Legal

Privacy Policy

Draft — last generated Aug 4, 2026

⚠

Attorney review required before publishing. Privacy obligations vary by jurisdiction (e.g. CCPA in California, GDPR if you have EU members) — have this reviewed against where your actual members are located before it goes live.

1. What We Collect

Category	Examples
Account info	Email address, username, password (hashed)
Age self-attestation	The date of birth and 18+ confirmation you provide at signup. BOYSTAGE does not currently use a third-party identity verification provider, and does not collect or store ID documents.
Payment info	Handled entirely by our payment processor; we store a subscription/token reference, never your full card number
Usage data	Content viewed, login timestamps, device/browser type, IP address
Communications	Messages sent through the platform's messaging feature, support requests

2. How We Use It

To provide and maintain your account and subscription
To confirm the age self-attestation required at signup
To process payments and prevent fraud
To deliver content through access-controlled, time-limited links tied to your account
To respond to support requests
To meet legal and record-keeping obligations, including 18 U.S.C. §2257 where applicable to performer records (not member data)

3. Who We Share It With

We share data only with the third parties necessary to operate the platform: our payment processor, our hosting/CDN provider, and, if legally compelled, law enforcement. We do not currently use a third-party age/identity verification provider. We do not sell member data to advertisers or data brokers — this platform does not run third-party ads.

4. Billing Discretion

Charges appear on your statement under the discreet billing descriptor shown on the checkout page at the time you subscribe, not this platform's name, handled by our payment processor.

5. Data Retention

Account and subscription data is retained for as long as your account is active, plus a limited period after closure for legal, tax, and fraud-prevention purposes.

6. Your Rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal data, or to object to certain processing. Contact us using the details below to make a request. [Placeholder — attorney should confirm specific rights language required for your member base's jurisdictions, e.g. CCPA/GDPR.]

7. Security

We use industry-standard measures — encryption in transit, access-controlled storage, and restricted internal access to sensitive records — to protect your data. No system is completely secure, and we encourage strong, unique passwords and enabling two-factor authentication where available.

8. Cookies

We use cookies necessary for login sessions and basic site functionality. We do not use third-party advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated effective date.

10. Contact

Questions about this policy or data requests can be directed to [privacy contact email placeholder].