Privacy Policy

1. Introduction & Scope

IslaFans LLC (“IslaFans,” “we,” “our,” or “us”), a Delaware limited liability company, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, platform, applications, and related services (collectively, the “Services”).

This Policy applies to all users of the Services, including visitors, registered fans, and verified creators. By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Policy, please discontinue use of the Services immediately.

This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, date of birth, username, and password (stored as a cryptographic hash — we never store your plaintext password).
• Profile information: display name, profile photo (avatar), biography, location, and other optional profile details you choose to share.
• Payment information: billing address, and the last four digits and type of your payment card. Full card numbers and CVVs are transmitted directly to and stored by Stripe, Inc. and are never held on IslaFans servers.
• Creator identity verification: government-issued photo ID and a real-time selfie, collected solely for identity verification purposes. This data is handled with heightened security controls.
• Content you upload: photographs, videos, audio, written posts, and other materials submitted to the platform.
• Communications: direct messages between creators and fans, support tickets, and other correspondence with IslaFans.
• Tax information: for creators, W-9 or W-8 forms and related tax identification data required for payment reporting.

2.2 Information Collected Automatically

• Usage data: pages visited, content viewed, features used, session duration, clicks, and other interaction data.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Log data: server logs including timestamps, access requests, and error information.
• Cookies and similar technologies: we use cookies, local storage, and similar technologies as described in our Cookie Policy.

2.3 Information from Third Parties

• Payment processors: Stripe may provide us with transaction identifiers, payment status, and fraud signals.
• Identity verification services: verification results and associated metadata from our third-party KYC/AML provider.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and operating the Services: creating and managing your account, enabling content sharing, processing payments, and delivering core platform features.
• Processing transactions: completing subscriptions, tips, pay-per-view purchases, and creator payouts.
• Communication: sending transactional emails (receipts, security alerts, account notices) and, with your consent, marketing communications and product updates. You may opt out of marketing emails at any time.
• Safety and fraud prevention: detecting, investigating, and preventing fraudulent transactions, abuse, and violations of our Terms of Service.
• Legal compliance: complying with applicable laws and regulations, including 18 U.S.C. § 2257 record-keeping, tax reporting, and responding to valid legal process.
• Analytics and improvement: understanding how users interact with the Services to improve performance, features, and user experience.
• Customer support: responding to your inquiries and resolving disputes.
• Personalization: tailoring your experience, including content recommendations and platform customizations.

We process your personal data on the following legal bases: (a) performance of a contract with you; (b) your consent, where applicable; (c) compliance with a legal obligation; and (d) our legitimate interests, where not overridden by your rights.

4. Information Sharing

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service providers: we share information with trusted third-party vendors who assist us in operating the Services, including:
  • Stripe, Inc. — payment processing
  • Cloudflare R2 / Amazon Web Services — cloud storage and content delivery
  • Email service providers — transactional and marketing email delivery
  • Identity verification providers — creator KYC/AML compliance
  • Analytics providers — aggregated, non-identified usage analytics
  These providers are contractually bound to use your data only as directed by IslaFans and in accordance with this Policy.
• Legal requirements: we may disclose information if required by law, court order, subpoena, or other valid legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of IslaFans, our users, or the public.
• Law enforcement: we will report suspected CSAM and other illegal content to the NCMEC and appropriate law enforcement authorities, as required by 18 U.S.C. § 2258A.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the platform before your information becomes subject to a different privacy policy.
• With your consent: we may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. When you close your account, we will delete or anonymize your personal information within 90 days, subject to the following exceptions:

• Legal holds: information subject to a pending legal proceeding, investigation, or regulatory requirement will be retained until the matter is resolved.
• 18 U.S.C. § 2257 records: age verification records for sexually explicit content are retained in accordance with the applicable statutory requirements (currently 7 years after the date the content was last offered for sale or distribution).
• Financial records: payment and transaction records are retained for at least 7 years to comply with tax and financial regulations.
• Safety records: records of account violations, bans, and related safety actions may be retained indefinitely to prevent circumvention of safety measures.

6. Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encryption of sensitive data at rest;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability scanning;
• PCI-DSS compliant payment processing through Stripe.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in harm to you, we will notify affected users in accordance with applicable law.

7. Children's Privacy

The Services are strictly for users 18 years of age or older. IslaFans does not knowingly collect, solicit, or use personal information from individuals under the age of 18. Our platform is designed with an age verification gate and requires date-of-birth confirmation at registration.

In compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, we do not knowingly collect personal information from children under 13 years of age. If we discover that we have inadvertently collected personal information from a person under 18, we will immediately delete that information and terminate the associated account.

If you believe we may have collected information from a minor, please contact us immediately at privacy@islafans.com.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know / Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the purposes for collection, and the categories of third parties with whom we share your information.

Right to Delete

You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (e.g., information needed to complete a transaction, detect security incidents, or comply with legal obligations).

Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

IslaFans does not sell or share your personal information with third parties for cross-context behavioral advertising. We will update this Policy if our practices change.

Right to Limit Use of Sensitive Personal Information

You have the right to direct us to limit the use and disclosure of sensitive personal information (such as government ID and financial information) to what is necessary to perform the Services or as otherwise permitted by law.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights.

How to Submit a Request

To submit a verifiable consumer request, email us at privacy@islafans.com with the subject line “California Privacy Request.” We will respond within 45 days of receiving a verifiable request. We may extend this period by an additional 45 days where reasonably necessary, with prior notice to you.

We may ask you to verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf by providing written authorization.

9. Your Choices & Rights

• Account deletion: you may delete your account at any time through your account settings. We will process your deletion within 90 days, subject to the retention exceptions described in Section 5.
• Email opt-out: you may unsubscribe from marketing emails by clicking the “Unsubscribe” link in any marketing email or by contacting us at privacy@islafans.com. Note that transactional emails (e.g., receipts, security alerts) cannot be opted out of while your account is active.
• Cookie preferences: you may manage your cookie preferences through our Cookie Consent banner or your browser settings. See our Cookie Policy for details.
• Data portability: you may request an export of your personal data by contacting privacy@islafans.com. We will provide your data in a machine-readable format within 45 days.
• Profile corrections: you may update most of your personal information directly through your account settings at any time.

10. International Transfers

IslaFans is based in the United States and our servers are located in the United States. If you access the Services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country or jurisdiction.

By using the Services, you consent to the transfer of your information to the United States and acknowledge that your information may be subject to disclosure under US law, including lawful requests by US government authorities.

11. Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal that transmits a preference not to be tracked across websites. IslaFans does not currently respond to DNT signals from browsers, as there is no uniform industry standard for how such signals should be interpreted.

We do not use cross-site tracking for advertising purposes. For more information on managing tracking technologies, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' advance notice via email to your registered address or through a prominent notice on the platform. Non-material changes may be made without prior notice, though we will update the “Last updated” date at the top of this Policy.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team:

This Privacy Policy was last updated on May 17, 2026. Prior versions are available upon request.