Version 2.0.1 · Effective 2026-07-28

Privacy Policy

**Product:** Papa's Package **Site:** https://www.papaspackage.com **Version:** 2.0.1 **Effective date:** 2026-07-28

This Policy describes how we collect, use, share, and protect personal information. It is an operational template, not legal advice. Customize with counsel for GDPR, UK GDPR, CCPA/CPRA, and other regimes that apply to you.

1. Who we are

Papa's Package ("we," "us") operates the Service. Contact methods for privacy requests are published on the website.

2. Scope

This Policy applies to personal information processed through the Service. It does not cover third-party sites or services that we do not control, even if linked from the Service.

3. Information we collect

3.1 You provide

  • Account data: email, password (hashed by our auth provider), username, display name, bio, avatar/cover images
  • Profile and creator settings
  • User Content: posts, captions, comments, messages, media files, reports, block lists
  • Legal acceptance records: document type, version, content hash, timestamp, user id
  • Support communications you send us
  • Payment-related details you submit to us or our processors (we do not store full card numbers when a PCI-compliant processor handles cards)

3.2 Collected automatically

  • Device and browser type, language, approximate location derived from IP
  • Log data: IP address, access times, pages/features used, referring URLs, error diagnostics
  • Cookies and similar technologies (including age-gate cookies and session cookies)
  • Product analytics events (if enabled)

3.3 From third parties

  • Payment processors (payment status, last4/brand if provided, customer ids, dispute information)
  • Auth/infrastructure providers (session metadata)
  • Identity or age-verification vendors if we enable them
  • Public blockchain data if you connect wallets (public addresses and on-chain activity are public by design)

3.4 Sensitive / adult-related data

The Service is designed for adult content. Media and messages you choose to upload may be sensitive. Do not upload content about others without rights and consents.

4. How we use information

We use information to:

  • Provide, operate, secure, and improve the Service
  • Authenticate users and maintain sessions
  • Display feeds, profiles, messages, and notifications
  • Process subscriptions, unlocks, tips, promotions, and related customer support
  • Enforce Terms, process blocks and reports, investigate abuse and fraud
  • Comply with law, respond to lawful requests, and protect rights and safety
  • Communicate service-related notices (security, policy changes, transactional email)
  • With consent or as otherwise permitted, send product updates or marketing (you may opt out of non-essential marketing)

5. Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on bases such as: contract performance; legitimate interests (security, product improvement, fraud prevention—balanced against your rights); consent (where required); and legal obligation.

6. How we share information

We may share information with:

  • **Service providers** (hosting, database, storage, email, analytics, customer support, age verification, payment processing such as CCBill or Epoch, cloud infrastructure)
  • **Other users**, according to your settings and the nature of the feature (public posts are public; messages are visible to participants; profile fields you set are visible as designed)
  • **Professional advisors** (lawyers, accountants) under confidentiality
  • **Authorities** when required by law or to protect safety and rights
  • **Business transfers** (merger, acquisition, financing, sale of assets)—information may transfer as part of the transaction subject to ongoing protections

We do not sell personal information for money as a primary business model. If we engage in "sharing" for cross-context behavioral advertising as defined under California law, we will provide required notices and opt-outs where applicable.

7. International transfers

We may process data in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers from the EEA/UK.

8. Retention

We retain information as long as needed to provide the Service, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Backups may persist for a limited period after deletion. Legal acceptance and financial records may be kept longer where required.

9. Security

We implement technical and organizational measures appropriate to the risk (access controls, encryption in transit where configured, least-privilege keys). No method of transmission or storage is 100% secure. You are responsible for securing your devices and passwords.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to withdraw consent.

10.1 How to exercise rights

Contact us via the published privacy contact channel. We may need to verify your identity. You may also have the right to complain to a supervisory authority.

10.2 Account tools

You may update certain profile fields in Settings, block users, and control some notifications. You may request account deletion subject to legal retention needs and outstanding payment/fraud investigations.

10.3 Cookies

You can control cookies through browser settings. Disabling cookies may break login, age gates, or sessions.

10.4 Marketing

You can opt out of non-essential marketing emails via unsubscribe links or by contacting us.

11. California privacy notice (summary)

If you are a California resident, you may have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of certain sharing. We will not discriminate against you for exercising rights. Submit requests via our published contact methods. Categories of information we collect generally include identifiers, customer records, commercial information, internet activity, and user-generated content, as described above.

12. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a minor has used the Service, contact us and we will take appropriate steps.

13. User content and public visibility

Content you set to public may be visible worldwide, indexed, or reshared outside our control once displayed. Paid or restricted content may still be accessed by users who unlock it. Do not post personal data of others without a lawful basis and consent where required.

14. Automated decision-making

We may use automated systems for spam, fraud, ranking, and abuse detection. These systems may affect visibility of content or accounts. You may contact us to request human review where required by law.

15. Changes to this Policy

We may update this Policy and will revise the version and effective date. Material changes may require re-acceptance in the product or prominent notice.

16. Contact

Privacy requests and questions: use the contact methods published on https://www.papaspackage.com.

**End of Privacy Policy**