Privacy Policy
Last updated: 26 September 2026
This Privacy Policy explains what personal data Musefap ("we", "us") collects when you use musefap.com, why we collect it and what rights you have. Musefap is intended for adults only.
1. Data we collect
When you create an account
- Your username, email address and password. Passwords are stored only as a one-way hash; we cannot read them.
- Whether and when you verified your email address.
When you use the site
- Creators you follow and videos or photos you bookmark (only if you are logged in).
- Your language choice.
- Technical data sent by your browser with every request: IP address, browser and device type, the page requested and the time. This is recorded in our server logs.
When you buy Premium
- The plan, amount, currency, payment status and invoice reference, plus transaction details such as the amount of cryptocurrency received.
- We never receive or store card details. Payments are made in cryptocurrency.
When you contact us
- What you enter in the contact form: your name (optional), email address, message and any links, plus your IP address and browser type, which help us deal with abuse of the form.
2. How we use it
| Purpose | Legal basis |
|---|---|
| Providing your account, follows, bookmarks and Premium | Performance of our contract with you |
| Sending account emails (email verification, password reset, payment confirmation) | Performance of our contract with you |
| Keeping the site secure, preventing abuse and fixing errors | Our legitimate interests |
| Understanding how the site is used | Our legitimate interests |
| Answering messages, copyright notices and removal requests | Our legitimate interests and legal obligations |
| Keeping payment records | Legal obligations |
We do not sell your personal data and we do not use it for advertising.
3. Cookies and local storage
| Name | What it does | How long |
|---|---|---|
| musefap-session | Keeps you logged in and remembers your session. Only set when you log in or use a form. | 2 hours of inactivity |
| XSRF-TOKEN | Protects forms against cross-site request forgery. | 2 hours |
| mz_auth | Tells our servers you may be logged in, so you are not shown a cached page meant for visitors. Contains no personal data. | 4 hours |
| _ga, _ga_* | Used for analytics, to count visits and measure how the site is used. | Up to 2 years |
We also keep a few display preferences in your browser's local storage (for example whether the sidebar is collapsed). They never leave your device. You can block or delete cookies in your browser settings; the site may not work properly without the session cookie.
4. How long we keep data
- Account data: until you ask us to delete your account.
- Server logs: 14 days.
- Backups: up to 6 months, after which they are deleted automatically.
- Payment records: as long as we need them for accounting and legal obligations.
- Contact messages: as long as needed to deal with the request and any follow-up.
5. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. To use any of these rights, including deleting your account, send a request through our contact form using the email address linked to your account. We answer within one month. You can also complain to your local data protection authority.
6. Minors
Musefap is not for anyone under 18. We do not knowingly collect data from minors. If we learn that an account belongs to a minor, we close it and delete its data.
7. Security
All connections to Musefap use HTTPS, passwords are hashed, and access to our systems and backups is restricted. No system is perfectly secure, but we work to protect your data and will act promptly on any breach.
8. Changes
We may update this policy. The date at the top of this page shows when it last changed.
9. Contact
Questions about privacy can be sent through our contact form.