Privacy policy

The controller under the DSGVO is the party named in the Imprint named party. Project mail: hello@onlyfans-manager.de.

Which data we process

• Technically necessary: Server logs (IP, time, user-agent). WordPress cookies on login.
• Forms (Contact, model application, jobs, registration): name, email, message, channel, age where asked, 18+ and privacy confirmation.
• Account: username, email, password hash, metadata for verification and tokens.
• Tokens / Verification: internal fields for status and balance.
• Set cards: distance information and visitor count; see the separate section below.

Location and distance on the set cards

On every set card it says how far the model is from you. For that we estimate your location from your IP address — only roughly, at city level. Your street or your flat cannot be determined from that, and we also do not ask your browser for the exact location.

The matching happens entirely on our own server: there sits a table that maps IP ranges to a city (dataset from DB-IP, db-ip.com). Your IP address is not shared with anyone or stored — it is analyzed in memory for the duration of the page visit; afterward, only the displayed number of kilometers remains. An external geolocation service is deliberately not involved.

The radius search in the model directory uses the same path if you do not enter a place there.

Purpose: make the set card usable for you. Legal basis: Art. 6(1)(f) DSGVO (legitimate interest in a meaningful display). If you do not want that, any means that masks your IP address helps (VPN, Tor); the set card then shows a dash instead of the distance and otherwise works unchanged.

Visit count on the set cards

Every set card shows how often it has been viewed. So that not every reload counts, we remember one visitor per set card and day. What is stored for that is no IP address, only a check value (HMAC-SHA-256) from IP address, browser signature, date and a secret key of this installation. The IP address cannot be reverse-calculated from this value, and it is deleted automatically at the end of the day. No profile and no cross-page recognition arise. Legal basis: Art. 6(1)(f) DSGVO.

Watchlist and notes

If you tap the heart on a set card, we remember this model. Without an account that happens in a cookie (dsmdb_fav, one year lifetime, contains only set-card numbers). With an account the watchlist sits on your account, then the cookie falls away. Private notes on a model require an account, sit exclusively on your account and are not visible to the model. You delete both yourself at any time — tap the heart again, empty the note, or close the account.

Purposes and legal bases

Enquiries and applications: Art. 6(1)(b) and (f) DSGVO. Consent to 18+ and privacy: Art. 6(1)(a). Login: contract or initiation. Logs: Art. 6(1)(f) (security).

Tracking

No analytics or marketing pixel on this site. If tracking comes, consent comes first.

Recipient

Hosting on the DATAsoft/Plesk server. Email through the host’s WordPress mail function. No passing to advertising partners. Authorities only where legally required. Location determination runs on our own server; no request goes outside for that.

Retention

Forms: as long as the enquiry and statutory duties require. Accounts: until termination or closure. Logs: usual hosting periods. Check values of the visit count: until the end of the day. Watchlist in the cookie: one year or until you delete it.

Your rights

Information, rectification, deletion, restriction, data portability, objection, withdrawal. Right to lodge a complaint with a supervisory authority, in Berlin: Berlin Commissioner for Data Protection and Freedom of Information.

18+

The site is an offer for adults. We do not want data from minors.