Privacy Policy

# Privacy Policy

**Effective Date: Feb 24, 2026**

Tons of Tongues LLC (“Tons of Tongues,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how we safeguard it, and your rights regarding your information.

Tons of Tongues LLC PO Box 1542 Everett, WA 98206 United States privacy@tonsoftongues.com

1. Information We Collect

We collect the following categories of information:

### Account Information - Name - Username - Email address - Country of residence - Account preferences

### Identity & Compliance Information For users who publish explicit content, we collect: - Government-issued identification documents - Date of birth - Selfie verification (if required) - Verification metadata

### Payment Information - Transaction history - Subscription status - Payment processor reference IDs (Note: Full payment card data is processed directly by third-party payment providers.)

### Technical & Security Information - IP address - Device information - Browser type - Login activity - Security logs - Fraud detection metadata

### Content & Communications - Uploaded content - Messages sent through the platform - Support communications

Tons of Tongues is intended for adults 18 and over. We do not knowingly collect personal information from minors.

2. How We Use Your Information

We process personal data to:

• Provide and operate the platform;
• Verify age and eligibility;
• Process transactions and subscriptions;
• Prevent fraud, chargebacks, and abuse;
• Conduct trust and safety reviews;
• Comply with legal and regulatory obligations;
• Respond to lawful requests and enforcement inquiries;
• Improve performance and user experience through aggregated analytics.

Legal bases for processing may include:

• Performance of a contract;
• Compliance with legal obligations;
• Legitimate interests;
• User consent where required.

3. Sensitive Data Handling

Government-issued identification documents and verification data are classified as sensitive information.

We:

• Store verification documents in encrypted storage;
• Restrict access under strict least-privilege controls;
• Do not sell, rent, or commercially exploit identity documents;
• Use identity documents solely for age verification and compliance purposes.

4. Sharing & Disclosure

We may share information with:

• Payment processors;
• Identity verification providers;
• Hosting and infrastructure providers;
• Analytics service providers;
• Legal authorities when required by law;
• Parties involved in fraud investigations or chargeback disputes;
• Parties responding to intellectual property or DMCA claims.

We do not sell personal information or share it for unrelated advertising purposes.

Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain login sessions;
• Prevent fraud;
• Remember user preferences;
• Analyze usage patterns.

Essential cookies are required for core functionality. Optional analytics cookies may be managed through browser settings or platform controls.

6. Data Retention

We retain personal information only as long as necessary for legal and operational purposes.

Retention periods may include:

• Identity verification documents: retained for as long as legally required for compliance and risk mitigation.
• Payment and financial records: retained as required under tax and financial regulations.
• Security logs: retained for fraud prevention and security monitoring.
• Account data: retained while the account remains active and for a limited period after closure to comply with legal obligations or resolve disputes.

When data is no longer required, it is securely deleted or anonymized in accordance with documented disposal standards.

Deletion requests may be denied where retention is legally required.

7. Security Measures

We implement reasonable technical and organizational safeguards including:

• Encryption in transit and at rest;
• Role-based access controls;
• Regular security assessments;
• Incident response procedures;
• Monitoring for unauthorized access.

In the event of a data breach, we will provide notification where required by applicable law.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal information;
• Correct inaccurate information;
• Request deletion of personal information;
• Request data portability;
• Object to or restrict processing;
• Withdraw consent for optional processing.

We may verify your identity before fulfilling requests.

Residents of certain jurisdictions, including those covered by GDPR or CCPA, may exercise additional rights in accordance with applicable law.

9. Law Enforcement & Legal Compliance

We may preserve, disclose, or report information where required to:

• Comply with applicable law;
• Respond to subpoenas or court orders;
• Enforce our Terms of Service;
• Investigate fraud, abuse, or illegal activity.

10. Account Closure

If you close your account, certain information may remain retained for compliance, fraud prevention, dispute resolution, or legal obligations.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the platform or by email where required.

Continued use of the Services after updates constitutes acceptance.

12. Contact Us

If you have questions regarding this Privacy Policy or your data rights, contact:

privacy@tonsoftongues.com

or write to:

Tons of Tongues LLC Attn: Privacy PO Box 1542 Everett, WA 98206 United States