Version 2.1.0 · Effective 2026-08-17

Privacy Policy

**Controller / operator:** Papa's Package LLC (Dover, Delaware) **Product / brand:** Papa's Package **Site:** https://www.papaspackage.com **Version:** 2.1.0 **Effective date:** 2026-08-17

This Policy describes how Papa's Package LLC collects, uses, shares, and protects personal information when you use the Service.

1. Who we are

Papa's Package LLC ("we," "us"), a Delaware limited liability company based in Dover, Delaware, owns and operates the Papa's Package Service (https://www.papaspackage.com). Contact methods for privacy requests are published on the website.

2. Scope

This Policy applies to personal information processed through the Service. It does not cover third-party sites or services that we do not control, even if linked from the Service.

3. Information we collect

3.1 You provide

Account data: email, password (hashed by our auth provider), username, display name, bio, avatar/cover images
Profile and creator settings
User Content: posts, captions, comments, messages, media files, reports, block lists
Legal acceptance records: document type, version, content hash, timestamp, user id
Support communications you send us
Payment-related details you submit to us or our processors (we do not store full card numbers when a PCI-compliant processor handles cards)

3.2 Collected automatically

Device and browser type, language, approximate location derived from IP
Log data: IP address, access times, pages/features used, referring URLs, error diagnostics
Cookies and similar technologies (including age-gate cookies and session cookies)
Product analytics events (if enabled)

3.3 From third parties

Payment processors (payment status, last4/brand if provided, customer ids, dispute information)
Auth/infrastructure providers (session metadata)
Identity or age-verification vendors if we enable them
Safety hash-matching services (Microsoft PhotoDNA receives cryptographic hashes of certain uploaded images, not the images themselves, to compare against known child-sexual-abuse material)
Public blockchain data if you connect wallets (public addresses and on-chain activity are public by design)

The Service is designed for adult content. Media and messages you choose to upload may be sensitive. Do not upload content about others without rights and consents.

4. How we use information

We use information to:

Provide, operate, secure, and improve the Service
Authenticate users and maintain sessions
Display feeds, profiles, messages, and notifications
Process subscriptions, unlocks, tips, promotions, and related customer support
Enforce Terms, process blocks and reports, investigate abuse and fraud
Comply with law, respond to lawful requests, and protect rights and safety
Communicate service-related notices (security, policy changes, transactional email)
With consent or as otherwise permitted, send product updates or marketing (you may opt out of non-essential marketing)

5. Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on bases such as: contract performance; legitimate interests (security, product improvement, fraud prevention—balanced against your rights); consent (where required); and legal obligation.

We may share information with:

**Service providers / subprocessors** that help us operate the Service, currently including: Vercel (hosting); Supabase (authentication, database, and default object storage); Cloudflare R2 (optional media storage); Amazon SES (transactional email); Sentry (error diagnostics); Upstash (optional rate-limiting and jobs); PostHog (optional product analytics if enabled); Microsoft PhotoDNA (CSAM hash matching); CCBill (fan payments); Epoch (designated backup payment processor, if enabled); Paxum and other payout rails a creator selects (creator disbursements); and National Center for Missing & Exploited Children (NCMEC) when we submit legally required or appropriate reports
**Other users**, according to your settings and the nature of the feature (public posts are public; messages are visible to participants; profile fields you set are visible as designed)
**Professional advisors** (lawyers, accountants) under confidentiality
**Authorities** when required by law or to protect safety and rights, including law enforcement and NCMEC as described in our compliance policies
**Business transfers** (merger, acquisition, financing, sale of assets)—information may transfer as part of the transaction subject to ongoing protections

We do not sell personal information for money. We do not currently "share" personal information for cross-context behavioral advertising as those terms are defined under California law. If that changes, we will provide required notices and opt-outs.

7. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA/UK.

8. Retention

We retain information as long as needed to provide the Service, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Backups may persist for a limited period after deletion. Legal acceptance and financial records may be kept longer where required.

9. Security

We implement technical and organizational measures appropriate to the risk (access controls, encryption in transit where configured, least-privilege keys). No method of transmission or storage is 100% secure. You are responsible for securing your devices and passwords.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to withdraw consent.

10.1 How to exercise rights

Contact us via the published privacy contact channel. We may need to verify your identity. You may also have the right to complain to a supervisory authority.

10.2 Account tools

You may update certain profile fields in Settings, block users, and control some notifications. You may request account deletion subject to legal retention needs and outstanding payment/fraud investigations.

10.3 Cookies

You can control cookies through browser settings. Disabling cookies may break login, age gates, or sessions.

10.4 Marketing

You can opt out of non-essential marketing emails via unsubscribe links or by contacting us.

11. California privacy notice (summary)

If you are a California resident, you may have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of sale or sharing. We will not discriminate against you for exercising rights. Submit requests to legal@papaspackage.com or hello@papaspackage.com. Categories of information we collect generally include identifiers, customer records, commercial information, internet or electronic activity, audio/visual user-generated content, and (for creators who submit them) government-ID images and tax identifiers as described above. Sensitive information is used only to operate the Service, verify age/identity where required, prevent abuse, and comply with law. We do not currently sell or share personal information as defined by the CCPA/CPRA.

12. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a minor has used the Service, contact us and we will take appropriate steps.

13. User content and public visibility

Content you set to public may be visible worldwide, indexed, or reshared outside our control once displayed. Paid or restricted content may still be accessed by users who unlock it. Do not post personal data of others without a lawful basis and consent where required.

14. Automated decision-making

We may use automated systems for spam, fraud, ranking, and abuse detection. These systems may affect visibility of content or accounts. You may contact us to request human review where required by law.

15. Changes to this Policy

We may update this Policy and will revise the version and effective date. Material changes may require re-acceptance in the product or prominent notice.

16. Contact

**Papa's Package LLC** Dover, Delaware, United States

Privacy requests and questions: legal@papaspackage.com or hello@papaspackage.com, or the contact methods published on https://www.papaspackage.com.

**End of Privacy Policy**

Version 2.1.0 · Effective 2026-08-17

Privacy Policy

**Controller / operator:** Papa's Package LLC (Dover, Delaware) **Product / brand:** Papa's Package **Site:** https://www.papaspackage.com **Version:** 2.1.0 **Effective date:** 2026-08-17

This Policy describes how Papa's Package LLC collects, uses, shares, and protects personal information when you use the Service.

1. Who we are

2. Scope

This Policy applies to personal information processed through the Service. It does not cover third-party sites or services that we do not control, even if linked from the Service.

3. Information we collect

3.1 You provide

Account data: email, password (hashed by our auth provider), username, display name, bio, avatar/cover images
Profile and creator settings
User Content: posts, captions, comments, messages, media files, reports, block lists
Legal acceptance records: document type, version, content hash, timestamp, user id
Support communications you send us
Payment-related details you submit to us or our processors (we do not store full card numbers when a PCI-compliant processor handles cards)

3.2 Collected automatically

Device and browser type, language, approximate location derived from IP
Log data: IP address, access times, pages/features used, referring URLs, error diagnostics
Cookies and similar technologies (including age-gate cookies and session cookies)
Product analytics events (if enabled)

3.3 From third parties

Payment processors (payment status, last4/brand if provided, customer ids, dispute information)
Auth/infrastructure providers (session metadata)
Identity or age-verification vendors if we enable them
Safety hash-matching services (Microsoft PhotoDNA receives cryptographic hashes of certain uploaded images, not the images themselves, to compare against known child-sexual-abuse material)
Public blockchain data if you connect wallets (public addresses and on-chain activity are public by design)

The Service is designed for adult content. Media and messages you choose to upload may be sensitive. Do not upload content about others without rights and consents.

4. How we use information

We use information to:

Provide, operate, secure, and improve the Service
Authenticate users and maintain sessions
Display feeds, profiles, messages, and notifications
Process subscriptions, unlocks, tips, promotions, and related customer support
Enforce Terms, process blocks and reports, investigate abuse and fraud
Comply with law, respond to lawful requests, and protect rights and safety
Communicate service-related notices (security, policy changes, transactional email)
With consent or as otherwise permitted, send product updates or marketing (you may opt out of non-essential marketing)

5. Legal bases (EEA/UK users)

We may share information with:

**Service providers / subprocessors** that help us operate the Service, currently including: Vercel (hosting); Supabase (authentication, database, and default object storage); Cloudflare R2 (optional media storage); Amazon SES (transactional email); Sentry (error diagnostics); Upstash (optional rate-limiting and jobs); PostHog (optional product analytics if enabled); Microsoft PhotoDNA (CSAM hash matching); CCBill (fan payments); Epoch (designated backup payment processor, if enabled); Paxum and other payout rails a creator selects (creator disbursements); and National Center for Missing & Exploited Children (NCMEC) when we submit legally required or appropriate reports
**Other users**, according to your settings and the nature of the feature (public posts are public; messages are visible to participants; profile fields you set are visible as designed)
**Professional advisors** (lawyers, accountants) under confidentiality
**Authorities** when required by law or to protect safety and rights, including law enforcement and NCMEC as described in our compliance policies
**Business transfers** (merger, acquisition, financing, sale of assets)—information may transfer as part of the transaction subject to ongoing protections

7. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA/UK.

8. Retention

9. Security

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to withdraw consent.

10.1 How to exercise rights

Contact us via the published privacy contact channel. We may need to verify your identity. You may also have the right to complain to a supervisory authority.

10.2 Account tools

10.3 Cookies

You can control cookies through browser settings. Disabling cookies may break login, age gates, or sessions.

10.4 Marketing

You can opt out of non-essential marketing emails via unsubscribe links or by contacting us.

11. California privacy notice (summary)

12. Children

13. User content and public visibility

14. Automated decision-making

15. Changes to this Policy

We may update this Policy and will revise the version and effective date. Material changes may require re-acceptance in the product or prominent notice.

16. Contact

**Papa's Package LLC** Dover, Delaware, United States

Privacy requests and questions: legal@papaspackage.com or hello@papaspackage.com, or the contact methods published on https://www.papaspackage.com.

**End of Privacy Policy**

Privacy Policy

1. Who we are

2. Scope

3. Information we collect

3.1 You provide

3.2 Collected automatically

3.3 From third parties

3.4 Sensitive / adult-related data

4. How we use information

5. Legal bases (EEA/UK users)

6. How we share information

7. International transfers

8. Retention

9. Security

10. Your rights and choices

10.1 How to exercise rights

10.2 Account tools

10.3 Cookies

10.4 Marketing

11. California privacy notice (summary)

12. Children

13. User content and public visibility

14. Automated decision-making

15. Changes to this Policy

16. Contact

Privacy Policy

1. Who we are

2. Scope

3. Information we collect

3.1 You provide

3.2 Collected automatically

3.3 From third parties

3.4 Sensitive / adult-related data

4. How we use information

5. Legal bases (EEA/UK users)

6. How we share information

7. International transfers

8. Retention

9. Security

10. Your rights and choices

10.1 How to exercise rights

10.2 Account tools

10.3 Cookies

10.4 Marketing

11. California privacy notice (summary)

12. Children

13. User content and public visibility

14. Automated decision-making

15. Changes to this Policy

16. Contact