Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Ganso Gordo Producciones LLC ("we", "us", "our") collects, uses, stores, shares, and protects personal information of users of the LustLink website at https://lust-link.net and any related services (the "Platform"). It is incorporated into our Terms of Service. By using the Platform, you agree to the practices described here.

1. Who We Are (Data Controller)

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA / CPRA), the data controller is:

Ganso Gordo Producciones LLC
732 S 6th St Ste R
Las Vegas, NV 89101
United States

Privacy inquiries: legal@lust-link.net

2. Information We Collect

2.1 Information you provide

• Account data: display name, email address, password (stored as a salted bcrypt hash — we never see your plaintext password), date of birth, gender, pronouns, account role (viewer or creator), preferred language.
• Profile data: avatar, bio, social links, gallery preferences.
• Creator verification (KYC): government-issued photo ID image, live selfie biometric image, full legal name, signed Creator Agreement. Required by 18 U.S.C. § 2257 and our payment processors.
• Co-Performer verification: for each guest a Creator brings on stream — legal name, DOB, government ID, selfie. Stored against the verifying Creator's account.
• Payment data: we do not store full credit-card numbers. Payment processors (Epoch, NOWPayments, or other) handle card and bank data directly. We retain only the last 4 digits, brand, expiration month/year, billing country, transaction IDs, and bill descriptors. For crypto payments we store wallet addresses and on-chain transaction hashes.
• Tax data: for Creator payouts crossing US $600 in a calendar year — W-9 (US persons) or W-8BEN/BEN-E (non-US).
• Content you upload: images, videos, descriptions, tags, prices, and any metadata you attach.
• Communications: in-app chat messages, private show messages, support tickets, feedback submissions, DMCA notices.

2.2 Information collected automatically

• Device & connection: IP address (truncated for analytics, full for fraud / 2257 audit), user-agent, device type, browser, OS, language, approximate geolocation derived from IP (country and region only — never precise coordinates), referrer URL.
• Usage: pages visited, content viewed, search queries, clicks, sessions, time-on-page, error and crash reports.
• Cookies and similar technologies: see Section 6 below.

2.3 Information from third parties

• Payment processors share transaction outcomes, chargeback notices, fraud signals, and refund confirmations.
• Identity-verification providers (if used) return match/no-match results and risk scores on submitted IDs.
• Federated content sources (e.g., Mastodon public timelines) — we capture only the publicly-published metadata required for attribution (post URL, author handle, instance, original post ID).

3. How We Use Your Information

• Provide and operate the Platform (account creation, content delivery, payments, live streaming, tokens, payouts);
• Verify age and identity, in compliance with 18 U.S.C. § 2257 and applicable record-keeping laws;
• Prevent fraud, abuse, harassment, illegal content, and unauthorized account access;
• Process payments, prevent chargebacks, and resolve disputes;
• Send transactional notifications (security alerts, billing receipts, account changes, takedown notices). These cannot be opted out of while you have an active account;
• Send announcements, product updates, and marketing — only when you have opted in. You can change these preferences at any time in Settings → Email Preferences;
• Comply with law, court orders, lawful government requests, and our legal obligations;
• Improve the Platform (aggregated, de-identified analytics).

4. Legal Bases (EU/UK Users)

For users in the EU, UK, EEA, or Switzerland, our legal bases under Article 6 GDPR are:

• Contract: account, content delivery, payments, payouts (Art. 6(1)(b));
• Legal obligation: KYC, 2257 record-keeping, tax forms, law-enforcement responses (Art. 6(1)(c));
• Legitimate interests: fraud prevention, abuse moderation, product analytics, security (Art. 6(1)(f));
• Consent: marketing emails, optional non-essential cookies, AI-content opt-in features (Art. 6(1)(a)). You may withdraw consent at any time.

For sensitive data (e.g., the fact that you are a user of an adult platform, identity documents), our basis is your explicit consent (Art. 9(2)(a) GDPR) and/or substantial public interest under Member State law.

5. How We Share Your Information

We do not sell or rent personal information. We share only when needed:

• Service providers / processors, under written contracts that bind them to our security standards: hosting (Kubernetes cloud infrastructure), database (MongoDB Atlas-compatible cluster), email delivery (Resend), live-streaming infrastructure (Cloudflare Stream), payment processors (Epoch, NOWPayments, and bank rails such as Zelle / Mexican bank transfer where applicable), identity-verification vendors, and analytics.
• Other users, only as you choose: your public profile, content you publish, your display name in chat or as a tipper. We never expose your email or full legal name to other users.
• Law enforcement / lawful requests: when required by valid subpoena, court order, or law, or in good faith to protect rights, property, or safety. We publish an annual transparency summary of such requests.
• NCMEC and child-protection partners: we report suspected child sexual abuse material (CSAM) immediately and provide all required information to the National Center for Missing & Exploited Children.
• Successor entities: if Ganso Gordo Producciones LLC is acquired, merged, restructured, or sells substantially all of its assets, your information may transfer as part of that transaction. Any successor will be bound to honor this Policy or will give you advance notice.

6. Cookies & Similar Technologies

We use:

• Strictly necessary cookies — login session, security, CSRF protection, age-gate acknowledgement. These cannot be disabled.
• Preference cookies — language, theme, content-filter setting.
• Analytics — first-party usage analytics. Anonymous, aggregated.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking. You can manage cookies via your browser. Blocking strictly-necessary cookies will break login.

7. Data Retention

8. International Data Transfers

Ganso Gordo Producciones LLC is based in the United States. If you access the Platform from outside the US, your information will be transferred to, stored in, and processed in the US, where data-protection laws may differ from your home country. For transfers from the EU/UK/EEA/Switzerland to the US, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

9. Your Rights

9.1 All users

• Access: get a copy of personal data we hold about you.
• Correction: update inaccurate or incomplete data.
• Deletion: close your account and request erasure (subject to records we are legally required to keep).
• Portability: get your data in a structured, machine-readable format.
• Withdraw consent: for any processing that relies on consent.
• Opt out of marketing: via the unsubscribe link in any marketing email or in Settings → Email Preferences.

9.2 California (CCPA / CPRA)

California residents have the right to: know what categories of personal information we collect; access specific pieces collected; delete personal information; correct inaccurate personal information; opt out of "sale" or "sharing" (we do neither); limit use of sensitive personal information; and be free from retaliation for exercising these rights.

9.3 EU / UK / EEA / Switzerland (GDPR / UK GDPR)

You additionally have the right to object to processing based on legitimate interests, restrict processing, and lodge a complaint with your local data-protection authority. The UK supervisory authority is the ICO (ico.org.uk).

9.4 How to exercise these rights

Email legal@lust-link.net from the address on file with the request type ("Access", "Delete", "Portability", etc.). We respond within thirty (30) days (forty-five if extended for complexity), free of charge. We may verify your identity before acting.

10. Children

The Platform is strictly for adults 18 years of age or older. We do not knowingly collect any information from anyone under 18. If we discover that a user is under 18, we will terminate the account immediately and delete all associated data. If you believe a minor is using the Platform, email abuse@lust-link.net immediately.

11. Security

We use industry-standard safeguards including TLS in transit, AES encryption at rest for ID documents and selfies, bcrypt password hashing, JWT session tokens with rotation, role-based access controls, audit logging for sensitive operations, and least-privilege production access. No system is perfectly secure; if we discover a breach affecting your information we will notify you and the appropriate authorities within the timeframes required by law (e.g., 72 hours under GDPR).

12. Account Deletion

You may delete your account at any time from Settings → Delete Account or by emailing support@lust-link.net. After deletion, your profile, content, and chat history are removed from public surfaces within 24 hours. We retain the records described in §7 only for the legally-required period (KYC, payments, tax) in an isolated system accessible solely for compliance.

13. Do Not Track

Because no industry standard for DNT exists today, our site does not respond to DNT signals. We honor browser-level opt-outs for non-essential cookies.

14. Changes to This Policy

We may amend this Policy. Material changes are announced via in-platform banner and email (where you have opted in) at least thirty (30) days before they take effect. The "Last updated" date at the top always reflects the current version.

15. Contact

Questions, rights requests, or complaints about this Policy:

Ganso Gordo Producciones LLC
Attn: Privacy
732 S 6th St Ste R
Las Vegas, NV 89101
United States

Email: legal@lust-link.net