Back to home
🔒Last updated August 16, 2026

Privacy Policy

How Afters collects, uses, and shares information

1. Introduction, Scope, Territorial Application, and Binding Effect

Ch3rry LLC, a limited liability company organized under the laws of the United States of America (hereinafter, as the context may require, "Ch3rry LLC," the "Company," "we," "us," or "our"), owns, operates, administers, and makes available the Afters online service and any related websites, applications, interfaces, application programming interfaces, documentation, communications programs, waitlist or pre-registration flows, customer-support channels, and successor or replacement properties (collectively, the "Service"). This Privacy Policy (this "Policy") sets forth the terms upon which the Company collects, receives, generates, uses, stores, discloses, transfers, retains, deletes, and otherwise processes information in connection with the Service.

The Service is designed, marketed, and intended for use by individuals located in the United States of America who have attained the age of eighteen (18) years. The Company does not represent that the Service is appropriate, lawful, or available in any other jurisdiction. If you access the Service from outside the United States, you do so on your own initiative and at your own risk, and you are solely responsible for compliance with local law. Nothing in this Policy shall be construed as an offer of services directed to the European Union, the United Kingdom, or any other non-United States jurisdiction, except to the limited extent that applicable law nevertheless attaches to such access.

By accessing, browsing, loading, caching, registering for, creating a guest or temporary session, submitting a waitlist or other form, enabling device permissions, tapping, clicking, or otherwise interacting with any element of the Service, or by continuing to use the Service after this Policy has been made available to you, you acknowledge that you have had a reasonable opportunity to read this Policy, that you understand it, and that you agree to be legally bound by it, together with the Terms of Service, which are incorporated herein by this reference as if fully set forth herein. If you do not agree to every provision of this Policy, you must immediately cease all access to and use of the Service and must not create, maintain, or attempt to maintain any account, waitlist enrollment, session, or other relationship with the Company.

This Policy applies to information collected through the Service and through communications with the Company in connection with the Service. It does not govern the independent privacy practices of third-party websites, applications, platforms, payment processors, authentication providers, advertising or measurement partners, analytics vendors, telecommunications carriers, identity-verification services, app-store operators, device manufacturers, or any other third parties that may be linked to, embedded within, integrated with, or referenced from the Service. Those third parties maintain their own terms and privacy policies, and your interactions with them are subject exclusively to those separate instruments.

The Company reserves the right, at any time and in its sole and absolute discretion, to modify, amend, supplement, restate, or replace this Policy, in whole or in part. When the Company makes changes, it will revise the "Last updated" date displayed at the top of this page. Where a change is material and where notice is required by applicable law, the Company may provide additional notice through the Service, electronic mail, or other reasonable means. The Company will not rely solely on a silent, retroactive rewrite of this Policy to authorize a new and more expansive commercial use of personal information that is unrelated to the operation of the Service (including, without limitation, a newly introduced program of licensing identifiable communications content to unaffiliated developers of general-purpose foundation models) without providing additional notice reasonably calculated to inform affected users. Your continued access to or use of the Service following the effective date of any revised Policy constitutes acceptance of the revised Policy. It is your sole responsibility to review this Policy periodically.

2. Definitions and Interpretive Provisions

For purposes of this Policy, "personal information" (and, where a particular statute uses the term "personal data," that term) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device, as defined under applicable privacy laws, including without limitation the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 and implementing regulations (collectively, "CCPA/CPRA"), and analogous comprehensive state privacy statutes as in effect from time to time. "Processing" means any operation or set of operations performed on personal information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.

"Cookies" means small text files or analogous identifiers placed on or read from your browser or device. "Tracking Technologies" means pixels, tags, beacons, scripts, software development kits, local storage, session storage, and other code-based or automated tools that transmit information about your interactions with the Service to the Company or to third parties. "Device identifiers" include browser identifiers, operating-system identifiers, advertising identifiers (where available), network-derived identifiers, and other technical identifiers generated from device or browser characteristics. "Communications content" means the substance of text messages you send through the Service and any user-submitted files associated with reports or support requests; it does not, in the ordinary course, include the audiovisual substance of a live session, which the Company does not record as a matter of ordinary operations.

"Sensitive personal information" has the meaning given under the CPRA and analogous statutes and may include, depending on the circumstances, government-identifier fragments, account log-in credentials, the contents of certain communications, information concerning sex life or sexual orientation if you elect to provide it, and similar categories. Self-reported gender and preference fields, if provided, may constitute or be treated as sensitive personal information under some laws. "Sale" and "sharing" have the meanings given under the CCPA/CPRA and similar laws and may include certain disclosures to advertising or measurement partners even in the absence of a cash payment.

References to "you" or "your" include any individual who accesses or uses the Service and, where context requires, any authorized representative acting on such individual's behalf. Headings are for convenience only and shall not affect interpretation. Unless the context requires otherwise, "including" and similar terms mean "including without limitation." The words "may," "can," and "might" are permissive and do not create an obligation to take or refrain from any particular operational step. The words "shall" and "will," when used with respect to the Company, are subject to technical, legal, and operational limitations. A general description in this Policy controls over any informal statement, support reply, social-media post, or marketing copy to the extent of conflict, except where a point-of-collection notice expressly states otherwise.

3. Categories of Information We Collect

The Company collects information from and about you through direct interactions, automated technologies, third-party integrations, and operational processes reasonably necessary to provide, secure, market, measure, and improve the Service. The categories and granularity of information collected depend on how you interact with the Service, the features you enable, the device and browser you use, and the third-party services you authorize. The following categories are illustrative and not exhaustive. The Company may collect additional information that is reasonably related to the categories described herein.

3.1 Account, Profile, and Identity Information

When you register, sign in, upgrade from a guest or temporary session, or otherwise establish a relationship with the Service, the Company may collect:

  • Contact identifiers you elect to provide, including an electronic-mail address, whether provided directly or obtained through a third-party authentication service you choose to use
  • A display name, handle, alias, or similar label
  • Self-reported demographic or preference fields you elect to complete, which may include gender identity and stated preferences concerning other users
  • Age or date-of-birth information, which may be self-reported and, if the Company later offers optional or required identity verification, limited verification-status data returned by a third-party provider
  • Optional coarse geographic preference (for example, a state or region code) if you enable a location-related preference
  • Account-status indicators, including whether a session is temporary or registered, whether a paid or administrative status applies, and whether an account is restricted, suspended, or closed

3.2 Usage, Engagement, and Interaction Information

The Company collects information regarding your interactions with the Service in order to operate the Service, maintain safety and integrity, analyze performance, and support measurement:

  • Quantitative measures of session activity, duration, frequency, and related engagement
  • Generalized participation patterns, queue or waiting-room activity, feature usage, and history of connections at a non-granular operational level
  • Interaction data relating to how you navigate, view, and engage with pages, forms, and features
  • Aggregated, anonymized, or de-identified usage data

3.3 Communications, Reports, and Safety Information

To facilitate limited text communication and to uphold platform safety, the Company may collect:

  • Text-based messages exchanged through the Service, retained subject to the retention rules in this Policy and visible to the participants or for legitimate safety and moderation review
  • Reports, complaints, or safety submissions you initiate, which may include optional images, message references, or supporting details that you choose to attach
  • Reports or complaints received concerning your account or conduct
  • Communications you send to the Company through support, feedback, or similar channels

3.4 Device, Log, Network, and Technical Information

The Company automatically collects technical and network information when you access the Service:

  • Internet Protocol address and general network-related information, which may be used for security, abuse prevention, and approximate location at a coarse level
  • Device, browser, operating-system, language, and other technical characteristics
  • Log files, timestamps, referring information, session identifiers, diagnostic data, and crash or quality-of-service signals
  • Information reasonably necessary to establish, maintain, or troubleshoot real-time connections, which may include connection-path or relay metadata processed by the Company or by infrastructure providers
  • Information you submit through forms or pre-registration flows, together with related technical metadata

3.5 Information Collected Through Cookies and Similar Technologies

The Company and its service providers may use cookies, local storage, session storage, pixels, tags, web beacons, scripts, and similar technologies to recognize browsers and devices, remember preferences, measure traffic, attribute activity, and support analytics and advertising-related functions. Such technologies may collect online identifiers, general usage and interaction data, referring and exit information, timestamps, and device or browser characteristics. Third-party partners that provide analytics, measurement, or advertising-related services may receive or collect similar information subject to their own policies.

3.6 Information from Third Parties

When you authenticate through a third-party provider or complete optional third-party identity verification, the Company receives only the data elements necessary for the requested functionality. Government-issued identification imagery, biometric templates, and raw source documents, if any, are processed by the applicable provider and are not stored in the Company's systems unless expressly disclosed at the point of collection. The Company may also receive information from advertising partners, analytics vendors, fraud-prevention services, payment processors, telecommunications providers, app-store operators, and infrastructure providers in accordance with their and the Company's respective policies.

3.7 Social-Graph and Connection Information

If you use features that permit you to request, accept, decline, or maintain a connection with another user, the Company may store the existence, status, and timing of such requests and connections, together with related identifiers. The Company does not, by virtue of such features, obtain access to your device address book unless you separately and affirmatively grant such access, which the Service does not presently require.

4. Purposes for Which We Use Information

The Company uses the information it collects for business, operational, safety, analytical, marketing, and legal purposes, including but not limited to the following:

  • Providing, operating, maintaining, and delivering the core functionality of the Service, including facilitating real-time audiovisual sessions and limited in-Service text communication
  • Operating, maintaining, and improving connection, recommendation, quality, and related Service functionality through methods determined by the Company in its discretion
  • Maintaining platform safety, enforcing the Terms of Service, and operating reporting, moderation, restriction, and enforcement systems, including the use of network and account identifiers to prevent evasion
  • Analyzing usage patterns to improve features, develop new functionality, optimize performance, and conduct product research
  • Detecting, preventing, and responding to fraud, abuse, violations, suspicious activity, and threats to users or the Service
  • Complying with legal obligations and responding to lawful governmental, regulatory, or law-enforcement requests
  • Sending transactional, administrative, and account-related communications, including waitlist confirmations and service announcements where you have a relationship with the Company
  • Measuring the effectiveness of outreach and promotional activities, attributing activity, and supporting analytics and advertising-related functions through third-party platforms where permitted
  • Creating aggregated, anonymized, or de-identified datasets for analytics, benchmarking, and business intelligence
  • Displaying activity, presence, or popularity indicators, which may be approximate, delayed, rounded, estimated, or otherwise not a precise census of contemporaneous users
  • Administering temporary or guest sessions, including expiration, conversion, restriction, and anonymization
  • Processing payments and limited administrative or reinstatement fees through a third-party processor

4.1 Legal Bases for Processing

Where required by applicable law, the Company relies on one or more of the following legal bases: your consent (where explicitly required), performance of a contract with you, the Company's legitimate interests in operating, securing, marketing, and improving the Service (balanced against your rights), and compliance with legal obligations. You may withdraw consent where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal, subject to technical and contractual limitations. The Service is intended for the United States; if a non-United States legal basis analysis is nevertheless required, the foregoing bases shall apply to the maximum extent permitted.

5. Automated Processing, Profiling, and Connection Logic

The Company may use automated processing, statistical models, rules, heuristics, and similar techniques to connect users, sequence or prioritize sessions, maintain platform integrity, analyze usage, detect abuse, and support related functions. Such processing is an ordinary incident of operating an interactive service. The Company does not, by this Policy, disclose the specific inputs, weights, thresholds, vendor identities, or internal classifications used in any such processing, which the Company regards as confidential business information and, where applicable, trade secrets.

The Company does not make solely automated decisions producing legal or similarly significant effects concerning you (such as a determination of legal rights, eligibility for a government benefit, or a similarly significant legal consequence) without human review where prohibited by law. Decisions concerning access to an entertainment service, the order in which sessions are presented, the restriction of an account for safety reasons, or the display of approximate activity metrics are not, without more, legal or similarly significant effects within the meaning of applicable law.

Third-party partners may use automated processing for analytics, advertising, measurement, fraud prevention, or infrastructure pursuant to their own policies. The Company is not responsible for such third-party automated processing except as required by law.

If the Company later deploys a system that interacts with you in a manner that could reasonably cause you to believe you are communicating with a human when you are not, the Company will provide a disclosure reasonably calculated to inform you of that fact, as required by applicable law. The ordinary operation of connecting two human users for a live session is not such a system.

6. Real-Time Communications, Session Data, and Infrastructure

The Service facilitates real-time video and audio communication between users. In the ordinary course of business, the Company does not record, store, or retain the audiovisual content of live sessions for later playback, and the Company does not operate a general-purpose archive of live session recordings. Limited technical information necessary to establish, maintain, secure, bill for, or troubleshoot connections may be processed by the Company or by infrastructure providers. Depending on the type of session, the number of participants, network conditions, and similar operational factors, media may be transmitted in a peer-to-peer manner or may be relayed, mixed, or otherwise handled by one or more infrastructure providers solely for the purpose of delivering the session. The involvement of an infrastructure provider to deliver a session does not, without more, constitute a recording of the session by the Company.

You acknowledge that certain session-related metadata (including, without limitation, timestamps, duration, participant identifiers, connection-quality signals, and network-path indicators) may be visible to the Company or its providers for safety, abuse prevention, service quality, capacity planning, and operational purposes. You are solely responsible for compliance with all applicable laws governing the recording or capture of communications, including all-party consent statutes. The Company disclaims all liability arising from unauthorized recording, screenshotting, or capture by users or by any third party not under the Company's control.

Text messages, unlike the audiovisual substance of a live session, may be stored on the Company's systems subject to the retention rules in this Policy. Reports referencing communications or attaching images may be retained for moderation, safety, and legal purposes regardless of subsequent deletion of the underlying conversation by a user.

The Company does not use the audiovisual content of live sessions to train unaffiliated general-purpose foundation models. If the Company later proposes to do so, it will provide additional notice as described in Section 1. The Company may use de-identified or aggregated operational data, and may use text or report content as reasonably necessary for safety, enforcement, and service improvement, consistent with this Policy.

7. Device Permissions, Camera, Microphone, and Platform Controls

Certain features of the Service require access to a camera, microphone, or similar device capability. The Company requests such access only when reasonably related to the feature you seek to use. Granting permission is voluntary, but refusal may prevent the Service from functioning as intended. Permission states are controlled by your operating system or browser, and the Company honors those settings to the extent technically feasible.

On certain mobile platforms, additional consent frameworks (including advertising-tracking prompts required by the platform operator) may apply. The Company does not control platform-level prompts, app-store age gates, or parental-consent mechanisms operated by device manufacturers or app-store operators.

8. Electronic Mail, SMS, Waitlist, and Referral Programs

If you provide a mobile telephone number or electronic-mail address and affirmatively opt in through a form or other interface on the Service, the Company may send transactional or consented communications such as waitlist confirmations and time-sensitive launch or service-related alerts. Message frequency may vary. Message and data rates may apply. Consent to receive SMS is not a condition of any purchase.

You may opt out of SMS at any time by replying STOP. For assistance, reply HELP or contact [email protected]. The Company will not share or sell your mobile telephone number or SMS opt-in information with third parties for their own independent promotional or marketing purposes. The Company may share information with service providers that help deliver messages, under contractual obligations to use it solely on the Company's behalf. Inbound replies and delivery-status events may be processed in order to honor opt-outs, prevent abuse, and operate the messaging program.

If you participate in a referral or share program, the Company may process tokens, links, and limited attribution data to associate a referral with an account or waitlist entry. Do not submit another person's contact information unless you have a lawful basis to do so.

Even if you opt out of promotional communications, the Company may still send non-promotional service messages as permitted by law, including security notices, legal notices, and messages concerning an existing transaction or relationship.

9. Payment Processing and Administrative Charges

Premium features, subscriptions, and certain paid or administrative services, if offered, are made available through an authorized third-party payment processor. The Company does not store, process, or retain complete payment-card numbers or analogous sensitive financial-account credentials. The payment processor handles such information in accordance with applicable industry standards. The Company receives only limited confirmation data relating to payment status, amount, and related identifiers. Review the payment processor's privacy policy and terms for additional details.

Certain charges, if offered, may relate to administrative review, reinstatement following a restriction, or similar discretionary processes. Payment of any such charge does not create a right to reinstatement, does not constitute a waiver of the Terms of Service, and does not limit the Company's right to refuse, restrict, or terminate access.

10. How We Disclose and Share Information

The Company discloses personal information to third parties only as described in this Policy or as otherwise disclosed at the point of collection. The Company does not sell personal information for monetary consideration in the colloquial sense. However, certain disclosures of personal information to advertising, analytics, or measurement partners for targeted advertising, interest-based advertising, cross-context behavioral advertising, or related commercial purposes may constitute a "sale" or "sharing" of personal information under the CCPA/CPRA and similar state laws. Where applicable, you may have the right to opt out as described in this Policy.

  • Service providers and subprocessors that perform hosting, infrastructure, content delivery, analytics, customer support, security, messaging, and related functions under contractual confidentiality and data-processing obligations
  • Advertising, analytics, and measurement partners that assist with analytics, attribution, audience development, advertising delivery, advertising measurement, or related commercial functions, subject to contractual obligations and applicable law
  • Payment processors, which receive only the minimum information necessary to process transactions and related administrative charges
  • Authentication providers, to the extent you elect to use third-party sign-in
  • App-store operators and platform providers, to the extent required to distribute or operate an application
  • Legal, safety, and compliance recipients, including disclosures the Company believes in good faith are required by law, court order, subpoena, or governmental request, or necessary to protect users, the public, or the Company
  • Successors in interest in mergers, acquisitions, reorganizations, asset sales, bankruptcy, or similar transactions
  • Aggregated and de-identified data that cannot reasonably identify individuals

11. Analytics, Advertising, Measurement, and Electronic Communications Interception Theories

The Service may use third-party analytics, advertising, and measurement technologies to understand how the Service is accessed and used, evaluate the performance of promotional activities, and support related business functions. These technologies may operate across the Service and may collect information about your visits, interactions, submissions, and general device or browser characteristics.

Information collected through such technologies may be used by the Company and by applicable third parties for purposes including traffic analysis, performance monitoring, attribution, audience development, advertising delivery, advertising measurement, and other commercial or operational functions permitted by law. Third parties may combine information received from the Service with information they obtain from other sources, subject to their own privacy policies and applicable law.

By using the Service, you acknowledge that the Company and its service providers may receive information that is generated as you interact with the Service, and you consent to such collection and disclosure to the extent consent is required by applicable electronic-communications, wiretap, or analogous statutes, including without limitation the California Invasion of Privacy Act, for the ordinary operation of analytics, security, fraud prevention, and measurement tools. Where a particular tool requires a separate consent under applicable law, the Company will present such consent in the manner it determines is legally sufficient. You may withdraw or limit certain tracking through the mechanisms described in this Policy, understanding that core security and operational tools may continue to function.

The Company is not responsible for the independent privacy or data practices of third-party analytics, advertising, or measurement providers. The Company encourages you to review the privacy policies of any third-party services you use in connection with the Service.

12. Cookies, Local Storage, Preference Signals, and Tracking Technologies

The Company and its service providers may use first-party and third-party cookies, local storage, session storage, embedded scripts, automated logging, and other standard industry technologies (where lawful) to authenticate sessions, prevent fraud, remember preferences, analyze performance, and support analytics and advertising-related functions.

Cookies may be session-based or persistent. The Company may use strictly necessary cookies required for security and core functionality, functional cookies that remember choices, analytics cookies that measure usage, and advertising or measurement cookies that support campaign attribution and audience creation.

You may manage cookies through browser settings, mobile operating-system controls, and third-party opt-out mechanisms. Because cookie controls vary by browser and device, no single method guarantees complete suppression of all Tracking Technologies. Clearing cookies may log you out, reset preferences, or require re-authentication.

Industry "Do Not Track" signals are not uniformly specified, and the Company does not represent that it responds to all such signals. However, where applicable law requires the Company to honor a qualifying opt-out preference signal or universal opt-out mechanism (including, where recognized, the Global Privacy Control) as a valid request to opt out of the sale or sharing of personal information or targeted advertising, the Company will treat such a signal as such a request with respect to the browser or device from which the signal is received, to the extent technically feasible and legally required. A preference signal may not identify you across devices. You may still submit an authenticated opt-out request as described in this Policy.

Third-party cookies and similar technologies are subject to the retention schedules and policies of the applicable providers, which may differ from the Company's.

13. Data Retention, Archival, and Deletion

The Company retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law, regulation, contract, litigation hold, or legitimate business need including fraud prevention and safety enforcement.

Account profile data is retained while your account remains active and for a commercially reasonable period thereafter to resolve disputes, enforce agreements, and comply with law. Temporary or guest sessions may expire automatically after a limited period determined by the Company, after which associated identifiers may be deleted, anonymized, or otherwise decommissioned, subject to safety, billing, and legal exceptions. Chat history and connection records are deleted when you delete your account or within a commercially reasonable period following a verified deletion request, subject to safety exceptions. Waitlist data may be retained until launch communications are complete or you opt out, plus additional periods for compliance and analytics.

Server logs, security records, and advertising-event data may be retained for shorter or longer periods depending on operational needs, typically ranging from thirty (30) days to twenty-four (24) months unless extended by legal obligation. Reports, moderation records, restriction records, and safety-related data may be retained longer where required for enforcement, regulatory compliance, or defense of legal claims. Records relating to a report of apparent child sexual abuse material or a valid intimate-image removal request may be retained as required by law.

Aggregated or de-identified data may be retained indefinitely. Backup systems may retain deleted data for limited periods before overwrite. Deletion from live systems does not guarantee immediate removal from all backups or third-party systems.

To request deletion, email [email protected] with subject line "Delete My Data." The Company will verify identity and process verified requests within the period required by applicable law, typically forty-five (45) days or such shorter period as a particular statute may require, subject to legal exceptions. Where a platform operator requires in-application account deletion, the Company will provide a mechanism consistent with that requirement.

14. Your Privacy Rights and Choices

Depending on your jurisdiction of residence and whether the Company is a "business," "controller," or analogous entity with respect to you under a particular statute, you may have some or all of the following rights. The Company honors such rights to the extent legally required and does not discriminate against you for exercising them.

  • Right to know categories and specific pieces of personal information collected
  • Right to access, review, and obtain a copy of personal information
  • Right to correct inaccurate, incomplete, or outdated personal information
  • Right to request deletion, subject to legal exceptions
  • Right to data portability in a structured, commonly used, machine-readable format
  • Right to opt out of sale or sharing for cross-context behavioral advertising or targeted advertising
  • Right to limit use of sensitive personal information where applicable
  • Right to object to or restrict certain processing in appropriate circumstances
  • Right to withdraw consent without affecting prior lawful processing
  • Right to appeal a denied request where a particular statute provides an appeal

14.1 Exercising Your Rights

Submit verifiable requests to [email protected] with subject line "Privacy Request," "Delete My Data," "Do Not Sell or Share My Personal Information," "Limit Use of Sensitive Personal Information," or "Privacy Appeal," as applicable. The Company will respond within time periods prescribed by law after verifying identity through reasonable means. Authorized agents may submit requests on your behalf where permitted by law and supported by appropriate documentation. The Company may deny a request that is unfounded, excessive, or not legally required, and will explain the basis for a denial to the extent required.

15. Additional Disclosures for Residents of Comprehensive-Privacy States

In the preceding twelve (12) months, the Company may have collected the following categories of personal information, as those categories are described in the CCPA/CPRA and similar laws: identifiers; customer-records information; protected-classification characteristics to the extent you elect to provide them; commercial information; internet or other electronic-network activity; approximate geolocation; audio, electronic, or visual information to the extent you submit files or to the extent session metadata is generated; and inferences. The Company collects such categories from you, from your device, from service providers, and from advertising or measurement partners. The Company uses such categories for the purposes described in this Policy. The Company discloses such categories to the classes of recipients described in this Policy. The Company does not knowingly sell or share the personal information of consumers under sixteen (16) years of age.

The Company does not use or disclose sensitive personal information for purposes other than those permitted by applicable law, including providing the Service, ensuring security and integrity, short-term transient use, performing services on behalf of the business, and quality or safety purposes.

To the extent the Company is subject to a particular comprehensive state privacy statute (including, without limitation, those of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and such other states as may enact analogous laws), the Company will honor the rights granted by that statute to a resident consumer to the extent the statute applies to the Company and to the request. Thresholds, exemptions, and definitions vary by statute, and the Company does not waive any exemption.

16. Cross-Border Processing and Non-United States Users

Information is processed in the United States and in any other location where the Company or its service providers operate. If you access the Service from outside the United States, you acknowledge that information may be transferred to and processed in jurisdictions that may not provide protections equivalent to your local law. Where required, the Company implements appropriate contractual and technical safeguards. By using the Service, you consent to such processing to the extent permitted by applicable law.

The Company does not presently appoint a representative in the European Union or the United Kingdom. If you believe a non-United States privacy framework applies to you, you may contact [email protected] with subject "Privacy Request." The Company will consider such requests in good faith and as required by law.

17. Information Security Program

The Company implements administrative, technical, and organizational measures designed to protect personal information against unauthorized access, use, alteration, disclosure, or destruction, taking into account the nature of the information, the state of the art, the costs of implementation, and the risks. Measures may include encryption in transit, access controls, vendor diligence, monitoring, and incident-response procedures. The Company does not publicly disclose the specific configuration of its security program.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your credentials and for using reasonably secure devices and networks. The Company is not responsible for breaches originating from your device, your credentials, or third-party systems not under the Company's control, except as required by law.

18. Security Incidents and Notification

The Company maintains procedures designed to detect, contain, investigate, and remediate security incidents involving personal information. If the Company determines that a confirmed security breach has occurred that triggers notification obligations under applicable law, the Company will provide notice to affected individuals and regulators without unreasonable delay, including information about the nature of the incident, categories of data involved, steps the Company is taking, and recommended protective measures, in each case to the extent required and known.

Notice may be provided via electronic mail, in-Service messaging, or other legally permissible channels. The Company may delay notice if law enforcement requests delay or if immediate notice would increase harm. You are responsible for maintaining accurate contact information.

19. Children's Privacy; Age Restrictions; State Youth-Protection Statutes

The Service is intended exclusively for individuals eighteen (18) years of age or older. The Company does not knowingly collect personal information from anyone under eighteen (18). The Service is not directed to children under thirteen (13) within the meaning of the Children's Online Privacy Protection Act. If the Company learns that it has collected personal information from a person under eighteen (18), the Company will delete or de-identify such information promptly, restrict the associated session, and take such additional steps as applicable law may require. Parents or guardians who believe a minor has provided information should contact [email protected] immediately.

The Company may, in its discretion, require self-attestation of age, additional verification, or both. Self-attestation is not a warranty by the Company that every user is in fact eighteen (18) or older. You agree not to assist a minor in accessing the Service.

Certain states impose additional obligations on digital services that are directed to minors, that have actual knowledge a user is a minor, or that cannot reasonably conclude that minors constitute only a de minimis portion of users. Because the Service is an adult-only entertainment service and is not directed to minors, the Company intends that such statutes not apply. To the extent any such statute nevertheless applies, the Company will comply as required, which may include additional age-assurance measures, restrictions, or refusal of service.

20. Sensitive Personal Information and Special Categories

Depending on how you use the Service, the Company may process information that constitutes sensitive personal information under the CPRA or analogous categories under other laws, including account credentials, the contents of certain text communications, and self-reported characteristics or preferences that may concern sex, gender, or similar matters if you elect to provide them. Images you attach to a report may depict faces or other physical characteristics; the Company does not use such images to create a biometric identifier for the purpose of uniquely identifying individuals, except that a third-party verification provider, if you elect to use one, may process biometrics on its own systems.

The Company uses sensitive personal information only for purposes permitted by law. Where applicable law grants a right to limit certain uses of sensitive personal information, submit requests to [email protected] with subject "Limit Use of Sensitive Personal Information."

21. Child Sexual Abuse Material and Mandatory Reporting

The Company does not permit child sexual abuse material or the sexual exploitation of minors on or through the Service. If the Company obtains actual knowledge of apparent child sexual abuse material, online enticement of a child, or child sex trafficking on or through systems it operates, the Company will make such reports as are required by 18 U.S.C. § 2258A and related authorities to the CyberTipline operated by the National Center for Missing and Exploited Children, or any successor, and will preserve related information as required by law. The Company is not required by that statute to affirmatively monitor all communications, and this Policy does not create a duty to monitor beyond what applicable law requires.

22. Nonconsensual Intimate Visual Depictions — Notice and Removal

If an intimate visual depiction of you was published on the Service without your consent, including a depiction that is digitally forged or synthetic, you (or your authorized representative) may request removal.

How to request removal: send an email to [email protected] with the subject line "Intimate Image Removal Request." In the email, identify the material and give information reasonably sufficient for the Company to locate it; include a brief statement of your good-faith belief that the publication is not consensual; and include your name, a signature (typed is acceptable), and contact information. If you are writing as a representative, say so and describe your authority.

What the Company will do: after receiving a complete request, the Company will remove the identified material as soon as possible and not later than forty-eight (48) hours, and will make reasonable efforts to identify and remove known identical copies, in each case to the extent the material is within the Company's possession or control. Live sessions that are not recorded in the ordinary course may no longer exist to be removed. The Company may disable access based on an apparent unlawful publication in good faith even if the material is later determined to have been lawful.

This Section is intended to provide the plain-language explanation required by applicable federal law concerning nonconsensual intimate visual depictions. It does not limit any other remedy.

23. Law Enforcement, Regulatory Requests, and Legal Process

The Company may disclose personal information to law enforcement, government authorities, regulators, courts, and private litigants when the Company believes in good faith that disclosure is required or permitted by applicable law, regulation, legal process, or enforceable governmental request, or when disclosure is necessary to protect the rights, property, or safety of the Company, its users, or the public.

The Company's policy is to review requests for legal sufficiency and to narrow disclosures to the minimum data responsive to a valid request. The Company may challenge overbroad, defective, or unlawful requests where appropriate. The Company may be prohibited by law from notifying you of certain requests; where notification is permitted, the Company will provide notice unless exceptional circumstances apply.

Nothing in this Policy limits the Company's ability to disclose information that it believes is necessary to comply with fraud-prevention, anti-money-laundering, export-control, sanctions, or national-security obligations.

24. De-identification, Aggregation, and Statistical Derivations

The Company may create aggregated, anonymized, or de-identified datasets by removing or modifying identifiers such that the resulting data cannot reasonably be used to identify an individual. The Company may use and disclose such data for analytics, research, product development, marketing insights, and sharing with partners without restriction to the extent permitted by law.

The Company commits to maintain de-identified data in de-identified form and not attempt to re-identify such data except as required for security testing or legal compliance. Inferences drawn from personal information may themselves constitute personal information under some laws until properly de-identified.

25. Displayed Activity, Presence, and Popularity Indicators

The Service may display numbers, labels, or other indicators concerning how many people are online, waiting, or otherwise active, or concerning the popularity or status of a feature. Such indicators may be approximate, delayed, rounded, sampled, estimated, bundled with other signals, or otherwise not a precise contemporaneous census. You should not rely on any such indicator as a representation of a specific headcount, identity, or outcome.

26. Temporary Sessions and Account Closure

The Company may offer temporary, guest, or similarly limited sessions that expire after a period determined by the Company. Upon expiration, conversion, or closure, the Company may delete, anonymize, or otherwise decommission identifiers associated with the session, subject to the retention exceptions in this Policy. Closure of an account does not extinguish information the Company is required or permitted to retain.

27. Third-Party Links, Embeds, Platforms, and App Stores

The Service may contain links or integrations with third-party websites, applications, payment gateways, authentication providers, advertising platforms, and app-store operators. The Company does not control and is not responsible for third-party privacy practices. Review third-party policies before providing information or engaging with those services. Distribution of an application through an app store is also subject to that store's terms, which may impose additional privacy, age, and payment requirements that the Company does not control.

28. Platform-Operator Requirements

Where a platform operator requires that third parties with whom the Company shares user data provide the same or equal protection of user data as stated in this Policy, the Company requires such third parties, by contract or other reasonable means, to provide such protection. Where a platform operator requires in-application account deletion, consent withdrawal, or purpose-string disclosures, the Company will implement such requirements as applicable to the relevant application.

29. Changes and Amendments to This Policy

The Company may modify this Policy at any time as described in Section 1. Material expansions of commercial data uses unrelated to operating the Service will be accompanied by additional notice as described therein. Continued use after changes constitutes acceptance except where applicable law requires a different form of consent. Review this Policy regularly.

30. Acceptance, Acknowledgment, and Contact Information

By using the Service, you acknowledge that you have read this Policy, understand its terms, and agree to the Company's collection, use, disclosure, and processing of information as described herein, including through cookies, Tracking Technologies, and third-party analytics or advertising tools, to the extent permitted by law.

Email: [email protected]. For privacy requests, use the subject lines specified in this Policy. For intimate-image removal requests, use the subject line specified in Section 22. © 2026 Ch3rry LLC. All rights reserved.

31. Accessibility of Privacy Disclosures and Alternative Formats

If you require this Policy in an alternative accessible format due to disability, contact [email protected] with subject "Accessible Privacy Policy" and describe the format you need. The Company will make good-faith efforts to accommodate reasonable requests within applicable legal timeframes.

32. Form of This Policy; No Separate Authorship Warranty

This Policy is an operational legal instrument of the Company. Applicable United States consumer-privacy statutes regulate the substance of privacy disclosures (categories of information, purposes, rights, and similar matters). They do not, as of the Last updated date, require the Company to state whether any particular word-processing, research, or drafting tool was used in preparing this Policy. Requirements that apply to lawyers filing papers in certain courts, to advertisements that use synthetic performers, or to systems that impersonate humans, are not authorship-disclosure requirements for this Policy. Nothing in this Section limits any disclosure that a particular statute independently requires concerning automated processing of your personal information, which is addressed elsewhere in this Policy.

33. General Notice Regarding Technology, Vendors, and Business Practices

The Service may rely on a variety of technical systems, vendors, contractors, affiliates, and partners to operate, secure, analyze, promote, and improve the platform. The specific tools, providers, methods, configurations, and integrations used may change from time to time without notice, provided that the Company's overall data practices remain consistent with this Policy or an updated version of this Policy.

References in this Policy to categories of data, purposes of processing, types of technologies, or classes of recipients are intended to be general and illustrative rather than exhaustive. The Company may collect, use, disclose, retain, or otherwise process information in manners substantially similar to those described herein even if a particular example, label, or technical term is not expressly listed.

Nothing in this Policy requires the Company to disclose confidential security measures, trade secrets, vendor identities, system architecture, fraud-prevention methodologies, connection logic, or other sensitive operational details beyond what is reasonably necessary to provide meaningful notice under applicable law. To the extent any ambiguity exists between a general description in this Policy and a specific operational practice, the general description shall control for public-disclosure purposes unless otherwise required by law.

You acknowledge that online services routinely involve the transmission and processing of information across multiple systems and jurisdictions, that perfect anonymity or complete elimination of tracking is not technically guaranteed, and that your choices regarding cookies, communications, account settings, and legal rights may limit but may not entirely prevent all forms of data collection or use described in this Policy.

34. Miscellaneous Provisions, Severability, and Entire Policy

This Policy, together with the Terms of Service and any supplemental notices presented at the point of collection, constitutes the entire privacy-disclosure framework for the Service and supersedes prior privacy statements to the extent of conflict. If any provision is held invalid or unenforceable, the remaining provisions remain in effect to the maximum extent permitted by law.

The Company's failure to enforce any right under this Policy does not waive that right. You may not assign privacy rights without the Company's consent; the Company may assign this Policy in connection with a merger, acquisition, or asset sale. Captions are for convenience only. Where governing law is required for interpretive purposes, the laws of the United States and of the State in which the Company maintains its principal place of business apply except where mandatory law in your jurisdiction controls. The English-language version of this Policy controls.

By continuing to use the Service after reading or having the opportunity to read this Policy, you provide binding acknowledgment that you understand the Company's use of cookies, Tracking Technologies, local storage, device identifiers, third-party analytics and advertising tools, real-time-communications infrastructure, and all other practices described herein, and you agree that such practices may be used for operation, security, analytics, marketing, and improvement of the Service to the extent permitted by law.

© 2026 Ch3rry LLC. All rights reserved.