Privacy Policy

What we do NOT collect

No account, no email address, no password. No tracking cookies. No third-party analytics, advertising, or fingerprinting scripts. No server-side profile of your viewing behavior.

What stays on your own device

Your preferences, likes, watch history, saved videos, and searches are stored exclusively and locally in your browser (IndexedDB/localStorage). This data never leaves your device and is not visible or retrievable by us. Personalization is computed entirely within your own browser.

What does briefly pass through our server

Our server log. Like every website, our server (DigitalOcean, data centre in Amsterdam, acting as our processor) records each request: the time, the page requested, your browser type and your country. For videos, shop clicks and live cams it records only a code that can no longer be traced back to what was requested once the day is over. We do not store your IP address. In its place the log holds a pseudonym that is valid for one day: a hash of your IP with a secret value that is replaced every night, so requests from different days cannot be linked. The log is kept for 14 days for security and abuse prevention, then deleted. Your search term travels in the request body, not in the address, so it does not appear in this log.

What third parties receive. Thumbnails and the video streams of most sources are loaded by your browser directly from those sources, so they receive your IP address, as with any embedded video. For one source we relay the video stream through our server, and that source sees our server instead of you. When you click a product, you go via our server to the shop, which then applies its own privacy policy. Where we show live cams, the partner’s player (Chaturbate, United States) is loaded in a frame and sets its own cookies. If you choose to pair a toy, the pairing runs through Lovense (Hytto Pte. Ltd., Singapore); our server fetches the pairing image, and the device details Lovense returns are held in our server’s memory for at most five minutes.

Reporting content

A report stores the reported item and the reason. To count each reporter only once, we store the same one-day pseudonym as in the server log, for at most 90 days, and delete it as soon as a decision on the item has been made.

Erasing your data

Because your profile exists only on your device, a single tap on “Erase all my data” (in Settings) deletes all of it at once. That is your right to erasure under the GDPR, exercised instantly. The pseudonymous server log described above deletes itself after 14 days.

Encrypted backup

Because your profile lives only on this device, it disappears if the browser clears its storage or you switch phones. Settings offers an encrypted backup: a file you download and keep yourself. It is encrypted with AES-GCM-256 under a key derived from a generated six-word phrase (PBKDF2-HMAC-SHA-256, 600,000 iterations). We never see the file, the phrase, or the key — there is no upload and no account.

Two things we would rather say plainly than bury. First: losing the phrase means losing the backup, permanently and by design — we cannot reset it, because we do not have it. Your current on-device profile is untouched either way. Second: the encryption protects the file if someone else gets hold of it. It cannot protect you against a weak phrase you chose yourself (which is why we generate one) or against a compromised copy of this website, since we are the ones serving the JavaScript that holds the key. That is the honest limit of browser-side encryption.

Age

The service is intended exclusively for adults (18+) and is not intended for minors.

Purposes and legal bases

Your profile exists to personalise the feed you use. It is kept on your device, never reaches us, and you can switch it off in Settings (“Remember my taste on this device”); the stored profile is then erased. Your age confirmation and your settings are stored on your device because the service needs them to work.

Our server log, the one-day pseudonym for reports and the short-lived toy pairing details are processed on the basis of our legitimate interest (Article 6(1)(f) GDPR): keeping the service secure, preventing abuse, counting visits without identifying anyone, and handling reports of illegal content. Relaying one video source and forwarding you to a shop you choose are necessary to provide the service you use (Article 6(1)(b) GDPR).

Contact and exercising your rights

The “Erase all my data” button in Settings deletes everything on your device. The server log deletes itself after 14 days. For anything else (a question, an objection or any other GDPR request), write to info@kinoloom.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). The operator’s name and address will be published on our contact page once the business is registered.