Privacy policy
This privacy policy explains what personal data the pornworkers.com service collects, why it is processed, who receives it, how long it is kept and how you can exercise your rights. Questions go to [email protected].
Who is responsible for your data
The controller of personal data processed through pornworkers.com (the “Service”) is the administrator of the pornworkers.com service. You can contact the administrator about any privacy matter, including requests to exercise your rights, at [email protected]. This is the only contact channel for privacy questions.
The Service is a job board and talent marketplace for the adult industry. It is intended only for adults aged 18 or older. We do not knowingly collect data from anyone under 18, and any account found to belong to a minor is closed and its data deleted, except where we must keep a record to report the matter to authorities.
Data we collect
We collect only what we need to run the Service.
- Account data. Email address, password (stored as a one-way hash), account type (worker or employer), sign-in codes and session records.
- Identity verification data. For workers: government ID images, legal name, date of birth and the result of the age and identity check. For employers: business documents, company name, business registration details, the company domain email used for verification and, for producers, a record-keeping statement.
- Profile data. Stage name, role, skills, experience, location or remote preference, availability, rates, languages, portfolio items and visibility and block list settings that you choose.
- Job and application data. Listings, castings, applications, shortlist notes, pipeline status and saved searches.
- Messages. Content of private messages exchanged on the platform and attachments you send.
- Billing data. Plan, billing period, invoices and the last digits and expiry of your card. Full card numbers are processed by our payment operator and never stored by us.
- Technical data. IP address, browser type, device information and server logs needed for security and abuse prevention.
- Support and reports. Emails you send to [email protected] and reports you file about listings, profiles or messages.
Special categories of data. Some profile information may reveal details about sex life or sexual orientation, for example the type of performing work you are open to. You provide this information voluntarily, and we process it only with your explicit consent, which you can withdraw by editing or deleting your profile.
Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, profiles, listings, applications and messaging | Performance of a contract, Art. 6(1)(b) |
| Verifying age (18+) and identity of workers and the business status of employers | Legal obligation, Art. 6(1)(c), and legitimate interest in keeping minors and fraudulent businesses off the Service, Art. 6(1)(f) |
| Processing subscriptions, invoices and tax records | Performance of a contract and legal obligation, Art. 6(1)(b) and (c) |
| Security, fraud and abuse prevention, handling reports | Legitimate interest, Art. 6(1)(f) |
| Sending service emails (sign-in codes, job alerts you set up, billing notices) | Performance of a contract, Art. 6(1)(b) |
| Processing voluntary sensitive profile details | Explicit consent, Art. 9(2)(a) |
| Establishing or defending legal claims and cooperating with authorities | Legal obligation and legitimate interest, Art. 6(1)(c) and (f) |
We do not sell personal data, do not share it for cross-context behavioural advertising and do not use it for automated decisions that produce legal effects, other than the automated part of the age and identity check, which a human reviews when the result is unclear.
Who receives your data
We share data only with service providers that help us run the Service, under written agreements that limit their use of the data to our instructions. Recipients are described by category:
- a hosting provider operating data centres in the EU and the US;
- a payment operator for adult businesses, which processes card payments and fraud checks;
- an email delivery provider, which sends service emails;
- an identity verification provider, which checks ID documents and age;
- professional advisers such as accountants and lawyers, where necessary;
- public authorities, where the law requires it, including reports of suspected exploitation of minors or trafficking.
Other users see only what the Service is designed to show them. Employers see the profile details and stage name a worker makes visible to them; workers see employer listings and company pages. ID documents are never shown to other users.
International transfers
Some recipients process data outside the European Economic Area, including in the United States. Where that happens, transfers rely on an adequacy decision of the European Commission or on the Standard Contractual Clauses, together with additional safeguards where needed. You can request information about these safeguards at [email protected].
How long we keep data
- Account and profile data: for as long as your account exists, and deleted within 30 days after you delete it.
- Identity verification data: the ID images are kept only as long as needed to complete and evidence the check and to meet legal obligations, then deleted; the verification result is kept while the account exists.
- Messages: while both accounts exist, then deleted together with the account data, unless needed for a pending report or legal claim.
- Billing and invoice records: for the period required by tax and accounting law, commonly five to seven years.
- Security logs: up to 12 months.
- Records of reports and removed accounts: as long as needed to prevent the same person from returning and to defend legal claims.
Your rights
Depending on where you live, you have the right to access your data, receive a copy in a portable format, correct it, delete it, restrict or object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing. Residents of the EU and UK may also lodge a complaint with their local data protection authority.
California residents have the right to know what personal information is collected, used and disclosed, to request deletion and correction, to limit the use of sensitive personal information and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined in California law. We will not discriminate against you for exercising any of these rights.
To exercise a right, write to [email protected] from the email address on your account. We may ask you to confirm your identity and will reply within one month (45 days for California requests), extendable where the law allows. Many settings, such as profile visibility, block lists and account deletion, can also be changed directly in your account.
Cookies and security
The Service uses only strictly necessary cookies (session, security token and preferences such as the age-gate confirmation). We use no analytics cookies, no advertising cookies and no tracking pixels. Details are in the cookie policy.
All traffic is encrypted in transit, access to identity data is restricted and logged, and passwords are stored as one-way hashes. More information is on our security page.
Changes to this policy
We may update this policy when the Service or the law changes. The current version is always published on this page. If a change materially affects how we use your data, we will notify account holders by email before it takes effect.