This policy explains what personal data Adultaro.com collects when you use the site, why, how long we keep it and what rights you have. We collect as little as we can: you do not need an account to use Adultaro.com, and most of the site works without us knowing anything about you.

Who is responsible

The controller of your personal data is the operator of Adultaro.com: [Owner to fill: legal entity name, registered address and company number]. You can reach us through the contact form or at contact@adultaro.com.

What we collect and why

Server logs

Like almost every website, our servers record each request: your IP address, the date and time, the page requested, the referring page and your browser's user agent. We use these logs to run the site, keep it secure and investigate errors and abuse. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Logs are kept for a short period by our hosting provider and then deleted [Owner to verify: log retention period at the hosting provider].

Cookies and local storage

  • Session and security cookies. The site's software sets a session cookie and an XSRF-TOKEN cookie. They protect our forms against cross-site request forgery and remember a form you have just sent. They contain no information about you beyond a random identifier and expire after two hours. They are strictly necessary, so no consent is needed for them.
  • Age confirmation. When you confirm you are 18 or over, your browser stores adultaro_age_confirmed in its localStorage so the age notice is not shown again. It stays on your device and is never sent to us. You can delete it by clearing your browser's site data.
  • Language. The language you read the site in is part of the address (for example /de/ for German). We do not store it in a cookie.

Analytics

When it is switched on, the site loads Google Tag Manager, a tool from Google that loads the analytics tags we configure in it, such as Google Analytics. These tags may set cookies and send Google information about your visit, including your IP address, device and browser details, the pages you view and how you arrived. We use the resulting statistics, which we see only in aggregate, to understand which pages are useful. Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR), or your consent where the law requires it. Google may process this data in the United States; see Google's own privacy policy. You can block these tags with your browser's privacy settings, a content blocker or Google's opt-out browser add-on.

Review votes

You can rate a review with a thumbs up or down. To count one vote per visitor without storing who you are, we keep only a keyed one-way hash (an HMAC) calculated from technical data of your connection together with the review. The hash cannot be turned back into your IP address, and the raw IP address is not stored with your vote. Legal basis: our legitimate interest in keeping the vote counts honest (Art. 6(1)(f) GDPR).

Links to other sites

Links from our reviews to the sites they describe go through a short redirect address on our site (/exit/...). For each site we count how many times its link was followed per day. That count is just a number: we do not record who clicked. Many of these links are affiliate links, so the site you arrive at, or its affiliate network, may set its own cookies to attribute your visit to us. That happens under their privacy policy, not ours.

Contact form

When you use the contact form we store your name, e-mail address, the subject and your message, with your IP address and browser user agent to help us spot abuse and spam. We use this to answer you. Legal basis: your request and our legitimate interest in answering it (Art. 6(1)(b) and (f) GDPR). We delete messages when they are no longer needed to deal with your request and any follow-up [Owner to verify: retention period, for example 12 months].

Site owners

If you request a listing on Add your site or ask for a link to your listing status, we store the details you give us (site name and address, the page with our link, your e-mail address and message) with your IP address and user agent, and we send you e-mails about the request. Legal basis: steps you ask us to take before a possible agreement, and our legitimate interest in preventing abuse (Art. 6(1)(b) and (f) GDPR). Business records such as orders and invoices are kept for as long as accounting law requires.

Who receives your data

We do not sell personal data. It is processed on our behalf by our hosting provider and, for e-mail, our mail provider, and by Google when analytics is switched on. We may disclose data where the law requires it. Where data leaves the European Economic Area, we rely on the safeguards the GDPR provides for, such as the European Commission's standard contractual clauses or an adequacy decision.

Your rights

Depending on where you live, you have the right to ask for access to your personal data, its correction or deletion, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave, without affecting earlier processing. Send your request through the contact form with the subject "Privacy request". Because we keep so little data, we may need details from you (for example the e-mail address you wrote from) to find it. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live.

Age

Adultaro.com is for adults only. It is not directed at anyone under 18, and we do not knowingly collect data about minors. If you believe a minor has sent us personal data, please contact us and we will delete it.

Changes to this policy

We will update this page when what we collect or how we use it changes, and change the date at the top.