Data Sharing & Processors
We share your data only in the following circumstances: (a) Service providers — payment processors, cloud hosting (OVH, France), email delivery services, and content delivery networks, all bound by data processing agreements. (b) Legal requirements — when required by law, court order, or to protect the rights and safety of Swoon and its users. (c) Public information — your username, display name, avatar, and public content are visible to other users. (d) We do not share your private data (email, viewing history, payment details) with other users or third parties for advertising purposes.
5. International Data Transfers
Your data is primarily stored and processed within the European Union (OVH servers, France). In limited cases, data may be transferred to service providers outside the EU. When this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.
6. Data Security
We implement industry-standard security measures to protect your data: TLS/SSL encryption for all data in transit, encryption at rest for sensitive data, passwords hashed using bcrypt with per-user salts, rate limiting on authentication endpoints, two-factor authentication available for all accounts, and regular security audits. Payment information is processed by our payment providers and is never stored on our servers. While we strive to protect your data, no method of transmission or storage is 100% secure.
7. Cookies & Tracking
We use essential cookies for authentication and session management — these are strictly necessary and do not require consent. We use optional analytics cookies (PostHog, self-hosted) to understand how the Platform is used and to improve our services. Analytics cookies are only activated with your explicit consent via our cookie banner. You can withdraw consent at any time through your browser settings. We do not use third-party advertising or tracking cookies.
8. Children's Privacy
Swoon is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected data from a person under 18, we will promptly delete the account and associated data. If you believe a minor is using the Platform, please contact us immediately at contact@swoon.tv.
9. Your Rights (GDPR)
Under the GDPR and applicable data protection laws, you have the right to: (a) Access — request a copy of your personal data. (b) Rectification — correct inaccurate or incomplete data. (c) Erasure — request deletion of your personal data ("right to be forgotten"). (d) Portability — receive your data in a structured, machine-readable format. (e) Restriction — request that we limit processing of your data. (f) Objection — object to processing based on legitimate interests. (g) Withdraw consent — withdraw consent for optional data processing at any time. You can delete your account at any time from the Settings page. To exercise any other right, contact contact@swoon.tv. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
10. Data Retention
We retain your personal data for as long as your account is active and as needed to provide our services. After account deletion, personal data is removed within 30 days. Certain data may be retained longer where required by law: financial transaction records (up to 10 years for tax and accounting purposes), fraud prevention data (up to 3 years), and anonymized analytics data (indefinitely, as it cannot be linked back to you).
11. Contact & Data Protection Officer
For privacy-related questions or to exercise your data rights, contact our Data Protection Officer at contact@swoon.tv. We aim to respond to all privacy requests within 30 days as required by GDPR. If you are unsatisfied with our response, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority, or with your local supervisory authority.