Privacy Policy

This Privacy Policy explains how MuscleWorship (“we”, “us”) collects, uses, shares and protects personal data when you use muscleworship.net. We act as the data controller for your account data. If you are in the EU/EEA or UK, we process your data in accordance with the GDPR/UK GDPR.

1. Data we collect

• Account data: display name, email, password (hashed), preferences, and for Creators, profile details.
• Identity verification (Creators): government ID images and related KYC data, required by law for adult-content payouts. These are encrypted at rest and accessible only to authorized reviewers.
• Transaction data: purchases, tips, donations, payouts and wallet balances. Card data is handled by our payment processor; we do not store full card numbers.
• Usage & device data: IP address, device/browser info, pages viewed and actions taken, for security, analytics and fraud prevention.
• Content & communications: content you upload, comments, and messages between Fans and Creators.

2. How we use data

• To operate the Platform, process payments and deliver content.
• To verify age and identity and comply with legal obligations (incl. record-keeping).
• To prevent fraud, abuse and policy violations, and to secure accounts.
• To provide support and send service communications.
• With your consent, to send marketing — which you can withdraw at any time.

3. Legal bases (GDPR)

We rely on: performance of a contract (providing the service), legal obligation (KYC, tax, 2257), legitimate interests (security, fraud prevention, improving the Platform), and consent (marketing, non-essential cookies).

4. Sharing

We share data with service providers acting on our behalf (payment processors such as Stripe, crypto on-ramps such as MoonPay, hosting, email and analytics providers), and with authorities where required by law. We do not sell your personal data. Creators and Fans see only the limited profile information necessary to interact.

5. Retention

We keep account and transaction data for as long as your account is active and as required for legal, tax, and record-keeping purposes (identity-verification records are retained for the periods mandated by applicable law). We delete or anonymize data when it is no longer needed.

6. Security

We use encryption in transit and at rest for sensitive data, hashed passwords (argon2), access controls, and optional two-factor authentication. No system is perfectly secure, but we work to protect your data.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or port your data, object to processing, and withdraw consent. To exercise these rights, email privacy@muscleworship.net. You may also lodge a complaint with your local data-protection authority.

8. International transfers

Your data may be processed in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for such transfers.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

10. Changes & contact

We may update this Policy and will notify you of material changes. Questions? Email privacy@muscleworship.net or contact us.