1. Information we collect
Account information. Email address, display name, date of birth, and password (hashed). For creators: legal name and government ID, used solely for age and identity verification.
Payment information. Card details are collected and processed by our PCI-DSS certified payment provider. We store only the card brand, last 4 digits, and expiration.
Usage data. Pages viewed, creators followed, tips sent, and chat metadata (timestamps, not content of private DMs).
Device data. IP address, browser type, device identifiers, and approximate location (country/region) for fraud prevention and geo-restrictions.
2. How we use information
To operate the service, process payments, prevent fraud and abuse, comply with legal obligations (including age verification and AML), and improve product quality. We do not sell personal information.
3. Sharing
We share information only with: (a) service providers acting on our behalf (payment, identity, hosting, customer support); (b) law enforcement when required by valid legal process; (c) successors in a corporate transaction. Creators receive your display name and tip amounts — never your email, real name, or card details.
4. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, and to object to certain processing. To exercise these rights email privacy@vrdaddy.com. We verify identity before responding.
California residents: see our CCPA notice. EU/UK residents: our legal basis is consent, contract performance, and legitimate interests as relevant.
5. Retention
Account data is retained while your account is active and for up to 24 months after closure for fraud and legal compliance. Verification documents are deleted within 30 days of successful verification.
6. Security
We use TLS in transit, encryption at rest, and least-privilege access controls. No system is perfectly secure — promptly notify us at security@vrdaddy.com if you suspect a vulnerability.
7. Children
VRDADDY is strictly 18+. We do not knowingly collect information from anyone under 18. Suspected underage accounts are terminated immediately.
8. Changes
We will post material changes here and notify you by email at least 14 days before they take effect.