MUNCH. PLAY. KINK.Enter platform →
Legal

Privacy Policy

Effective date: 1 June 2026 · Last updated: 1 June 2026

Contents
  1. 1. Overview
  2. 2. Data We Collect
  3. 3. Zero-Knowledge Privacy Architecture
  4. 4. How We Use Your Data
  5. 5. Content & Media Storage
  6. 6. Cookies & Session Tokens
  7. 7. Your Rights
  8. 8. Minors
  9. 9. Law Enforcement Requests
  10. 10. Changes to This Policy
  11. 11. Contact

1. Overview

Munch. Play. Kink. ("we", "us", "our") operates a sex-positive social platform for consenting adults. We take privacy seriously - especially given the sensitive nature of lifestyle, kink, and adult communities. This policy explains what data we collect, how we store it, and your rights over it.


This policy applies to all users of our website and services. By using the platform you agree to the practices described here.

2. Data We Collect

Account data: We store a one-way SHA-256 hash of your email address - we cannot reverse it to recover your email. We store a bcrypt hash of your password - we cannot recover it. We store the display name you choose (pseudonym).


Profile data: Pronouns, location (city/region only, never precise GPS), bio, interests, and avatar images you voluntarily provide.


Content: Posts, forum replies, event details, messages, and vault media you upload.


Technical data: IP addresses (for rate limiting and fraud prevention, rotated and purged after 90 days), browser type, session tokens, and server logs.


Payment data: We do not store card numbers or payment credentials. Membership billing is processed by CCBill (card) and NowPayments (crypto). We store only the billing reference IDs they return, not the underlying payment details.


Identity verification: Government ID and selfie images submitted for age verification are stored in an isolated, encrypted ledger separate from your profile. They are accessible only to compliance staff and are never linked to your public persona.

3. Zero-Knowledge Privacy Architecture

Your legal identity (real name, government ID) is stored in a separate encrypted ledger that is never joined to your public profile in any query or display layer. Staff with platform access cannot see your legal name from your profile - only designated compliance personnel with explicit database access to the isolated ledger can.


Your public persona (display name, avatar, posts) is entirely decoupled from your real identity by design.

4. How We Use Your Data

We use your data to:


• Operate the platform (serve your feed, deliver messages, process payments)

• Provide safety and fraud prevention (rate limiting, abuse detection)

• Send transactional emails you request (password reset, subscription receipts)

• Comply with legal obligations (DMCA responses, law enforcement requests with valid legal process)

• Improve the platform (aggregate, anonymised analytics only - never individual tracking sold to advertisers)


We do not sell your personal data. We do not run behavioural advertising. We do not share your data with third parties except as required to operate the service (CCBill and NowPayments for billing, Resend for email, Cloudflare R2 for storage) or as required by law.

5. Content & Media Storage

Media you upload (avatars, vault content, event covers) is stored on Cloudflare R2 object storage in the United States. Vault content is access-controlled - free content is public, subscriber content requires an active subscription, PPV content requires purchase.


You retain ownership of all content you upload. You grant us a limited licence to store, display, and deliver that content to authorised users per your tier settings.

6. Cookies & Session Tokens

We use one first-party session cookie to keep you signed in. We do not use third-party tracking cookies, advertising pixels, or analytics beacons.


The session cookie is HttpOnly, Secure, and SameSite=Strict. It expires after 30 days of inactivity.

7. Your Rights

You have the right to:


Access - Request a copy of the data we hold about you.

Correction - Update or correct your profile data at any time in Settings.

Deletion - Request full account deletion. We will delete your profile, content, and associated data within 30 days. Payment records are retained for 7 years for tax and legal compliance. Age verification records are retained per applicable law.

Data portability - Request an export of your data in machine-readable format.

Opt out of communications - Unsubscribe from any non-transactional emails.


To exercise these rights, email privacy@munchplaykink.com.

8. Minors

This platform is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us immediately at safety@munchplaykink.com and we will terminate the account and delete the data.

9. Law Enforcement Requests

We require a valid legal process (subpoena, court order, or search warrant) before disclosing any user data to law enforcement. We will notify affected users of requests where legally permitted. We do not provide voluntary access to user data without legal compulsion.

10. Changes to This Policy

We will notify you of material changes to this Privacy Policy by posting a notice in the platform and emailing you (at the address you registered with, via your hashed email). Continued use of the platform after the effective date constitutes acceptance.

11. Contact

Privacy questions: privacy@munchplaykink.com

Data deletion requests: privacy@munchplaykink.com

Safety & CSAM reports: safety@munchplaykink.com

DMCA notices: Use the form at /dmca


Munch. Play. Kink.

privacy@munchplaykink.com

Terms of ServiceDMCA Takedowns18 U.S.C. § 2257Roadmap