Privacy policy
Short version: we collect as little as possible. No tracking cookies, no ad pixels, no selling your data. If you give us your email, we use it to email you and nothing else.
What we collect
Things you give us
- Email address, if you join the list, plus any interest you tick (for example the workbook).
- Messages you send through the contact form or by email, including your name if you include it.
- Removal or copyright notices you send, which by law must include your contact details.
Things collected automatically
- Server logs kept by our hosting provider: IP address, browser type, pages requested and timestamps, kept for security for up to 30 days.
- Cookie-free analytics, if enabled: aggregate page views, referrers, country and device type with no personal identifiers. See the Cookie notice.
- Browser storage on your own device, used only to remember that you confirmed your age in this session and small preferences like a vote or a dismissed banner. This data never leaves your device.
Why we use it
- To send you the emails you signed up for (legal basis: your consent; withdraw it any time by unsubscribing).
- To answer your messages and handle removal or copyright notices (legal basis: our legitimate interest and legal obligations).
- To keep the site secure and understand which pages are popular (legal basis: legitimate interest).
Who sees it
We don't sell or rent personal data. We share it only with service providers who help run the site and act on our instructions: our web host, our email-list provider, and our contact-form provider. [List providers once chosen, e.g. Cloudflare Pages, Kit]. We may also disclose data if the law requires it.
Links to other services
Fanvue, Instagram, Facebook, TikTok, Threads and Bluesky have their own privacy policies. What you do there is governed by them, not by us.
How long we keep it
- Email list: until you unsubscribe, then your address is removed from the active list (a suppression record may be kept so we don't email you again).
- Messages: up to 12 months after the matter is closed.
- Legal notices: as long as the law requires.
Your rights
Depending on where you live (including the EU/UK under GDPR and California under the CCPA), you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, to withdraw consent, and to complain to a data-protection authority. We don't sell or share personal data for cross-context advertising. To exercise a right, email [contact email]. We will reply within 30 days and may ask you to confirm your identity.
Children
This site is for adults 18 and over. We don't knowingly collect data from anyone under 18. If you believe a minor has given us data, email [contact email] and we will delete it.
Security
The site is served over HTTPS. Access to the email list and inbox is limited to the people who run Vivi Vixen and protected with strong passwords and two-factor authentication.
Changes
We may update this policy. The date at the top shows the current version.