Privacy Policy
1. Who we are
The party responsible for this website is the KINK.AGENCY (Website address: https://kink.agency).
2. Comments
When you leave comments on the site, we collect the data shown in the comments form, as well as your IP address and the browser user agent string. This data is collected exclusively to aid in spam detection and prevention.
An anonymized string (hash) created from your email address may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture will be publicly visible in the context of your comment.
3. Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract this location data from images on the website. We recommend cleaning up images before uploading them.
4. Cookies
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context are Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
- Comment Cookies: If you leave a comment, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so you don’t have to fill in your details again. These cookies will last for one year.
- Temporary Cookies: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
- Login Cookies: When you log in, we will set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. Logging out removes the login cookies.
- Article Cookies: If you edit or publish an article, an additional cookie will be saved in your browser. This cookie contains no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
5. Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.) from other websites. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website directly.
These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that external website.
Videos and podcasts on KINK MEDIA
Our media library KINK MEDIA shows videos and podcast episodes that third parties or we ourselves have published on external platforms. We do not copy these media; they are played from the servers of the respective provider.
Nothing is loaded from these providers when you open the page. The preview pictures are stored on and delivered from our own server. Only when you click “Play” on an item is the player of the respective provider loaded. By clicking “Play” you consent to this (Art. 6 (1) (a) GDPR; for users in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies). From that moment the provider receives at least your IP address, information about your browser and device, the address of our page and the time of access. The provider may set cookies or use similar technologies and may analyse your use, in particular if you are logged in to an account with the provider. We have no influence on this processing. You can withdraw your consent at any time with effect for the future by not starting further players and by deleting the provider’s cookies in your browser.
YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com), Vimeo videos with the “do not track” setting.
Providers and their privacy policies:
- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – https://policies.google.com/privacy
- Vimeo: Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA – https://vimeo.com/privacy
- Spotify: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden – https://www.spotify.com/legal/privacy-policy/
- Apple Podcasts: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland – https://www.apple.com/legal/privacy/
- SoundCloud: SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany – https://soundcloud.com/pages/privacy
Some of these providers may transfer personal data to the USA. Where a provider is certified under the EU-U.S. Data Privacy Framework (and the Swiss-U.S. Data Privacy Framework), the transfer is based on the adequacy decision of the European Commission (and the corresponding recognition by Switzerland); otherwise on the standard contractual clauses used by the provider.
Suggesting and reporting media. If you suggest a media item or report one, we store the link, your notes, your user account and the time in order to review the suggestion or report (Art. 6 (1) (b) and (f) GDPR). After approval, your member name is shown with the item (“Suggested by”). Only age-verified members can suggest media. We delete rejected suggestions after review; reports are kept as long as needed to handle them.
6. Who we share your data with
- Password Reset: If you request a password reset, your IP address will be included in the reset email.
- Spam Check: Visitor comments may be checked through an automated spam detection service.
- Authorities: We disclose personal data to authorities only where we are legally required to do so.
7. How long we retain your data
- Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to automatically recognize and approve any follow-up comments instead of holding them in a moderation queue.
- Registered Users: For users who register on our website (if any), we store the personal information they provide in their user profile. All users can view, edit, or delete their personal information at any time (except their username). Website administrators can also view and edit that information.
- Age verification: Pictures sent for the age check are deleted right after our decision, at the latest after 30 days. The record of the check (without pictures) is kept as long as your account exists and for 10 years after it has been deleted (see section 9).
8. Your rights over your data
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you.
Note: This does not include any data we are obliged to keep for administrative, legal, or security purposes.
9. Age verification (18+)
Some pictures and videos on this website are only available to members who have shown that they are at least 18 years old. Age verification is only available to registered members.
What we process. For the check by hand you send us (1) a picture of the front side of your passport, ID card or driving licence and (2) a selfie in which you hold the same document together with a handwritten note showing your username and the current date. You can add a short note. Before uploading, your browser reduces the pictures to at most 2,000 pixels and removes embedded metadata such as your location (EXIF/GPS), if your browser supports this.
How we handle the pictures. The pictures are stored encrypted on our server and cannot be accessed via the internet. Only our administrators can view them, and only to check your age. We do not use automated face recognition and we do not pass the pictures on to third parties. We delete the pictures as soon as we have decided, at the latest 30 days after you sent them. You can withdraw your request at any time before our decision; the pictures are then deleted immediately.
Record of the check. To be able to show that we check ages carefully and to prevent misuse, we keep a record of each step of the age verification, without the pictures:
- date and time, the step (request sent or withdrawn, approved, declined, verification set or removed, account deleted) and the administrator who decided;
- your username and e-mail address at that time;
- for an approval: type of document, issuing country, date of birth and expiry date as shown on the document, the last three characters of the document number and the checks made by the administrator;
- for a decline: the reason and our note to you.
We do not store the document number itself. We only keep a one-way fingerprint of it (a keyed hash), which we use solely to recognise whether the same document is used for more than one account. If you were verified in another way before 15 October 2026, we only keep the fact that you are verified.
Once your age is verified, your account is marked as verified 18+ and an 18+ badge appears on your profile board. We inform our administrators by e-mail when you send a request, and we inform you by e-mail about our decision.
Legal basis. Art. 6 (1) (a) GDPR for the pictures (your consent when you send them; you can withdraw it at any time by withdrawing your request), Art. 6 (1) (c) GDPR insofar as we are legally required to keep age-restricted content away from minors, and Art. 6 (1) (f) GDPR for the record of the check (our legitimate interest in protecting minors, preventing misuse and defending ourselves against legal claims). For users in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies.
Under 18. This website is only for adults. If the documents show that you are under 18, we close your account. In that case we keep the account and the pictures, blocked and visible only to our administrators, for as long as this is necessary to clarify the matter and to meet our legal obligations; afterwards we delete them.
Retention. The pictures are deleted as described above, except in the case of a member under 18 (see above). The record of the check is kept as long as your account exists and for 10 years after your account has been deleted; it is then deleted automatically. If you delete your account or ask us to erase your data, we keep this record for that period because we need it to defend ourselves against legal claims (see section 8).
