Skip to content

Privacy Policy

Last updated: 25 July 2026

This policy explains what personal data [LEGAL ENTITY NAME] collects when you use AfriAmateur, why we collect it, and what rights you have over it.

1. Data we collect

  • Visitors: IP address, browser and device information, pages viewed, and your 18+ acknowledgement.
  • Creators: email address, hashed password, display name, government-issued identification, verification selfie, and signed consent records including the timestamp and IP address of signature.
  • Cookies: a session cookie for signed-in users, and a local flag recording your age acknowledgement.

2. Identification documents

Identity documents and verification selfies are collected solely to verify that creators are of legal age and are who they claim to be, and to satisfy our record-keeping obligations. They are stored separately from public content, are never published, and are never shown to other users. Access is restricted to staff performing verification.

3. Why we process data

  • To verify age and identity before allowing anyone to publish (legal obligation and legitimate interest in preventing illegal content).
  • To maintain consent records evidencing that every depicted person agreed to publication.
  • To operate, secure, and improve the Site.
  • To respond to legal requests and content-removal demands.

4. Retention

Identity and consent records are retained for as long as the associated content is published and for a further period afterwards as required by applicable record-keeping law. Visitor logs are retained for a limited operational period and then deleted or aggregated.

5. Sharing

We do not sell personal data. We share it only with infrastructure providers that process data on our behalf (hosting, database, video delivery), and with law enforcement where we are legally compelled or where we believe content may depict a minor or a non-consenting person.

6. Your rights

Depending on where you live you may have the right to access, correct, delete, or export your personal data, to object to processing, and to lodge a complaint with a supervisory authority. Anyone depicted in content on the Site may withdraw consent and demand removal at any time. Exercise any of these rights by contacting [PRIVACY EMAIL].

7. Security

Passwords are stored using bcrypt hashing. Sessions are held server-side and referenced by an HTTP-only cookie. Identification documents are stored in access-restricted private storage.

8. Contact

Data controller: [LEGAL ENTITY NAME, REGISTERED ADDRESS]
Contact: [PRIVACY EMAIL]