The full catalogue

Privacy Policy

Last updated: 13 May 2026

What we collect

When you sign up for a membership, we store your email address, display name, password (hashed - we can't see it), chosen tier, and subscription dates in our site database. This is the biggest piece of personal information we hold.

We also collect:

• Google Analytics data - page views, referrer, device type, approximate location. Only if you've accepted the Experience toggle above.
• Payment records - transaction IDs from Oxapay (crypto). Card numbers never reach our server.
• Discord connection - if you link your Discord account, we store your Discord ID and username so we can assign your subscriber role automatically.
• Comments - name, email, IP address, timestamp. Standard WordPress.
• Server logs - IP address and user agent for every page you load, kept for about 30 days for abuse investigation.
• Approximate location - we determine your country (and US state where applicable) from your IP address, using a local MaxMind GeoLite2 database. This decides whether your region requires extra age verification before signup. We don't store the lookup result; it's used only for the current page request.
• Age verification state - once you confirm you're 18+ (and, in strict regions, complete provider verification), we remember that for 12 months. For logged-in members this is stored against your account; for anonymous visitors it's a signed cookie on your device.

Why we collect it

To run your account, deliver what you paid for, match your subscription to Discord roles, process payments, stop abuse, and see which games people are most interested in.

Who we share it with

Only the services we use to run the site:

• Oxapay - crypto payment invoicing.
• Discord - if you link your account, for role sync.
• Google (Analytics) - only with your consent.
• MaxMind - provides the GeoLite2 database we look up locally. They don't see individual visitor IPs; we only download monthly database updates from them.
• ipapi.co - fallback IP geolocation service used only if the local lookup is unavailable. They receive your IP for the lookup; results are cached on our side for 7 days.

No ad networks. No data brokers. No data sold.

How long we keep it

Account data stays as long as your membership is active, plus a short window after cancellation for billing and fraud reasons. Analytics data follows Google's default retention (14 months). Server logs rotate after ~30 days. Age-verification status is retained for 12 months from when you verified - after that, you'll be asked to verify again.

Your rights

Under UK/EU GDPR you can ask for a copy of your data, corrections, deletion, or export. Email mc@thesexychinaman.com and I'll handle it within 30 days.

Cookies we use

Contact

Anything privacy-related: mc@thesexychinaman.com.