Legal

Privacy Policy

Effective: 2026-07-14. Last updated: 2026-09-27 (visit counting, section 4). We collect the minimum data necessary to operate the Platform and we tell you exactly what we do with it.

1. What we collect

Account data. Username, display name, email address, password (hashed, not stored in plaintext), date of birth confirmation.

Age data. Visitors confirm they are 18 or over; that answer and its date are kept in a cookie on your device. We do not use a third-party age-verification service today, and we hold no identity document for visitors. See the age page.

Model data. Government-issued ID for 2257 compliance, payout wallet addresses, payout history, broadcast content, chat logs.

Payment data. Cryptocurrency transaction IDs, wallet addresses, payment amounts. We do not have access to your private keys.

Usage data. Pages visited, features used, approximate location (country/city from IP), device type, browser. Used for product improvement and fraud prevention.

Content. Live broadcasts are not recorded: they are relayed to viewers and kept nowhere afterwards. Uploaded content (photos, clips, profile media) and chat messages stay until you delete them or the account is closed.

2. What we don't collect

We do not collect your real name unless you choose to provide it. We do not require a phone number. We do not require a home address. We do not store payment card numbers (we don't accept card payments). We do not sell your data to third parties.

3. How we use it

  • To operate the Platform and provide the services you request.
  • To verify age and identity (regulatory and trust obligations).
  • To process crypto payments and pay models.
  • To prevent fraud, abuse, and violations of our terms.
  • To send service notifications (security alerts, payment confirmations, your followed models going live).
  • To respond to legal requests where legally required.

4. Cookies and tracking

We use first-party cookies for one thing only: keeping you signed in. We set no advertising cookies and no tracking cookies.

Our visitor statistics are measured by our own software on our own servers, and they set no cookie at all. We count a visit using a one-way fingerprint calculated from your IP address and browser, mixed with a secret that changes every day. Your IP address and your full browser string are used to make that calculation and are then discarded — neither is ever stored. Because the secret rotates daily, the record of today’s visit cannot be matched to tomorrow’s. What remains is a count: pages viewed, country, rough device type. None of it identifies you, and none of it is ever combined with your account.

We also count visits with Umami, an open-source analytics tool that runs on our own server. It works the same way: no cookie, your IP address is not stored, and no outside company receives the data. It records the pages viewed, the site you came from, your country and city, and your browser and device type.

We do not use Google Analytics, Facebook Pixel, Google Ads, or any similar third-party surveillance tool. No outside company receives data about your visit. Photos of partner performers (see section 5) are fetched and served by our own servers for exactly that reason.

5. Third parties we share with

The following third parties process data on our behalf:

  • Cloud infrastructure — Hetzner (servers, in Germany) and Cloudflare (DNS). Uploads, including performers’ compliance documents, are stored on our own servers rather than with a storage provider.
  • Age and identity checks — none. A performer’s ID and selfie are reviewed by our own compliance admins, not sent to a third party. If that ever changes, this page will name the provider before it starts.
  • Crypto payment — our payment system is self-hosted and watch-only on our own infrastructure. No third-party payment processor sees your transaction.
  • Email delivery — our own mail server, for transactional email (verification, password reset, payment confirmations). No third-party email service holds your address, and we do not send marketing email without consent.

Partner performers. Alongside our own Mistresses, we may show dominant performers who are streaming on LiveJasmin, a separate partner site; they are not DominatrixCam performers. Their cards are always marked with an arrow (↗) and open on LiveJasmin. Their names and photos are fetched and relayed by our own servers, so browsing our pages sends LiveJasmin nothing about you. Only if you click one do you leave DominatrixCam: the link opens a new tab and passes through LiveJasmin’s affiliate tracking address (ctwmsg.com) on its way to the performer’s room. It carries our affiliate code, and our site sends no referrer, so all the partner learns from us is that you arrived through our affiliate link. From then on LiveJasmin’s own terms and privacy policy apply, and we earn a commission if you become their customer. We record which partner performer was clicked, when, from which of our pages and from which country — never who clicked it.

6. Data retention

  • Account data: while your account is active, plus 30 days after deletion (for recovery). After that, anonymized.
  • 2257 records: 7 years after last broadcast, per US federal requirement.
  • Payment records: 7 years for tax / audit purposes.
  • Broadcast recordings: 30 days post-broadcast, then deleted.
  • Chat logs: 90 days, then deleted.

7. Your rights

GDPR (EU / UK visitors). You have the right to access, correct, delete, restrict, port, and object to processing of your personal data, and to withdraw consent. Contact privacy@dominatrixcam.net to exercise these rights. We respond within 30 days.

CCPA (California visitors). You have the right to know what personal information we collect, to delete it, and to opt out of "sale" (we don't sell your data, so this is moot — but you have the right). Contact us to exercise.

All visitors. You can export your data (broadcast history, tribute history, profile) from your account settings at any time.

8. Security

We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest), strict access controls, and continuous monitoring. No system is perfectly secure — if you discover a vulnerability, please report it to security@dominatrixcam.net and we'll respond within 24 hours.

9. International transfers

We are based in the United States. By using the Platform, you understand that your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) for transfers from the EU/UK.

10. Children

The Platform is not directed at anyone under 18. We do not knowingly collect data from anyone under 18. If you believe we have collected data from a minor, contact us immediately at compliance@dominatrixcam.net and we will delete it within 24 hours.

11. Changes

We may update this policy from time to time. Material changes are announced via email at least 30 days before they take effect.

12. Contact

Privacy questions: privacy@dominatrixcam.net