Privacy Policy

Last updated: September 30, 2026

1. Overview

This Privacy Policy explains how Citychat ("we", "us") collects, uses, and shares information when you visit the Site. We respect your privacy and do not require registration to browse.

2. Information We Collect

2.1 Information you provide voluntarily

• Reports and inquiries: when you contact us for content removal, abuse reports, or general inquiries, we retain your message and email.
• Favorites: stored in your browser's local storage; we do not receive them.

2.2 Information collected automatically

• Log data: IP address, browser type, referring URL, pages accessed, timestamps.
• Cookies: functional (age gate, session, preferences). See our Cookie Policy.
• Approximate geolocation derived from IP (country level) for content routing.

2.3 Third-party embedded content

When you view a live stream (embedded from Chaturbate, BongaCams, Stripchat, etc.) or click through to a third-party site, that third party may collect information according to their own privacy policy. We have no control over their practices.

3. How We Use Information

• Operate, secure, and improve the Site.
• Respond to your inquiries and legal notices.
• Prevent abuse, fraud, and unauthorized access.
• Comply with legal obligations, court orders, and lawful requests.
• Analyze usage patterns to improve content ranking and site performance.

4. Legal Bases (GDPR)

For visitors in the EEA/UK, we process personal data on the following bases:

• Legitimate interest: operating the Site, security, analytics.
• Consent: non-essential cookies, marketing (where applicable).
• Legal obligation: responding to law enforcement, DMCA, 2257.

5. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers: hosting, analytics, security (bound by confidentiality).
• Law enforcement: when required by law or to protect rights.
• Rights holders: DMCA counter-notice information as required.

6. Retention

Log data is retained for up to 90 days. Content-removal correspondence is kept for as long as required by applicable laws (typically 3-7 years). Analytics data is aggregated and retained indefinitely in anonymized form.

7. Security

We use HTTPS/TLS, security headers, rate-limiting, and access controls. No system is 100% secure; we cannot guarantee absolute security.

8. Your Rights

GDPR (EEA/UK residents)

You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact us to exercise these rights.

CCPA / CPRA (California residents)

You have the right to know what personal information we collect, delete personal information, opt out of "sale" or "sharing" (we do not sell), and non-discrimination for exercising these rights.

Other jurisdictions

You may have similar rights under Brazilian LGPD, Canadian PIPEDA, and other data-protection laws. Contact us to exercise them.

9. Do Not Track

We honor "Do Not Track" browser signals to the extent technically feasible. Third-party embedded content may not honor DNT.

10. Children

The Site is for adults 18+. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it immediately. Report suspected underage users to our abuse team.

11. International Transfers

Your information may be processed outside your country of residence. Where required, we implement Standard Contractual Clauses or equivalent safeguards.

12. Changes to This Policy

We may update this Policy. Material changes will be indicated by an updated "Last updated" date. Continued use constitutes acceptance.

13. Contact

For privacy questions, exercise of rights, or complaints, please see our contact page.