Privacy Policy

Draft — this policy is pending legal review and may change before launch.

This explains what Blixcy collects, why, how long we keep it, and what you control.

1. What we collect

• Account information: email, display name, password (stored hashed, never in plain text).
• Membership and purchase history, to enforce access to content you're entitled to see.
• Consent records: age confirmation and terms acceptance, with a timestamp.
• Basic access logs for protected media, used for security and abuse prevention.
• Signed-in devices: a browser and system label (for example “Chrome on macOS”) and when each was last active, so you can sign devices out. We don't keep your IP address or location for this.
• Preferences you set, such as notification choices and your default feed.
• Anonymous profile-visit counts for creators: one daily count per visitor using a key that changes every day. Creators never see who visited. Opt out in Settings, or by enabling Global Privacy Control / Do Not Track.

Creator verification (biometric data)

Creators who verify take a short live selfie. With their explicit consent we compare it with photos they choose from their own profile. This is a trust signal, not a government ID check.

• Captures are stored privately and visible only to trained reviewers. They are never shown publicly or used for advertising, recommendations or model training.
• Raw captures are deleted as soon as a decision is made. Captures nobody has reviewed are deleted after 30 days; captures left behind by an interrupted upload are deleted within hours.
• We keep the outcome, the reviewer's decision, similarity scores and a one-way fingerprint (hash) of each capture so decisions can be audited.

2. What we don't do

We do not sell your data to third parties. We do not display your membership or activity on this platform to other members or the public.

3. Retention

Consent records and moderation reports are retained as long as required to demonstrate compliance and resolve disputes. You can delete your account in Settings. Deletion takes effect after a 30-day grace period, during which you can cancel by signing in. We then erase your profile, preferences, follows, likes, saves and history. We keep records the law or our payment partners require — payments, consent attestations, verification outcomes and safety reports — without your profile details.

4. Security

Protected media is only ever delivered after a server-side access check, via short-lived signed links — not by exposing storage URLs directly. No system is unbreakable; we do not make guarantees beyond reasonable, documented safeguards.