Privacy Policy

1. What We Collect

• Account info. A password, and either an email address or a username you choose — see Section 2, Fan Anonymity.
• Creator profile info. What a creator puts on their own profile — display name, handle, bio, tags, age and location (if given), avatar, social links, message price, and a payout wallet address.
• Performer records (18 U.S.C. §2257). For every person who appears in sexually explicit content on the Platform, we keep the records federal law requires (18 U.S.C. §2257 and 28 C.F.R. Part 75): the performer's legal name, date of birth, government ID number, a copy of their government-issued photo ID, every name they have performed under, the date the content was produced, and where it appears on the Platform. We collect these to confirm every performer was an adult and to meet our record-keeping obligations — for no other purpose. The legal name, date of birth, ID number, and ID image are encrypted at rest, and the records are accessible only to the Platform's records custodian and administrators. See our §2257 statement and Section 7 for how long they are kept.
• Fan age-verification info. Many places now require real age verification (not just a checkbox) before an adult site can let a visitor in. We require it for every visitor outside the United States, and for visitors in the US states that require it. We use a third-party age-verification vendor to confirm you're of legal age — see Section 6. That vendor handles whatever information their verification method requires (e.g., a government-issued ID or a database match) under their own privacy terms; we retain only what's needed to know your visit was verified.
• Content. Anything you upload — creator posts and media, marketplace listings, messages, wall comments.
• Content filter records. Every message, wall comment, profile field (name, handle, bio, tags, location, social links), listing, signup username, and the carrier and tracking number a creator enters when shipping an order is checked by automatic filters for payment details that route around the Platform (phone numbers, email addresses, outside payment apps) and for prohibited content. When one refuses what you wrote, the text is not sent or published, but we keep a moderation record of it for administrators to review: up to 200 characters of the refused text, the reason it was refused, when, and the account it came from — or, for a refused signup, the IP address it came from, since there is no account yet. Only Platform administrators can see these records. See Section 7 for how long they are kept.
• Credits and payments. Your credit balance and a record of every credit purchase, spend, sale, and payout on your account; for each credit purchase, the transaction hash and the wallet address it was sent from; for each creator payout request, the amount, the destination wallet address, its status, and — if the Platform declines it — the reason given.
• Marketplace orders and shipping addresses. The items you buy and when. If you buy a physical item, we collect the recipient's full name and shipping address. That name and address are encrypted at rest and are disclosed to the creator who sold you the item so they can ship it — they are not shown to anyone else. When the creator ships it, the order also records the carrier and tracking number they enter, which you and the creator both see on the order; if the creator corrects them later, you are notified, and each earlier carrier and tracking number is kept on the order too (visible only to Platform administrators, for resolving delivery disputes). A tracking number can be looked up with the carrier, which shows roughly where the parcel was delivered. Tracking numbers stay with the order record and are not deleted along with the shipping name and address (Section 7). We also record your age confirmation and acceptance of the Marketplace terms against each order.
• Wallet addresses and on-chain activity. If you connect a wallet — to buy credits, receive a payout, or prove you hold $ONLYONE to see a token-gated creator — we see that wallet's address and, where relevant, its $ONLYONE balance and the transactions it sends to or receives from the Platform. See Section 4 — this data is not private in the way the rest of this policy describes.
• Basic usage data. Standard technical logs (IP address, browser/device info, timestamps) generated by using any website, kept for security and abuse prevention.
• Launch notification signup. If you ask to be notified when we launch, we store the email address you give us, whether you said you were joining as a fan or a creator, which page you signed up from, and — only if you are in the US and we can tell — the US state you were in, so we can tell you when your state opens, since some states are currently blocked entirely. Those four things are all we record with the signup: we do not record your country, or any region outside the US, so we cannot tell anyone outside the US when rules where they are change. That list is used for nothing but telling you when we open (for creators, when creator signups open) and, if we recorded your US state, when that state opens. We never sell or share it, and you can be removed at any time by emailing team@onlyone1.fun. You do not need an account to sign up, and signing up does not create one.
• Content-report info. If you submit our Report Non-Consensual Content form (no account needed to do so), we collect the name and contact info you provide, whether you are reporting content of yourself, of someone else, or content you believe shows a minor, which statement you confirmed, and what you tell us about the content, solely to review and act on that report. Content that shows a minor is reported to the National Center for Missing & Exploited Children and law enforcement as the law requires; your report may be included in that referral.
• Reports and blocks inside the Platform. When you report a direct message, a wall comment, a marketplace listing, or a creator's photo or video, we keep a report record: the account that filed it, the category you picked (for example, a possible minor or non-consensual content), the reason you wrote (up to 500 characters), when, and what was reported — including a copy of the reported message, comment or listing and who posted it, so the report can still be reviewed if the item is later deleted. Only Platform administrators see report records; the person you reported is not told who reported them. When you block someone from messaging you or from commenting on your wall, we keep a record of who blocked whom so the block can be enforced. See Section 7 for what happens to both when an account is deleted.

2. Fan Anonymity — What We Deliberately Don't Require

A Fan account never requires a real email address. You can sign up with a username instead — we understand plenty of people using this Platform would rather it never show up in an inbox someone else can see. If you do use a real email, we still never send marketing to it without your consent, and we never use it for anything other than identifying your own account.

This is a deliberate design choice, not an oversight: the less real-world identifying information a Fan account requires, the less there is to ever be exposed, subpoenaed unnecessarily, or leaked. Two exceptions: buying a physical Marketplace item requires a real shipping name and address, which the selling creator sees (Section 1); and fans outside the US, and in some US states, must pass age verification through our vendor (Section 6).

Creators and the people who appear in their content are held to a different standard. Every creator profile is reviewed by our team, and we keep identity records for performers in sexually explicit content (Section 1, Performer records). Those exist to keep minors and non-consenting people off the Platform, which we treat as non-negotiable regardless of the privacy tradeoff.

3. How We Use It

• To operate your account, log you in, and show you the content you've bought or are entitled to see.
• To review a creator's profile before it goes public, and to keep the performer records described in Section 1.
• To credit your purchases, take fees, and send creator payouts.
• To fulfil Marketplace orders — including sharing a physical order's shipping name and address with the creator who sold it, and no one else.
• To detect and prevent fraud, abuse, and violations of our Terms of Service.
• To respond to a valid legal request (subpoena, court order) where we're required to.

We do not sell your personal information to third parties, and we do not use your content or account data to train AI models.

OnlyOne also sells AI-generated images of fictional adults under house accounts marked "AI MODEL". No real person is depicted, so no one's personal data or likeness is used to make them. When you buy one, the order is handled exactly like any other Marketplace order, with OnlyOne as the seller.

4. Credits, Payouts & Public On-Chain Data

Fans buy credits by sending USDG from their own wallet to the Platform's wallet on Robinhood Chain, and creators are paid out by the Platform sending USDG to the wallet they give us (see the Terms of Service). Those two kinds of transfer happen on a public blockchain. Everything in between — your credit balance, what you spend credits on, and what a creator earns — is an internal record kept by the Platform, not an on-chain transaction.

Blockchains are public ledgers by design: a wallet address and every transaction it sends or receives is visible to anyone who looks, forever, on the blockchain itself — not just to us. Anyone who knows the Platform's wallet can see that a given address sent it money. We cannot make on-chain data private, and we cannot delete, alter, or reverse anything once it's confirmed on-chain, even if you later delete your Platform account. If linking a wallet to your real identity is a concern, don't fund it from an address or exchange account that's already tied to your name.

5. Cookies & Sessions

We only set our own (first-party) cookies, each for a specific job:

• Login session (oa_session) — keeps you logged in, up to 30 days.
• Age verification (oa_age_verified) — records that this browser passed age verification (or was let in by the site owner or an authorised reviewer), so you aren't asked again; up to 180 days.
• Referral (oa_ref) — set only when you arrive through a creator's ?ref= link, whether or not you have an account, so that creator is credited if you sign up; 30 days.
• Wallet sign-in challenges (oa_wallet_nonce, oa_deposit_nonce, oa_holder_nonce) — a one-time value you sign to prove you control a wallet; about 5 minutes.
• Verified deposit wallet (oa_deposit_wallet) — after you prove you control a wallet on the Credits page, records which wallet address that was for your account, so a payment is only credited when it comes from that wallet; 2 hours.
• Token holding (oa_holder) — if you prove you hold $ONLYONE to see a token-gated creator, records that proof and the wallet address it was for, so you don't have to sign again on every page; 1 hour. Your balance is re-read on-chain, not taken from the cookie.
• Preview invite (oa_preview) — only when the site is in invite-only preview mode and you followed an invite link.
• Administrator access (oa_admin_media) — used only by Platform administrators, to view media in the admin panel; 2 hours.

We also store three things in your browser's local storage, which never leave your device unless you check out: that you dismissed the 18+ notice; the contents of your Marketplace cart; and, while a Marketplace checkout is in progress, a record of that checkout attempt. The checkout record holds your account ID, a one-time checkout key and a fingerprint of the cart, and it is what stops a retried or interrupted checkout from charging you twice. It is removed when a checkout goes through. If a checkout is refused (for example, not enough credits), the record is kept for up to 24 hours so that retrying reuses the same key; after that it is no longer used, and it is deleted from the device the next time you open your cart there while signed in, or when a checkout completes. If the connection dropped before we could confirm whether a payment went through, it stays (including after you sign out) until the site can check that for you, so it may remain on a shared device until you sign back in there or clear the site's data.

We don't run third-party advertising trackers or analytics cookies on the Platform.

6. Third-Party Services

We use infrastructure providers (web hosting, a database host, private file storage, a blockchain node provider used to check payments and token balances, and an age-verification vendor, AgeChecker.Net, for fans outside the US and in US states that require it) to run the Platform. Those providers can access the specific data needed to perform their function (e.g., storage providers hold uploaded files; AgeChecker.Net handles age-verification documents) under their own confidentiality and security obligations — we don't hand any of them more than what's needed for that purpose.

Our pages load their typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When a page loads, your browser requests those font files from Google directly, so Google receives your IP address, browser details and the address of the page that asked for the font — this happens on every page, including creator pages. We send Google nothing else, and it is not used for advertising or analytics by us; Google handles it under its own privacy policy.

Other users see only what the Platform shows them: a creator's public profile, what you post publicly, and messages you send them. The one case where another user receives your personal details is a physical Marketplace order, where the selling creator receives the shipping name and address (Section 1).

Messages are private between the two people in the conversation, but not hidden from the Platform: administrators can look up a conversation or a wall comment and read it when acting on a report, a takedown request, or a suspected violation of our Terms, and can remove it. A removed item is copied into the moderation record first (Section 7).

7. Data Retention & Deletion

A fan can delete their own account from Settings, and anyone can request deletion of their account and associated off-chain data at any time by emailing team@onlyone1.fun from the address (or with the username) on the account. For a fan account we delete the login, your wall comments, the messages you sent, your favorites and your notifications, and sign you out everywhere; digital items you bought can only be viewed from your account, so they become unavailable to you once it is deleted. A creator account is deleted together with its profile and uploaded content, the comments and messages it sent, its favorites and its notifications, and its listings are taken down (a file a buyer already paid for stays available to that buyer). Notifications your account caused in other people's accounts (“New message from …”, “… commented on your wall”) stay in their history but are changed to read “Someone” instead of your name. Wall blocks you set, and wall blocks set against you, are deleted with the account; a message block is stored on its conversation and goes when that conversation does. Anything of yours that has been reported to us is copied into the moderation record before it is deleted, so a deletion does not erase a report's evidence. Any credit balance left on a deleted account is forfeited — credits are never refunded (Terms of Service) — so spend it, or confirm you want to go ahead anyway. Some limits on that:

• On-chain transaction history cannot be deleted — see Section 4.
• Performer records kept under 18 U.S.C. §2257 (Section 1) are retained for at least seven years from when each record was created or last amended, including after the related account or content is deleted, because the law requires it. They cannot be deleted on request during that period.
• Credit, sale, order, and payout records are kept as financial records and are not deleted on request while we are required to keep them; once the account is deleted they are no longer linked to a login, email address or username (a physical order's shipping name and address are handled separately, below). Reports and moderation records are different: they keep a copy of the reported or removed content, including who wrote or sent it (the username or login email that account had at the time), for as long as the report, a legal hold, or a legal obligation requires — that copy is the evidence, so deleting the account does not remove it. Reports you filed yourself (Section 1) are kept as moderation records too — the category, the reason you wrote and what was reported stay — but when your account is deleted they stop naming your account. One exception: a report about a direct message keeps the conversation's internal identifier, which is built from both participants' internal account numbers, so administrators can still find the reported message; it contains no username, email or other detail of yours. Files taken down after a report that they may show a minor are kept as evidence too: they are moved to restricted evidence storage (never shown or delivered to other users) instead of being deleted, and when the account that posted them is banned for it, every file that account still has on the Platform is kept there too. These evidence files are not deleted on request or when the account is deleted. The content filter records described in Section 1 are moderation records too: text a filter refused stays in them, with the account (or signup IP address) it came from, after the account is deleted. If you have earnings waiting to be paid out, a pending payout, or a physical order that hasn't shipped yet, we'll settle that with you before deleting the account — the Settings page won't delete an account while one of its orders is still waiting to ship. An account that is suspended or under review for a report is deleted only through support.
• A physical order's shipping name and address stay with the order record so the creator can fulfil it. Once the order has shipped — or has been closed because the seller could not fulfil it — you can ask us to delete them (email team@onlyone1.fun with the order), unless we need them for a dispute or legal claim already in progress; the order record itself stays, without them. Only the shipping name and address are deleted: the carrier, the tracking number and every earlier tracking number kept for the order stay on it, because they are the record that the order was shipped and are needed to resolve delivery disputes. You and the creator who shipped it keep seeing the same carrier and tracking number, and if you still have an account you are notified when the creator corrects them. Deleting your account from the Settings page deletes the shipping name and address (not the carrier or tracking numbers) from every one of your orders that has already shipped or been closed, at the same time; an order still waiting to ship keeps them only until it ships or is closed, and they are deleted then.
• We may retain limited data where necessary to investigate fraud, abuse, or a legal claim already in progress.

8. Your Rights

Depending on where you live, you may have rights to access, correct, or request deletion of your personal information, or to object to certain uses of it. Email team@onlyone1.fun to exercise any of these — we'll respond consistent with applicable law, subject to the retention limits in Section 7.

9. Children's Privacy

This Platform is strictly for adults 18 and older (see the Terms of Service, Section 1). We do not knowingly collect information from anyone under 18. If we learn an account belongs to a minor, it will be terminated immediately and any associated data handled as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Platform after a change is posted constitutes acceptance of the revised policy. Material changes will be reflected by an updated "Last updated" date above.

11. Contact

Questions about this policy, or a data request under Section 7 or 8, can be sent to team@onlyone1.fun.