Skip to content

Safety and privacy

Built into the schema.

Most platforms describe their safety rules in a policy document and enforce them with a review team. AFTYR does that too — but the rules that matter most are also constraints in the database, so content that fails them cannot be stored in a published state at all.

The four publication gates

All four must hold at once. If any one lapses later, the content comes down automatically.

  1. Creator verified

    The creator holds a current adult identity check through an approved provider, and their account is active and not suspended.

  2. Every participant verified

    Every person depicted has their own adult identity record — not just the account holder who uploaded it.

  3. Consent on file, per scope

    A granted, unexpired consent record for each participant, for publication and for the specific distribution scope (membership feed or Vault sale). Consent is versioned and revocable.

  4. Human moderation approval

    A moderator reviewed this specific piece of content, with the participant and consent checklist in front of them.

Reporting

Any member can report any clip. Two categories — a person who may be under 18, and a person who may not have consented — are routed at the highest priority automatically, by the reason code itself. They never wait behind a queue of tagging complaints, and that ordering is not a moderator’s judgement call at intake.

You can see the status of everything you have reported, including the decision, in your account.

What AFTYR stores about you

Stored

  • · That an adult check passed, and when it expires
  • · An opaque provider reference for that check
  • · Your chosen interest categories
  • · Your follows, saves, blocks and reports
  • · Playback events used to allocate creator earnings

Never stored

  • · Your date of birth
  • · Identity document images or numbers
  • · Biometric templates or face data
  • · Card numbers or payment credentials
  • · Any inference about protected traits or orientation

Individual preference profiles are never sold, brokered or exposed — to creators, to advertisers, or to anyone else. There are no third-party ad trackers on this site.

Deletion and retention

You can request an export or a deletion from your account’s privacy centre. Some records survive a deletion request by design: financial ledger entries and audit events are append-only, because a platform that can quietly erase its own record of a moderation decision or a payment is not auditable.

Exactly how long those records should be kept, and which jurisdictions’ rules apply, is an open question that requires qualified legal review. It is not settled in this build, and this page does not pretend otherwise.