Haptiloom Team(以下称“我们”)运营 Haptiloom。本政策说明我们收集哪些数据、为何收集,以及你享有的权利。我们的设计原则是数据最小化:考虑到本产品类别的敏感性,最好的保护就是一开始就不收集。
| 类别 | 数据 | 目的 | 法律依据(GDPR) |
|---|---|---|---|
| 账号 | 邮箱、密码或 Passkey 凭证、年龄声明(出生日期)、国家信号 | 身份认证、年龄门槛、按地区提供功能 | 合同履行;法定义务 |
| 年龄验证(法律要求的地区) | 验证结论、验证方式、服务商参考号、时间戳——绝不保存身份证件或人脸图像,这些始终留在验证服务商处 | 法律合规(如英国《在线安全法》) | 法定义务 |
| 脚本请求 | 你提交的第三方视频页面链接、标题、描述、偏好与标签;悬赏积分数额 | 展示请求、供创作者接单、交付脚本 | 明确同意(第 9 条)——请求可能揭示你的性偏好,见 §3 |
| 脚本与曲线 | 你上传或创建的脚本(时间轴上的位置与强度数据,不含任何画面或声音) | 提供服务;交付给请求者;在你启用同步时跨设备同步 | 合同履行 |
| 积分台账 | 积分的获得、暂存与发放记录 | 运行请求悬赏机制、防止刷分与欺诈 | 合同履行;正当利益 |
| 设备元数据 | 设备型号、协议、能力档案,你为设备起的昵称,绑定时间戳 | 设备管理、兼容性支持 | 合同履行 |
| 订阅 | 订阅状态、权益记录、来自支付服务商的交易参考号——不含完整卡号 | 计费、权益发放、账务 | 合同履行;法定义务 |
| 支持 | 你发给我们的消息、工单号 | 客户支持 | 正当利益 |
| 技术 | 崩溃报告与运行指标,已脱敏剔除文件名、设备名、账号标识与媒体标题 | 可靠性与安全 | 正当利益 |
我们不收集:你的控制会话与强度流水(实时设备指令默认不记录、不存储);精确位置;通讯录;广告标识符。我们不投放任何第三方广告,绝不为广告目的出售或共享个人数据。
能够揭示你使用亲密设备类产品的数据,可能关涉你的性生活,因此按 GDPR 第 9 条特殊类别数据对待。我们仅在获得你明确同意后处理,且仅用于你主动使用的功能;在技术可行的范围内,我们把此类数据设计为留在你的设备上(例如播放历史默认仅存本地,除非你启用同步)。
我们不接收、不存储、也不处理你的视频文件。桌面端创作者工具在你的电脑上分析视频并生成脚本,上传到平台的只有脚本本身。发起脚本请求时,你提交的是第三方视频页面的链接与文字信息——我们不下载、不缓存该视频。请求内容可能揭示你的性偏好,因此我们仅在你明确同意后处理;请求会展示给平台上的创作者以便接单,但我们不会公开你的邮箱等账号信息。
账号数据:账号存续期间。脚本与曲线:直至你删除它们或删除账号。脚本请求:直至你撤回请求或删除账号。积分台账:账号存续期间。年龄验证结论:按适用法律要求。财务记录:法定保留期,字段最小化。支持工单:24 个月。脱敏后的运行日志:30 天。
我们仅与运营服务所必需的处理者共享数据——主机托管、存储、支付处理、邮件投递、崩溃上报,以及(法律要求时)年龄验证服务商:Hetzner Online GmbH(主机托管,数据中心位于芬兰)、Cloudflare, Inc.(内容分发与网络安全)、Stripe(支付处理);邮件投递、崩溃上报与年龄验证服务商会在启用前列于此处。每一家均受数据处理协议约束。跨境传输依据充分性认定或标准合同条款(SCC)进行。我们仅在合法法律程序下向主管机关披露数据,并在法律不禁止的前提下通知你。
依据你所在地区的法律(GDPR、英国 GDPR、CCPA/CPRA 及其他州法),你享有:访问、更正、删除、可携带、限制处理、反对处理,以及撤回同意的权利(撤回同意会停止将来的处理,不影响此前已合法进行的处理)。你可以在产品内、在我们的网页数据权利页面,或通过 [email protected] 行使权利。我们不会因你行使权利而区别对待你。你可以对我们的拒绝提出申诉,也可以向你所在地的监管机构投诉。
原则上我们不主动审查用户内容。若我们实际知悉用户提交或请求中链接的疑似儿童性虐待材料或其他违法内容,我们将移除相关请求与脚本、保全证据、向相关主管机关报告(适用时包括美国 NCMEC),并配合合法调查。举报通道见《版权、DMCA 与内容移除政策》。
你可以在产品内或在我们的公开删除页面删除账号(无需安装 App)。在线系统立即停用;主数据库、缓存、搜索索引、对象存储与处理者副本在 30 天内删除;备份按固定周期自然过期,且被排除在已删除数据的恢复范围之外(任何恢复操作都会重放删除墓碑)。极少量法律与财务记录按法律要求保留,其字段与期限均有文档记载。删除完成后会出具删除回执。
你可以在控制台的「账号」页面自行删除账号,也可以通过公开删除页 /delete-account.html 删除;删除完成时会向你出示删除回执。
传输中与静态存储均加密;最小权限访问控制,管理操作留有审计;密钥集中管理并定期轮换;日志红线(日志中不出现文件名、视频链接与标题、设备名或账号标识);漏洞报告请发送至 [email protected]。没有任何系统是绝对安全的;发生数据泄露时,我们将按法律要求通知你与监管机构。
本服务仅面向 18 岁以上的成年人。我们不会在知情的情况下收集未成年人的数据;一旦发现,我们会删除该数据并终止相应账号。
本站不使用广告 Cookie,也不运行任何分析统计。我们只使用严格必要的浏览器存储:保持你登录状态的会话令牌,以及保存在你本地浏览器中的语言与界面偏好。由于我们不设置任何分析或广告 Cookie,本站不显示 Cookie 同意横幅。若我们今后引入分析统计,会先征求你的同意;在写入任何此类存储之前,本节内容与横幅行为都会相应更新。
发生实质性变更时,我们会在产品内或通过邮件通知你;历史版本将归档留存。联系方式:[email protected] · 数据保护联系人 / 欧盟—英国代表:Haptiloom Team, [email protected]。
Haptiloom Team ("we") operates Haptiloom. This policy explains what we collect, why, and your rights. Our design principle is data minimization: given the sensitive nature of this product category, the best protection is not collecting data in the first place.
| Category | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account | Email, password/passkey credential, age declaration (date of birth), country signal | Authentication, age gating, regional feature availability | Contract; legal obligation |
| Age verification (where required by law) | Verification outcome, method, provider reference, timestamp — never identity documents or face images, which stay with the verification provider | Legal compliance (e.g., UK OSA) | Legal obligation |
| Script requests | The third-party video page link, title, description, preferences and tags you submit; the bounty amount in credits | Listing requests, letting creators pick them up, delivering scripts | Explicit consent (Art. 9) — requests may reveal your sexual preferences; see §3 |
| Scripts & Curves | Scripts you upload or create (position and intensity data on a timeline, with no images or audio) | Providing the service; delivery to requesters; sync across your devices if enabled | Contract |
| Credit ledger | Records of credits earned, held and released | Running request bounties; preventing farming and fraud | Contract; legitimate interests |
| Device metadata | Device model/protocol/capability profile, your nickname for it, binding timestamps | Device management, compatibility support | Contract |
| Subscription | Subscription state, entitlement records, transaction references from the payment provider — no full card numbers | Billing, entitlements, accounting | Contract; legal obligation |
| Support | Messages you send us, ticket number | Support | Legitimate interest |
| Technical | Crash reports and operational metrics, scrubbed of file names, device names, account identifiers, and media titles | Reliability and security | Legitimate interest |
We do not collect: your control sessions or intensity streams (real-time device commands are not logged or stored by default); precise location; contacts; advertising identifiers. We serve no third-party advertising and never sell or share personal data for advertising.
Data revealing use of an intimate-device product can relate to your sex life and is treated as special category data (GDPR Art. 9). We process it only with your explicit consent, only for the features you invoke, and we design features to keep such data on your device where possible (e.g., playback history is local-only unless you enable sync).
We do not receive, store or process your video files. The desktop Creator Tool analyzes videos on your own computer and generates scripts there; the only thing uploaded to the service is the script itself. When you post a script request, you submit a link to a third-party video page and some text — we do not download or cache that video. Because requests may reveal your sexual preferences, we process them only with your explicit consent; requests are shown to creators on the service so they can pick them up, but we never publish your email address or other account details.
Account data: life of the account. Scripts and Curves: until you delete them or your account. Script requests: until you withdraw them or delete your account. Credit ledger: life of the account. Age-verification outcomes: as required by applicable law. Financial records: statutory retention periods, minimized fields. Support tickets: 24 months. Scrubbed operational logs: 30 days.
We share data only with processors necessary to run the service — hosting, storage, payment processing, email delivery, crash reporting, and (where legally required) age-verification providers: Hetzner Online GmbH (hosting, data centre in Finland), Cloudflare, Inc. (content delivery and network security) and Stripe (payment processing); email delivery, crash reporting and age-verification providers will be listed here before they are used. Each is bound by a data processing agreement. International transfers rely on adequacy decisions or Standard Contractual Clauses. We disclose data to authorities only under valid legal process, and we notify you unless legally prohibited.
Depending on your region (GDPR, UK GDPR, CCPA/CPRA and other state laws): access, correction, deletion, portability, restriction, objection, and withdrawal of consent (withdrawal stops future processing, without affecting past lawful processing). Exercise rights in-product, at our web data-rights page, or via [email protected]. We do not discriminate for exercising rights. You may appeal a refusal; you may also complain to your supervisory authority.
We do not proactively review user content as a rule. If we obtain actual knowledge of apparent child sexual abuse material or other unlawful content submitted by users or linked from requests, we will remove the related requests and scripts, preserve evidence, report to the relevant authorities (including NCMEC where applicable), and cooperate with lawful investigations. See the Copyright, DMCA & Content Removal Policy for reporting channels.
Delete your account in-product or at our public deletion page (no app required). Active systems are disabled immediately; primary stores, caches, search, object storage, and processor copies are deleted within 30 days; backups age out on a fixed cycle and are excluded from restore of deleted data (deletion tombstones are replayed on any restore). Minimal legal/financial records are retained as required by law, with fields and periods documented. A deletion receipt is issued.
You can delete your account yourself from the console's Account page, or via the public deletion page at /delete-account.html; a deletion receipt is shown on completion.
Encryption in transit and at rest; least-privilege access with audited administrative actions; secrets management and rotation; logging red-lines (no file names, video links or titles, device names, or account identifiers in logs); vulnerability reporting at [email protected]. No system is perfectly secure; we will notify you and regulators of breaches as required by law.
The service is for adults 18+. We do not knowingly collect data from minors; if we learn we have, we delete it and terminate the account.
This site uses no advertising cookies and runs no analytics. We use only strictly necessary browser storage: a session token that keeps you signed in, and your language and interface preferences stored locally in your browser. Because we set no analytics or advertising cookies, we show no cookie consent banner. If we ever introduce analytics, we will ask for your consent first; this section and the banner behaviour will be updated before any such storage is set.
Material changes are notified in-product or by email; prior versions are archived. Contact: [email protected] · Data protection contact / EU–UK representative: Haptiloom Team, [email protected].