Last updated: July 28, 2026
This Privacy Policy explains what personal information EyeCandyVids collects, why we collect it, who we share it with, how long we keep it, and the rights available to you. It applies to https://eyecandyvids.com and to the accounts, purchases, subscriptions, and creator tools offered through it.
Adults only. EyeCandyVids contains sexually explicit adult material and is intended solely for adults aged 18 and over. The service is not directed to minors, and no person under 18 may register an account, purchase content, or appear in content published on the Site.
EyeCandyVids is operated by Exipher Ventures LLC, a Wyoming limited liability company with a registered address at 30 N Gould St Ste N, Sheridan, WY 82801, United States. Business operations are conducted from California, and the service is offered to customers located in the United States. In this policy, "we," "us," and "our" mean Exipher Ventures LLC, and "you" means any visitor, registered buyer, subscriber, or content creator.
This policy covers information we collect through the Site, your account, your purchases and payouts, and your communications with us. It does not cover the independent practices of the third-party providers listed in Section 7, each of which handles information under its own policies, and it does not cover any off-platform arrangement you make with a creator or another user. Your use of the Site is governed by our Terms of Use.
This summary is for convenience and does not replace the detail that follows.
When you register we collect a username and an email address. Authentication is handled by Google Firebase Authentication; your password is set with and held by that provider, and we never receive or store it. We also store account preferences and settings, such as playback and display preferences, content filters, notification choices, and any profile text or avatar you add. If you contact us, we collect your message and any attachments.
Access is gated by a third-party age-assurance provider, AgeChecked (also referred to as AgeAware), integrated at the DNS level and configured in "verify all" mode, so visitors are routed through the provider's verification flow before Site access is granted rather than only on selected pages or user paths. Verification is enforced where state law requires age verification for access to material harmful to minors, and we may apply it more broadly.
From the provider we receive only a pass, fail, or verified-status result, with a status token or session reference and a timestamp. We do not receive, view, or store the identity documents, images, or government records you submit to the provider. That material is collected and controlled by the age-assurance provider in its own right, as the controller of that data, under its own privacy policy and retention schedule. To access, correct, or delete what you submitted for verification, contact the provider rather than us. Our Verification page describes how the gate works.
All content is uploaded by verified creators. Before a creator may publish, and on an ongoing basis afterward, we collect and hold: government-issued photo identification and recorded date of birth for the creator and every performer appearing in the content; signed performer consent forms, model releases, and authorizations to distribute; records required under 18 U.S.C. §§2257 and 2257A and the implementing regulations, as described in our §2257 Compliance Statement; business and tax information needed for payouts, including legal name, address, and tax forms; and correspondence about verification, moderation decisions, and appeals.
This material is held under stricter controls than ordinary account data. It is stored separately from public profile data, access is limited to the small number of personnel with a specific compliance or payout need, access is logged, and it is disclosed outside the company only to a competent authority making a lawful request, to our legal advisers, or as otherwise required by law. Creator obligations are set out in the Content Creator Agreement.
The Site accepts cryptocurrency only, processed by NOWPayments. When you buy credits we receive from the processor and store: the invoice or order identifier, the processor-assigned payment identifier, the amount invoiced in United States dollars, the asset and network used, the amount received, the on-chain transaction hash, the wallet addresses involved, the number of confirmations, and the payment status. We do not collect or store your seed phrase, private keys, or exchange credentials, and we never take custody of your wallet.
Blockchain data is public and permanent. Cryptocurrency transactions are recorded on public distributed ledgers that we neither operate nor control. Wallet addresses, amounts, timestamps, and transaction hashes are visible to anyone and, depending on the asset and your own wallet history, may be linkable to you by third parties. On-chain records cannot be altered, redacted, or deleted by us, by NOWPayments, or by anyone else, and a request to delete your personal information cannot remove them from the blockchain.
Creator payouts are processed through MassPay. To pay a creator we transmit the identifying and payout-destination information the provider requires, and we receive back payout status, reference identifiers, and amounts. MassPay may also collect identity, tax, and beneficiary information directly from creators under its own terms, to meet its own compliance obligations. We retain payout records for accounting, tax, and audit purposes.
We automatically collect: IP address; user agent, browser, and operating system version; approximate country and region inferred from IP address; request timestamps; pages and clips viewed; searches run on the Site; previews watched; purchase and unlock history; credit balance and ledger entries; subscription status; referring and exit URLs; and technical events such as error codes, playback quality, and rate-limit and security events. Cloudflare, which sits in front of the Site, also processes request metadata for content delivery, denial-of-service mitigation, and web application firewall purposes.
We may receive information about you from our service providers (a verification result, a payment status, a payout confirmation, or a fraud signal), from rights holders and complainants who submit notices under our DMCA Policy or through Report Abuse, and from law enforcement or other authorities in the course of a lawful request.
We use cookies, local storage, and similar technologies in four categories:
You can control cookies in your browser settings, including blocking or deleting them, and you can use private browsing. Blocking essential cookies will stop the age gate from recording that you passed verification and will prevent you from signing in or completing a purchase, so the Site will not function. We do not use cookies for behavioral advertising.
We do not use your personal information to build advertising profiles, and we do not use creator verification records for any purpose other than compliance, payouts, enforcement, and legal defense.
As a business operating in the United States and serving United States customers, we process personal information because it is necessary to perform the agreement you enter when you register and purchase; because we have a legal obligation to do so, most notably age verification and §2257 recordkeeping; because we have a legitimate business interest in security, fraud prevention, moderation, and service improvement that is not outweighed by your interests; and, where an activity calls for it, because you consented. Where consent is the basis, you may withdraw it at any time, although withdrawing consent to essential processing means we can no longer provide the service.
We share personal information with service providers who process it on our behalf, under contract, for the limited purposes below and not for their own independent purposes, except where a provider necessarily acts in its own right (as the age-assurance provider does for verification documents, and as the payment and payout providers do for their own compliance obligations).
| Provider | Role | Information involved |
|---|---|---|
| NOWPayments | Cryptocurrency payment processing for credit purchases | Invoice and payment identifiers, amounts, asset and network, wallet addresses, transaction hashes, payment status |
| MassPay | Creator payouts | Creator identity and payout destination details, amounts, status and reference identifiers, tax-related information |
| AgeChecked / AgeAware | Age assurance and verification gate | Session reference and result token. Identity documents are submitted to and held by the provider, not by us |
| Cloudflare | Content delivery, DDoS mitigation, web application firewall, DNS | Request metadata including IP address, user agent, timestamps, requested URLs, security events |
| Amazon Web Services | Hosting, compute, database, and media storage | Service data at rest and in transit in the hosting environment, including account records, media files, and verification records |
| Amazon Simple Email Service (AWS) | Transactional and service email delivery | Email address, message content, delivery and bounce status |
| Google Firebase (Google LLC) | Account authentication and push notifications | Authentication identifier, email address, sign-in metadata, device notification token |
| Legal, accounting, and compliance advisers | Legal advice, tax and accounting, compliance review | Records relevant to a specific matter, including transaction and verification records where necessary |
We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising, as those terms are used in the California Consumer Privacy Act as amended by the California Privacy Rights Act. We have not sold or shared personal information for those purposes in the preceding twelve months. The Site carries no advertising pixel, retargeting tag, advertising software development kit, affiliate tracker, or third-party analytics tag that discloses user-level data. We will update this policy before adding one.
We may disclose personal information when we believe in good faith that disclosure is required or permitted by law, including in response to a subpoena, court order, search warrant, preservation request, or other lawful process; to cooperate with a law enforcement or regulatory investigation; to establish, exercise, or defend legal claims; to enforce our Terms of Use; or to protect the rights, property, or safety of our users, our performers, our company, or the public. Reports of suspected child sexual abuse material are referred to the National Center for Missing & Exploited Children and to law enforcement, and the associated material and records are preserved rather than deleted. Where legally permitted, we will attempt to notify an affected user of a legal demand, unless notification is prohibited or would risk harm or destruction of evidence.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, or sale of all or part of our assets, personal information may be transferred as part of that transaction or reviewed in due diligence, subject to appropriate confidentiality protections. Any acquirer remains bound by the commitments in this policy for information transferred, unless and until you are notified of a change.
Your username, profile text, avatar, and any public comments you post are visible to other users, so do not put anything in those fields that you do not want to be public. Creators receive aggregate information about their sales and subscriber counts; we do not give creators buyers' email addresses or wallet details.
We keep personal information only as long as needed for the purpose it was collected, then delete or de-identify it, except where a longer period is required by law or is necessary to resolve a dispute or enforce our agreements.
Two exceptions apply in every case. First, material we suspect to be child sexual abuse material, with the account, upload, and transaction records associated with it, is preserved and reported as directed by law rather than deleted. Second, records subject to a legal hold, preservation request, subpoena, or pending claim are kept until the hold is lifted. On-chain transaction data cannot be deleted by us at all, as explained in Section 3.4.
We take reasonable and appropriate measures designed to protect personal information: encryption of data in transit between your browser and the Site; role-based access controls applying least privilege; individual named accounts for administrative access; separation of verification records from ordinary application data; restricted and logged internal access to identity and consent documentation; network-level protections from Cloudflare including denial-of-service mitigation and web application firewall rules; delegation of password handling to Google Firebase Authentication so that no password is stored on our systems; and routine patching and backup of the hosting environment.
We describe these measures honestly and claim nothing beyond them. We do not claim any certification, audit, attestation, insurance coverage, or trade-association membership, and we do not claim conformity with any particular security framework. No method of transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong, unique password, securing the email account tied to your account, and keeping your own wallet and devices secure. If you believe your account has been compromised, contact [email protected] immediately.
We operate the Site from the United States, and our hosting and storage providers process data in the United States. Our content delivery, security, payment, payout, and age-assurance providers operate globally and may process data in, or route requests through, facilities outside the United States as part of delivering their services. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from the law where you are located, and you consent to that transfer. The Site is intended for United States customers and is not offered where adult material is unlawful.
The Site is strictly for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. No person under 18 may register an account, purchase credits, subscribe, upload content, appear in content, or receive payouts. Access is gated by the age-assurance process in Section 3.2.
If we learn that a person under 18 has created an account, we will terminate it and delete the associated personal information, except where retention is required by law or for the preservation of evidence. If you believe a minor has registered, or that a minor appears in any content on the Site, report it immediately through Report Abuse or by emailing [email protected]. Reports involving a suspected minor are our highest priority, are escalated for immediate review, and are referred to the National Center for Missing & Exploited Children and to law enforcement where appropriate.
This section applies to California residents and uses the terms defined in the California Consumer Privacy Act as amended by the California Privacy Rights Act. It supplements the rest of this policy.
| Statutory category | Collected | Examples |
|---|---|---|
| Identifiers | Yes | Username, email address, IP address, account identifier, wallet address |
| Customer records information | Yes | Creator legal name and address, payout details, tax form information |
| Protected classification characteristics | Limited | Age or date of birth and age-verification status, for legal compliance only |
| Commercial information | Yes | Credit purchases, clip unlocks, subscription history, ledger entries |
| Biometric information | No | Not collected. Any facial age estimation offered in the age-assurance flow is performed by the provider, not by us |
| Internet or other network activity | Yes | Pages and clips viewed, searches, referring URLs, device and browser data, security events |
| Geolocation data | Coarse only | Country and region inferred from IP address. We do not collect precise geolocation |
| Audio, electronic, visual, or similar information | Yes, for creators | Uploaded video and images, identity document images, signed consent forms |
| Professional or employment information | Limited | Studio or business details supplied by creators |
| Education information | No | Not collected |
| Inferences | Limited | Content preferences inferred from viewing and purchase history, used to organize the Site for you |
| Sensitive personal information | Yes, limited | Government identifier information in creator and performer verification records; account log-in credentials; contents of your communications with us. Sex-life or sexual-orientation inferences may arise from viewing history and are treated as sensitive |
The sources of this information, the business purposes for which we use it, and the categories of recipients are described in Sections 3, 5, and 7. We use sensitive personal information only for purposes that carry no right to limit, namely providing the service you requested, meeting legal obligations including age verification and §2257 recordkeeping, security and fraud prevention, and defending legal claims. We do not use or disclose sensitive personal information to infer characteristics about you.
Email [email protected] with the subject line "Privacy Request," stating which right you are exercising, and send it from the email address on your account where possible. Email is currently the only intake channel for privacy requests.
To protect your privacy we must verify that you are the person the information relates to. We normally do this by confirming control of the account email address and, for requests involving purchase records, by asking you to confirm non-public account details such as the approximate registration date, a recent transaction identifier, or your credit balance. For requests concerning sensitive personal information or specific pieces of personal information we may apply a higher standard. We will not ask you to send a government identification document to verify a routine account request, and we will not use verification information for any other purpose. If we cannot verify you, we will say why and, where appropriate, treat a deletion request as a request to opt out instead.
You may use an authorized agent to submit a request on your behalf. The agent must provide written, signed permission from you or a valid power of attorney, and we may contact you directly to confirm the authorization and verify your identity. We may deny a request from an agent who does not provide proof of authorization.
We will acknowledge your request within ten business days and respond substantively within forty-five calendar days of receipt. Where reasonably necessary we may extend by a further forty-five days, for ninety days in total, and will notify you of the extension and the reason. Access requests cover the twelve months preceding the request unless you ask for a longer lookback and we can provide it. We do not charge for a request unless it is manifestly unfounded or excessive, in which case we will explain the basis for any fee or for declining to act.
Business operations for the Site are conducted from California, and California residents are among our customers. Whether and to what extent the statute applies to Exipher Ventures LLC depends on revenue and data-volume thresholds and on the treatment of an out-of-state entity operating from California. We honor the rights above as a matter of practice regardless of whether those thresholds are met.
Residents of other states with comprehensive consumer privacy laws may have comparable rights, including to confirm whether we process their personal data, access a copy, correct inaccuracies, delete it, obtain it in a portable format, and opt out of targeted advertising, sale, and certain profiling. Because we do not conduct targeted advertising, do not sell personal data, and do not carry out profiling that produces legal or similarly significant effects, those opt-out rights have limited practical application here. We extend the request process in Section 12.3 to residents of every United States state. If we deny your request you may appeal by replying to our decision with the word "Appeal" and a brief explanation; we will respond within the period your state's law requires and tell you how to contact your state attorney general if you remain dissatisfied. Several state laws also require consent before processing sensitive data, and we treat verification records and viewing history accordingly. We review this section as further state statutes take effect and update it where a state requires a specific disclosure.
Most browsers offer a "Do Not Track" setting. There is no common industry standard for interpreting that signal and we do not currently respond to it; because we do not track users across third-party websites for advertising, the setting has no practical effect here. We recognize the Global Privacy Control signal as a valid opt-out of sale and sharing where a browser or extension transmits it. Since we neither sell nor share personal information, there is presently nothing for that signal to withdraw, but we will honor it if our practices change. You retain full control over cookies through your browser, as described in Section 4.
We may update this Privacy Policy to reflect changes in our practices, our providers, or applicable law. When we do, we will revise the "Last updated" date above. If a change materially affects how we handle personal information, we will give additional notice before it takes effect by posting a prominent notice on the Site, displaying an in-product notice, or emailing the address on your account. Continued use of the Site after the effective date is acceptance of the revised policy. Please review this page periodically; we will provide a prior version on request.
To ask about this policy, exercise a privacy right, or raise a concern about how we handle personal information, use the details below. For content complaints and urgent safety reports use Report Abuse; for copyright notices use our DMCA Policy; for anything else see Contact Us.
Exipher Ventures LLC
Attn: Privacy
30 N Gould St Ste N
Sheridan, WY 82801
United States
Email: [email protected]
Subject line for privacy requests: Privacy Request
Site: https://eyecandyvids.com