Privacy & data exposure
How private recordings, identity documents, viewing history and payment details are collected, stored, retained and ultimately leaked or sold by adult platforms.
Scope of this assessment area
Adult platforms hold some of the most sensitive personal data on the internet: identity documents tied to intimate behaviour. We assess whether they treat that data with the gravity it deserves, or as a marketing asset.
What we look for
Observable patterns that trigger investigation under this area.
Criteria a platform is scored against
Each criterion is publicly defined and applied consistently across every platform we review.
End-to-end encryption
Private flows (DM, paid show) not readable by platform staff or vendors.
Data-minimisation
Intimate content kept only as long as legally required.
Retention & deletion guarantees
Public, auditable deletion timelines; cryptographic erasure.
Breach-notification standards
72-hour disclosure to users and regulators, named contact.
Subject-access response quality
Real, complete data exports within statutory windows.
If you are affected - what to do first
Sequential, low-risk actions you can take right now.
File a deletion request
Use GDPR / CCPA / equivalent rights - in writing, dated.
DMCA mirror sites
Send takedown notices to every host where leaked content appears.
Notify the regulator
Data-protection authority for the platform's home jurisdiction.
Freeze identity documents
If ID was leaked, alert the issuing authority and consider re-issuance.
Have evidence in this area?
Submit confidentially - encrypted at rest, named reviewers only, you can submit anonymously.