Privacy policy

This policy explains what personal data Kinkmarket collects, why, and what your rights are. Kinkmarket is operated by KCTECHNOLOGY Ltd (company no. 17302910), trading as Kinkmarket, and the operator is the data controller for the purposes of UK data protection law. Our service address is KCTECHNOLOGY Ltd, 66 Paul Street, London, EC2A 4NA. You can contact us at [email protected].

1. What this policy covers

This policy covers the kinkmarket.me website. It does not cover the separate websites that independent creators run themselves; each of those has its own privacy policy.

2. What we collect

Anonymous visitors

If you browse the directory without registering an account, we collect very little. We store a cookie that records you have confirmed you are over 18, an anonymous session identifier, and anonymous records of which creator links are clicked. None of this identifies you by name. We also keep standard server logs.

Registered buyers

If you register a buyer account, we hold the email address you signed up with, a display name, a username, and a securely hashed password. We never store your password in clear text. We hold a record that you confirmed you were 18 or over at the point of registration, and we hold the messages you send and receive on the site (see the Messages section below).

If you sign in on one Kinkmarket-listed storefront from your Kinkmarket account, we hold a single-use, short-lived signed token that the storefront uses to recognise you. The token expires within one hour and is single-use; it is not a long-lived tracker.

If you place orders with creators through Kinkmarket Shops while signed in, we hold a record of those orders: the creator, the items, the order status, and the order history shown in your account. This exists so you can track your purchases in one place and so creators can recognise returning buyers. We never sell this information and never use it for advertising. If you leave feedback on a creator, we hold the rating and any text you write, attributed to your display name.

Creators applying to be listed

We hold the contact and operational details a creator gives us during onboarding (such as their storefront domain, their display name, and a contact email), and any brand preferences you give us, such as colours and voice notes, and the listing picture you upload, kept with your application. We also hold a dated record that the operator vetted and approved the creator for listing. Vetting is currently a manual review based on the creator’s existing presence in the adult creator space. We also ask for a photo of an identity document to confirm you are 18 or over and that the application is genuinely yours. We use it for that single check only, never show it publicly, never use it for marketing, and hold it in secure, access-restricted storage. It is deleted as soon as your application is decided, whether accepted or declined; we do not keep identity documents on file. Declined applications, including any image you uploaded, are removed within 3 months of a decline unless you ask sooner.

Newsletter

If you sign up to the Kinkmarket newsletter, we hold the email address you give us and use it only to send you the newsletter: new creators, drops, and marketplace news. The lawful basis is your consent, and you can withdraw it at any time using the unsubscribe link in any email or by contacting us. We do not share newsletter addresses with anyone. If you unsubscribe, your address is removed from the list.

3. Messages

If you use the messaging system on Kinkmarket, we hold the messages you send and receive, the identifiers of the two parties to the conversation, and the timestamps. Messages are private to the two parties on the thread. We do not routinely read them. We will read specific threads where one party reports the other, where law enforcement makes a lawful request, or where there is reasonable cause to believe our Terms of use or Content policy have been breached.

Messages are kept for as long as your account is active. When you close your account, we remove your account and the messages tied to it within a reasonable period. We may retain messages for longer where the law requires, or where they are needed to deal with an ongoing dispute, abuse report, or legal claim.

4. How we use what we collect, and for how long

The age confirmation cookie is used so you are not asked to confirm your age repeatedly. The anonymous session identifier and click records are used to understand which listings receive traffic; they are not tied to an identifiable person.

Buyer account data is used to let you sign in, send messages, and move between creator storefronts. We keep it for as long as your account is active. You can close your account at any time by emailing [email protected].

Order records are kept while your account is active and are removed with your account when you close it, except where a record must be retained to deal with a dispute or as the law requires. Feedback you have published may remain on the creator’s profile in anonymised form after you close your account, or can be removed entirely on request.

Creator vetting records are kept for as long as the creator is listed, plus a reasonable period afterwards for accountability.

5. Legal basis

We rely on our legitimate interests to run the site, to keep anonymous analytics, to operate buyer accounts and the messaging system, and to confirm that the creators we list are adults and are who they say they are. Where you give us information by registering an account, the lawful basis is performance of our contract with you in providing the account, and to operate buyer order tracking and feedback.

6. Cookies

Kinkmarket uses only the cookies it needs to function. These include:

• An age-confirmation cookie that records that you have confirmed you are 18 or over;
• A session cookie that keeps you signed in, if you have an account;
• A short-lived security cookie used to prevent form-tampering (a CSRF token);
• A short-lived signed token, used only at the moment you cross from Kinkmarket to a creator’s own storefront, so the storefront can recognise your Kinkmarket account.

We do not use advertising cookies. We do not use third-party tracking cookies. We do not sell behavioural data.

7. Sharing your data

We do not sell your data, and we do not share personal data with third parties for marketing. We may disclose information where we are required to by law, for example in response to a lawful request from law enforcement or from a regulator with jurisdiction over the site.

8. Storing your data

Data is held securely and kept only as long as needed for the purpose it was collected. Data is processed in the United Kingdom.

9. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to data portability where it applies. To exercise any of these rights, email [email protected]. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.

11. Signing in with Google

You can choose to sign in to Kinkmarket with your Google account instead of a password. This section explains what we receive from Google, what we do with it, who else sees it, and how to have it removed. If you never use the Continue with Google button, none of this section applies to you.

What Google user data we access

We ask Google for three basic permissions, named openid, email and profile. From those we receive your Google account identifier, which is the number Google uses to refer to you, your email address and whether Google has confirmed it is yours, your name as it appears on your Google account, and a link to your Google profile picture if you have one.

We do not ask for, and cannot see, your Gmail, your contacts, your calendar, your Google Drive files, your photos, or anything else in your Google account.

How we use it

For one purpose only: to create your Kinkmarket account or recognise you when you come back, and to sign you in. We keep the Google account identifier so we can still recognise you if you change your email address later, and we keep your email address and name as your account details. We do not store your Google profile picture.

We do not use Google user data for advertising, for analytics, for building a profile of you, for training any machine learning or AI model, or for anything beyond providing and improving the sign-in itself.

Who we share it with

Nobody. We do not sell, rent, transfer or disclose Google user data to any third party. It is not passed to advertisers, to data brokers, or to analytics providers. It stays on our own servers and is used only to let you in.

How we protect it

The exchange with Google happens over an encrypted connection directly between our server and Google, and what we keep is held under the protections described in section 8.

How long we keep it, and how to remove it

We keep the connection for as long as your account exists. You can disconnect Google at any time from your account settings, or by emailing [email protected]. Disconnecting removes the connection and the stored Google account identifier and leaves the rest of your account working normally. If you close your account, the Google connection is deleted with everything else, as described in section 4.

12. Contact

Any question or request about your data can be sent to [email protected].