Privacy

When you register: your username, email address, a one-way hash of your password (never the password itself), the moment you confirmed you are 18 or older, and the IP address you registered from.

When you are signed in: a session record with an expiry date, the IP address and browser you signed in with, and the moment you were last seen.

When you post or upload: the content itself, the time, and the IP address it came from. For videos also the original filename and the declaration you made about age, consent and source.

While you use the site: which videos you watched and how far you got, what you saved as a favorite, which collections you made and follow, and what you read on the forum.

Email and password are there so you can sign in and recover your account. IP addresses are kept because they are the only way to act against someone who returns after a ban, and because they may be needed if content has to be reported to the authorities.

Watch history and saved items exist to make the site usable — to resume where you left off, and to find things again.

The upload declaration is kept because a platform that hosts adult content has to be able to show, afterwards, what the uploader stated about age and consent.

• Only you: your email address, your watch history, your private collections, and — unless you turn it on in settings — your favorites.
• Other members: your username, profile, forum posts, comments, uploaded videos, public collections, and your favorites if you made them public.
• Moderators: everything above, plus reports about you, warnings, your account status, and — for admins — IP addresses and upload declarations.

Private messages are private between the participants. Moderators do not read them as a matter of course, but can be shown a message that is reported to them.

One cookie: circhub_session, which keeps you signed in. It contains a random token, nothing about you, and expires after 30 days. There are no other cookies, and no consent banner because there is nothing to consent to.

• Sessions: 30 days after last use, then deleted.
• Account data: until you ask for the account to be deleted.
• Upload declarations and the moderation log: [period] after the content is removed, because they are the record of what was decided and why.
• Backups: [period].

If you are in the EU or the UK, you can ask for a copy of what is stored about you, ask for it to be corrected, ask for it to be deleted, and object to how it is used. Message staff or write to [email address].

Some things cannot be deleted on request: the moderation log, and records tied to a ban. Without those, a ban means nothing.

Interest in this subject is sensitive personal data. That is exactly why favorites are private by default, why there is no tracking, and why the site is kept out of search engines.

Passwords are hashed with Argon2id and are not recoverable, not even by the operator. Session tokens are stored hashed, so a copy of the database does not let anyone sign in as you. Videos are served through short-lived signed links rather than public file paths.

It is a hobby project on a single server. That means no guarantee of perfect security — assume that anything you upload could, in the worst case, be exposed, and decide accordingly.

On a server in [country], hosted by [hosting provider]. Nothing is sent anywhere else.