Data Protection Notice

Privacy & Cookie Policy

Last Updated: 1 November 2026 | Last Reviewed by Counsel: 1 November 2026

1. Data Controller Overview

The data controller responsible for personal data processed through this website is Sutra Media Global Ltd., registered in the Republic of Cyprus (European Union) (Company No. HE 419823), with offices at Arch. Makariou III Ave 155, Proteas House, 5th Floor, 3026 Limassol, Cyprus. For all inquiries regarding data protection, contact our Data Protection Officer at privacy@sutraweb.tech.

2. Data Minimization & Sensitive Data Safeguards

Because this website hosts adult entertainment media, we recognize that browsing history on our platform is highly sensitive. We enforce strict data minimization:

No Sale of Personal Data: We do not sell, rent, or trade user personal information or browsing records to third-party ad brokers or data aggregators.
Age Verification Privacy: Where statutory age verification is legally mandated, verification is conducted by certified third-party providers. We receive and store ONLY a cryptographic pass/fail verification token. We NEVER receive or store copies of your government ID or biometric scans.
No Invasive Tracking Pixels: We do not deploy retargeting pixels (e.g. Meta Pixel) that transmit adult site visitation data to social media platforms.

3. Categories of Data Processed

Account Data: User identifiers, email addresses, and session authentication tokens managed via our authentication provider (Clerk).
Technical & Network Data: IP address (used transiently for geo-location compliance, DDoS mitigation, and rate limiting), browser user-agent, operating system, and request timestamps.
Compliance State: An encrypted HTTP-only cookie indicating completion of the 18+ age gate consent.

4. Cookies & Local Storage

We only deploy strictly essential cookies required to operate and secure the platform:

Cookie Name	Category	Duration	Purpose
age_gate_verified	Strictly Necessary	30 Days	Stores 18+ age verification confirmation to prevent repeated gate prompts.
__client_uat / __session	Strictly Necessary	Session	Maintains signed-in user session security via Clerk.

5. Data Retention & International Transfers

Technical server logs are retained for a maximum of 30 days for cybersecurity and anti-abuse purposes before automatic purging. In accordance with GDPR Article 46, any international transfers of personal data to cloud infrastructure providers outside the EEA are governed by standard contractual clauses (SCCs) ensuring an equivalent standard of protection.

6. Your Rights

Under GDPR, UK GDPR, and applicable privacy laws, you possess the right to access, rectify, or erase your personal data, restrict or object to processing, and request data portability. To exercise these rights, submit a written request to privacy@sutraweb.tech. You also retain the right to lodge a complaint with the Cyprus Office of the Commissioner for Personal Data Protection.