Version 1.1. Written to be read, and to describe what the software actually does.
1. Who is responsible
Eroamora LLC, trading as Eroamora, registered at New York, NY 10001, United States, is the controller of the personal data described here. Privacy questions and requests: eroamora.com@gmail.com.
2. The principle
This platform exists for people whose privacy matters more than most. So the rule throughout is: if we do not need it, we do not keep it; if we must keep it, we keep as little as possible, encrypted or hashed, for as short a time as possible.
3. Visitors
Age affirmation
When you pass the age gate we record the moment, the age you affirmed, the page you were entering, the site you were heading to, and a one-way hash of your network address — a fingerprint that lets us recognise the same address again but cannot be turned back into it. We keep this record for 7 years because it is evidence that we operate lawfully. A cookie remembers your affirmation on your device for 30 days.
Enquiries
If you write to a Creator through her contact form we store your name, email address, any phone number and your message encrypted, readable only by her and by no one at Eroamora. We keep a one-way hash of your email address and network address so that she can see whether she has heard from you before and so that abuse can be recognised. Enquiries are kept for up to two years, or until she deletes them, whichever is sooner. Her replies are sent from the platform, so her personal address never reaches you and yours never reaches her mailbox.
Reports
If you report content we store the report, your name and contact details encrypted, and a hash of your network address, for as long as needed to act on it and to defend any resulting claim.
What we do not collect from visitors
No analytics cookies. No advertising or tracking pixels. No third-party scripts. Our fonts come from a provider that sets no cookies and logs no addresses. Traffic statistics are daily totals — views, the host a visit came from (never the full address, which can carry a search term or an identifier), and the country reported by our content-delivery network. There is no per-visitor history because there is nothing that could build one.
4. Creators
We hold your name, working name, email address, password (hashed), the content you publish, your enquiries and replies, your attestations, and an audit trail of significant actions on your account (each with a hashed address). Contact details you list on your site are stored encrypted. Media is stored with a cloud provider in the United States; private media is reachable only through short-lived signed links.
You can export everything you have given us — content, enquiries, replies, statistics — from your studio at any time, in an open format. You can delete individual items (recoverable for 30 days) or close your account entirely.
5. Retention, in one place
- Age affirmations: 7 years.
- Enquiries and replies: up to 2 years, or until deleted.
- Reports and compliance decisions: for as long as needed to act on and defend them.
- Deleted media: 30 days in recently-deleted, then removed.
- Routine security events: 90 days. Critical ones: until reviewed.
- Audit trail: for the life of the account and a reasonable period after.
- Backups: rolling, and pruned automatically.
6. Why we may lawfully do this
Performing our agreement with Creators; our legitimate interest in running a safe, lawful platform and in defending claims; our legal obligations, including age-verification and record-keeping laws; and, for the age gate and enquiries, your consent, which you may withdraw by not using the site.
7. Who we share with
Service providers who host, store and deliver the platform and its email, bound by contract to use data only on our instructions. Authorities where the law requires, or where a report concerns a possible crime against a person. Otherwise, no one. We do not sell personal data and never will.
8. Transfers
Our infrastructure is in the United States. Where data protection law requires safeguards for a transfer, we rely on our providers' standard contractual clauses.
9. Your rights
Depending on where you live you may have the right to access, correct, export, restrict or erase your personal data, to object to processing, and to complain to a supervisory authority. Creators can exercise most of these directly from their studio. Everyone else: eroamora.com@gmail.com. We answer within 30 days. Some records — age affirmations, compliance decisions, and reports — are evidence and are retained even after an erasure request, to the extent the law allows.
10. Security
Transport encryption everywhere; encryption at rest for everything that identifies a stranger; hashed passwords; two-step sign-in; sessions that end after 12 hours; signed links for private media; a content-security policy; and an audit trail. No system is perfect, and if a breach ever affects you we will tell you, and any authority we must, without undue delay.
11. Children
This platform is for adults only and is not directed at anyone under 18. If you believe a person under 18 has provided data or appears in content, report it immediately; it is treated as urgent.
12. Changes
A change that matters will be presented for acceptance when Creators next sign in. Visitors will find the current version, its number and its date on this page.