Privacy Policy

This Privacy Policy explains how SkillFans handles personal information when you visit the website, confirm the age gate, create or use an account, sign in through email magic link or Google OAuth, vote, earn Growth Points, unlock content, use invite codes, complete tasks, submit creator applications, upload content or metadata, report content, communicate with SkillFans, or use admin or moderation workflows where authorized.

For purposes of this Policy, SkillFans acts as the operator that determines the purposes and means of processing personal information for the service. If a registered operating entity, data protection officer, EU representative, or additional privacy contact is later appointed, SkillFans will update this Policy.

Privacy requests may be sent to legal@skillfans.org.

The categories of personal information SkillFans may collect depend on how you use the service.

• Account and authentication data, such as email address, user ID, OAuth identifiers, magic-link session records, display name, avatar, profile preferences, onboarding status, role assignments, and age-gate confirmation time.
• Product activity data, such as votes, daily vote counters, Growth Point ledger rows, unlock records, invite codes, referral relationships, daily task progress, task claims, creator follows or support history where supported, and feature interactions.
• Creator and upload data, such as creator applications, creator profile fields, AI workflow details, rights-holder information, file names, file type, media type, file size labels, captions, tags, visibility settings, review status, storage provider, storage references, thumbnails, preview metadata, and admin review notes.
• Report, safety, and moderation data, such as report target type, target ID, reason, details provided by the reporter, hashed reporter signal, review status, reviewer notes, risk events, enforcement actions, audit logs, and evidence needed to investigate abuse, rights, consent, or safety concerns.
• Device, browser, and log data, such as IP-derived network signals, user agent, timestamps, referring pages, cookies, browser storage, session identifiers, error logs, security logs, request logs, and provider logs generated by hosting, database, storage, authentication, or delivery services.
• Communications and support data, such as messages, legal notices, privacy requests, takedown requests, counter-notices, operational emails, and information submitted in forms.

SkillFans collects information directly from you when you submit it, automatically when you use the service, from authentication providers when you sign in, from infrastructure providers that process service logs, and from other users or reviewers when they submit reports, review notes, or safety information involving your account, creator profile, or content.

SkillFans may also receive information from public sources, rights holders, legal representatives, safety organizations, law enforcement, or service providers when necessary to investigate copyright, consent, safety, fraud, security, or legal issues.

SkillFans uses personal information for the following purposes:

• Provide, maintain, personalize, and improve the service, including accounts, authentication, sessions, age-gate state, feed browsing, voting, Growth Points, unlocks, invite codes, tasks, Creator Studio, and admin workflows.
• Enforce daily vote limits, calculate Growth Points, maintain append-only ledger records, activate referrals, process task claims, and prevent manipulation of launch metrics.
• Process creator applications, review uploaded metadata and media, publish approved assets, deliver eligible locked content through permission checks, and maintain signed private storage delivery.
• Receive, triage, investigate, and resolve reports, takedown requests, copyright notices, counter-notices, consent complaints, AI-labeling complaints, and safety escalations.
• Protect users, creators, reviewers, systems, providers, and the public from fraud, spam, unauthorized access, scraping, abuse, non-consensual content, minor-related harm, security incidents, and illegal conduct.
• Comply with legal obligations, preserve evidence, respond to lawful requests, enforce policies, defend legal claims, and maintain audit and moderation records.
• Communicate with you about account access, policy changes, reports, creator applications, review outcomes, security events, legal notices, and operational matters.

Where GDPR, UK GDPR, or similar data protection laws apply, SkillFans relies on one or more legal bases depending on the processing activity.

• Contract: to provide account access, authentication, votes, Growth Points, unlocks, creator tools, and other requested service features.
• Legitimate interests: to secure the service, prevent fraud, enforce rules, maintain audit logs, review content, improve the product, respond to reports, and protect users, creators, rights holders, and the public.
• Consent: where you voluntarily provide optional information, opt in to a feature, or where consent is required for cookies, communications, or other processing under applicable law.
• Legal obligation: to comply with copyright, privacy, safety, records, law-enforcement, tax, accounting, or other legal requirements.
• Vital interests or public-interest safety: where processing is necessary to address urgent safety risks, including suspected child sexual exploitation, threats, trafficking, extortion, or immediate harm.

SkillFans may use cookies, local storage, session storage, and similar technologies to keep you signed in, remember age-gate confirmation, route authentication callbacks, preserve onboarding state, prevent repeated prompts, detect abuse, protect sessions, maintain security, and operate core site functionality.

Some browser storage may be controlled by your browser settings. Disabling cookies or storage may break sign-in, age-gate, voting, reporting, or other service features.

SkillFans stores private media files in Cloudflare R2 or another private object-storage provider. Supabase may store related metadata, review status, permission relationships, storage provider, storage references, and unlock rules.

Locked content is intended to be delivered through server-side permission checks and short-lived signed URLs rather than public object URLs. SkillFans does not intend to publish raw private storage references to ordinary browsers, although no system can guarantee that every user will comply with access rules once content is lawfully delivered to them.

SkillFans may disclose personal information in the following circumstances:

• To service providers that host, authenticate, store, deliver, secure, monitor, analyze, email, or support the service, such as Supabase, Vercel, Cloudflare R2, Google OAuth, and similar providers.
• To reviewers, admins, contractors, and operational personnel who need access to operate moderation, safety, support, audit, creator review, or legal workflows.
• To rights holders, legal representatives, reporters, uploaders, or affected users where necessary to process takedown requests, counter-notices, disputes, safety reports, or legal claims.
• To law enforcement, regulators, courts, safety organizations, or emergency contacts when required by law or when SkillFans believes disclosure is necessary to prevent harm, report suspected child sexual exploitation, address non-consensual content, or protect rights and safety.
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or business transfer, subject to appropriate confidentiality and privacy protections where required.

SkillFans does not currently sell personal information as a data broker and does not currently operate a mature third-party targeted advertising system. If SkillFans later introduces advertising, cross-context behavioral advertising, data sales, or sharing that requires additional notice or opt-out rights, this Policy will be updated before or at the time those practices begin.

Where California privacy law applies and SkillFans is legally required to honor opt-out signals, SkillFans will provide appropriate methods to opt out of sale or sharing and will evaluate Global Privacy Control signals as required by applicable law.

SkillFans and its providers may process information in the United States and other countries where SkillFans, its contractors, or its service providers operate. These countries may have data protection laws different from those in your location.

Where GDPR, UK GDPR, or similar transfer rules apply, SkillFans will rely on appropriate transfer mechanisms where required, such as adequacy decisions, standard contractual clauses, provider data processing terms, consent, contract necessity, legal claims, or other permitted safeguards or derogations.

SkillFans retains personal information for as long as reasonably necessary to provide the service, maintain account and unlock state, preserve product ledgers, support creator review, process reports, resolve disputes, enforce policies, comply with law, prevent repeat abuse, protect safety, and maintain security and audit records.

Some records, including Growth Point ledger rows, vote records, risk events, review actions, audit logs, takedown records, safety reports, and enforcement records, may be retained after account closure or content removal because deletion could undermine fraud prevention, accounting, legal defense, safety investigations, or consistent policy enforcement.

When information is no longer needed, SkillFans will delete, de-identify, aggregate, or securely retain it according to operational and legal requirements.

SkillFans uses technical and organizational safeguards intended to reduce risk, including Supabase Row Level Security, service-role separation, private object storage, signed media delivery, access controls, audit logs, environment-variable separation, and operational review controls.

No online service can guarantee absolute security. You are responsible for keeping your email account, OAuth account, devices, browser sessions, and magic links secure. You should contact SkillFans promptly if you suspect unauthorized access or misuse.

Depending on where you live, you may have rights to access, know, correct, delete, restrict, object to, or receive a portable copy of certain personal information. You may also have the right to withdraw consent, opt out of sale or sharing, limit use of sensitive personal information, or complain to a data protection authority.

To exercise rights, contact legal@skillfans.org. SkillFans may need to verify your identity, account control, request authority, or relationship to the data before acting on a request. SkillFans may deny or limit requests where permitted by law, including where information is needed for security, safety, legal obligations, legal claims, fraud prevention, audit logs, or rights of others.

If GDPR, UK GDPR, or similar laws apply, your rights may include:

• Right to be informed about processing of your personal information.
• Right of access to personal information held about you.
• Right to rectification of inaccurate or incomplete information.
• Right to erasure where information is no longer needed, processing is unlawful, or another legal basis applies, subject to exceptions.
• Right to restriction of processing in specific cases.
• Right to data portability for information processed by automated means based on consent or contract.
• Right to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent where processing is based on consent.
• Right to lodge a complaint with a data protection authority.

If California privacy law or a similar U.S. state privacy law applies to SkillFans and to your information, you may have rights to know/access categories and specific pieces of personal information, delete personal information, correct inaccurate information, opt out of sale or sharing, limit use or disclosure of sensitive personal information, and receive non-discriminatory treatment for exercising privacy rights.

SkillFans does not currently claim that it meets every statutory threshold for every state privacy law. Where a law applies, SkillFans will honor applicable rights and exceptions. If SkillFans later becomes subject to additional state privacy obligations, this Policy will be updated to include any required notices and mechanisms.

SkillFans is not directed to children or teenagers and is only for adults 18 or older. SkillFans does not knowingly allow minors to use the service and does not knowingly collect personal information from minors for participation in the service.

If SkillFans learns that a minor has provided personal information or accessed the service, SkillFans may restrict the account, delete or limit information where appropriate, preserve evidence where legally required or necessary for safety, and take steps to prevent continued access.

If you believe a minor is using SkillFans or that content involves child sexual exploitation, report it immediately through the site and, where appropriate, to NCMEC CyberTipline at report.cybertip.org or local emergency services.

SkillFans may use automated or rules-based systems to support security, abuse prevention, rate limits, vote limits, unlock checks, session integrity, storage access, and queue prioritization. These systems are intended to support operations and safety. Material moderation, enforcement, or takedown outcomes may involve human review where appropriate and feasible.

SkillFans may update this Privacy Policy as the service, providers, legal obligations, data practices, or operating model change. The updated date at the top of this page identifies the latest version. If changes materially affect your rights or how SkillFans processes personal information, SkillFans will provide additional notice where required by law.