Privacy statement

Draft pending legal and payment partner review.

1. Who we are. ByRequest LLC, a limited liability company under the laws of Delaware, United States, is the controller for the data described here. Contact: privacy@byrequest.me. Our data protection officer can be reached at the same address.

2. What others see. Your username, avatar, and for creators the profile details they choose to show. Never your name, email or location.

3. Sensitive data. Requests, deals, chats and content can reveal something about your sex life. We process this only with your explicit consent (GDPR art. 9(2)(a)), given at sign up, and only to run the service. You withdraw it by deleting your account.

4. Age check for buyers. Our verification partner checks that you are 18 or older. We receive only the result and the date. We do not receive or keep your ID, name or date of birth from this check.

5. Identity verification for creators. A specialised provider checks the ID document, that it belongs to the person (for example with a live selfie) and the minimum age. We keep the result, a reference, and the legal name, date of birth and country in encrypted form. We do not store ID scans or biometric data ourselves.

6. Tax details of creators. EU rules (DAC7) require us to report sellers' details and earnings once a year to the tax authority of their country. We keep these details encrypted and use them only for that report.

7. Payments. Card and bank details go to the payment partner. We keep references, amounts and statuses for bookkeeping.

8. Messages. Chats are end to end encrypted. ByRequest cannot read them. A warning about contact details runs only on your device. If you report a chat, you choose what to share.

9. Watermarks. Every view in the vault carries your username visibly and an invisible mark, to trace leaks back to an account. This is in the interest of creators and of everyone who appears.

10. Retention. Encrypted chats are deleted 12 months after a deal ends, notifications after 12 months, contact details of a closed report after 12 months. Payment, tax and verification records are kept for the period the law requires. Reports and decisions are kept as long as needed for safety and legal claims.

11. Your rights. Access, a copy of your data (Settings, Download your data), correction, deletion (Settings, Delete your account), restriction and objection. You can complain to the data protection authority: in Belgium the Gegevensbeschermingsautoriteit, in the Netherlands the Autoriteit Persoonsgegevens.

12. No sale of data. We do not sell personal data. Marketing messages only with separate, optional consent, which you can turn off at any time.

Version 2026-11-draft-4 · published 2026-10-28 · SHA-256 9df0076a1461711f1f423fb8497c5840432d83c19adf4f8825b69bf831cd8925 · draft pending legal and payment partner review

Other versions: 2026-11-draft-32026-11-draft-22026-11-draft-1