Last Modified: March 16, 2022
MG Freesites Ltd (hereinafter “we”, “us” or “our”) operates the websites https://www.pornhub.com/ (hereinafter “Pornhub”) and https://www.pornhubpremium.com/ (hereinafter “Pornhub Premium”) (collectively, hereinafter the “Websites”) and is the controller of the information collected or provided via the Websites.
If you have any questions about our privacy practices, please see “Contact Information” below for information on how to contact us.
- on the Websites and your email communications with the Websites,
- through our mobile applications that provide dedicated non-browser-based interaction between you and the Websites, or
The Data We Process About You
We may process different kinds of personal data about you, depending on whether you chose to create an account with us.
Persons who visit the Websites without logging in or registering (“unregistered users”):
- Contact Information: We process email address or any other information which you voluntarily provide to us at your direction for a specific function, for example a contest or survey. In some cases, we process usernames or similar identifiers, and email addresses as part of the process to verify that you are over the age of majority required to have access to the Websites and to view their contents.
- Website activity data: We process information about how you use our Websites, products and services and interact with our content and advertisements, including the pages you visit in our Websites, search history, and the referring web page from which you arrived at our Websites. We process browser and operating system information, devices you use to access the Websites and your time zone setting. We also process online identifiers. Specifically, we process internet protocol (IP) address information and we set cookies as explained below in the section on Cookies and Automatic Data Processing Technologies.
- Identifiers: Some users may be asked to provide identifiers (including government-issued photo identification as well as other documentation) in order to verify that they are over the age of majority required to have access to the Websites and to view their contents. In such cases, this information is processed by trusted third party age verification service providers and is never shared with or retained by us. This policy does not apply to the privacy practices of these third party age verification service providers. Read the privacy terms and conditions of these service providers carefully.
Persons who choose to create an account on Pornhub, including persons who sign up in the Model Partner Program (“registered users”) and persons who choose to upgrade their account on Pornhub to a premium account such that they have access to the content found on Pornhub Premium (“Premium users”):
- We process from registered users the same categories of information described above for unregistered users.
- Contact Information: We process username or similar identifier, and email address.
- Payment and Commercial Information: If you make a purchase, or receive payments from us (such as through our Model Partner Program), we process payment card or account details and related information necessary to process payments. We also process details about payments to and from you and details of products and services you have purchased or received from us.
- User Submitted Personal Information: We process information you submit in order to personalize your account or for a specific function, for example date of birth, age, gender, your interests, preferences, feedback, survey responses, your preferences in receiving marketing from us and our third parties, and your communication preferences, as well as any other information which you voluntarily provide to us at your direction for a specific function.
- Identifiers and Biometric Information: If you choose to register to certain services on the Websites (such as our Model Partner Program), we process identifiers you submit to us (including government-issued photo identification as well as other documentation) in order for us to verify your identity. We also process biometric information in order to verify the authenticity of the identifiers you provide to us while registering for such services as further explained in the section “Biometric Information” below. Some users may be asked to provide identifiers (including government-issued photo identification as well as other documentation) in order to verify that they are over the age of majority required to have access to the Websites and to view their contents. In such cases, this information is processed by trusted third party age verification service providers and is never shared with or retained by us. This policy does not apply to the privacy practices of these third party age verification service providers. Read the privacy terms and conditions of these service providers carefully.
- User Contributions including Audio/Video Information: We provide areas on our Websites where you can post information about yourself and others, communicate with others, upload content (e.g., pictures, video files, etc.), and post comments or reviews of content found on the Websites.
We may process your data to produce and share aggregated insights that do not directly or indirectly identify you and are not associated with you. Such aggregate information is not personal information.
The Sources from Which We Process Personal Information
We process Personal Information in the following ways:
- Directly from you: We process the categories of information listed above directly from you.
- Automated technologies or interactions. As explained in the section below on Cookies and Automatic Data Processing Technologies, we set cookies and other automatic techniques to process website activity data when you visit the Websites or other websites owned by our corporate group.
Purposes for Which We Process Your Personal Information
We process personal information for the purposes described below.
- Provision of services: We process identifiers, website activity data, and, additionally, for registered users and Premium users only, contact information, and payment and commercial information and user contributions to present our Websites and their contents to you, including any interactive features on our Websites, to provide you with information, products or services that you request from us, and to verify your eligibility and deliver prizes in connection with contests and sweepstakes.
- Customer management (Registered Users and Premium Users Only): We process identifiers and contact information, and payment and commercial information to manage a Premium users’ and registered users’ account, to provide customer support and notices to the registered user about his account or subscription, including expiration and renewal notices, and notices about changes to our Websites or any products or services we offer or provide through them. We process identifiers and biometric information for the purpose of verifying your identity and the authenticity of the identifiers you provide to us while registering for certain services on the Websites.
- Customization of content and marketing (Unregistered Users and Registered Users Only): We process identifiers and contact information, website activity data, user submitted personal information and user contributions to analyze your use of, or interest in, our Websites’ content, products, or services, in order to develop and display content and advertising tailored to your interests on our Websites.
- Analytics: We process identifiers and website activity data to determine whether users of our Websites are unique, or whether the same user is using the Websites on multiple occasions, and to monitor aggregate metrics such as total number of visitors, pages viewed, demographic patterns.
- Functionality and security: We may process any of the categories of data we process to diagnose or fix technology problems, to verify your payment information, and to detect, prevent, and respond to actual or potential fraud, illegal activities, or intellectual property infringement.
- Compliance: We may process any of the categories of data we process to enforce our terms and conditions and to comply with our legal obligations. In certain jurisdictions, this includes our legal obligation to verify the age of users having access to our Websites.
Our Legal Bases Under EU Law
We have the following legal bases under EU law for processing your personal data for the purposes described under Section Purposes for Which We Process Your Personal Information:
- We process personal data for the purposes of providing the services, customer management, certain customization of content (e.g., based on your selected preferences, favorites and ratings), and functionality and security because the processing is necessary for the performance of a contract, specifically it is necessary to provide the services or products you have requested, or to provide our Websites and services in a manner consistent with our terms and conditions and any other contract that you have with us.
- We process personal data, including identifiers, for the purpose of verifying your identity because such processing is necessary for us to comply with a legal or regulatory obligation.
- We process biometric information based upon your consent to do so.
- We process personal data for the purposes of customization of advertising, marketing and analytics for our legitimate interests.
- We process personal data for functionality and security because it is necessary for our legitimate interests, and in certain cases because the processing is necessary for us to comply with a legal or regulatory obligation.
- We process personal information in specific circumstances where you have provided your consent to such processing.
Disclosure of Your Personal Information
We disclose personal information:
- To the public: When you submit user contributions including audio/video content, you are using our Websites and services to make that information public.
- Within our corporate group: We may disclose any of the categories of personal information to members of our corporate group (including affiliates and related entities) to the extent this is necessary for our purposes listed in the sections above.
- Service providers: We disclose the categories of personal information we process to our authorized service providers that perform certain services on our behalf. These services may include payment processing and fulfilling orders, identity and document authenticity verification including biometric processing, age verification, risk and fraud detection and mitigation, customer service, marketing and advertising, customization of content, analytics, security, or hosting our Websites or supporting our Websites’ functionality. These service providers may have access to personal information needed to perform their functions but are not permitted to process such information for any other purposes.
- Legal successors: We may disclose all of the categories of personal information we process to a buyer or other successor in the event of a merger, acquisition or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding.
As you navigate through and interact with our Websites, we use automatic data processing technologies to process website activity data.
We currently use the following types of cookies, which are set by the Websites’ domains, or by other domains we own or control:
- Strictly necessary cookies: These are cookies that are required for the operation of our Websites. These include, for example, cookies that enable a user to log in to our Websites and to check if a user is allowed access to a particular service or content.
- Functionality cookies: These cookies help us to personalize and enhance your online experience on our Websites. This type of cookies allows us to recognize you when you return to our Websites and to remember, for example, your choice of language.
- Analytics cookies: These cookies allow us to recognize and count the number of users and to see how users use and explore our Websites. These cookies help us to improve our Websites, for example by ensuring that all users are able to find what they are looking for easily.
- Targeting and Advertising cookies: These cookies record visits of a user on our Websites, the pages a user visits and the links a user follows in order to enable us to make our Websites more relevant to the user’s interests and to help us serve ads that might be of interest to the user. Targeting and advertising cookies are only used for unregistered users and registered users.
- Cookies can be either session cookies or persistent cookies. A session cookie expires automatically when you close your browser. A persistent cookie will remain until it expires or you delete your cookies.
Do Not Track: Our systems do not recognize browser “Do Not Track” signals.
Use of Google Analytics. We use Google as a service provider to process information about how users use the Websites, including by processing website activity data through first-party cookies set by our domains, and third-party cookies set by Google. Because we activated IP anonymization for Google Analytics, Google will anonymize the last octet of a particular IP address and will not store your full IP address. Google will process the information only for the purpose of providing Google Analytics services to us, and will not process this information for other purposes. The information processed by Google Analytics may be transmitted to and stored by Google on servers in the United States pursuant to standard contractual clauses approved by the EU. You can learn more on how Google processes data here, and you can opt-out of Google Analytics by visiting the Google Analytics opt-out page.
Third-party Process of Cookies and Other Tracking Technologies
You can set your browser to refuse all third-party cookies, or to alert you when cookies are being sent.
Your Choices About How We Process and Disclose Your Personal Information
We strive to provide you with choices regarding the personal information you provide to us.
- You can choose not to provide us with certain personal information, but that may result in you being unable to use certain features of our Websites because such information may be required in order for you to register as a member; purchase products or services; participate in a contest, promotion, survey, or sweepstakes; ask a question; or initiate other transactions on our Websites.
- As explained in the section Cookies and Automatic Data Processing Technologies, you may set your browser to refuse some or all cookies. In addition, you may opt out of Google Analytics by visiting the Google Analytics opt-out page.
- You can opt out of receiving marketing emails from us using the opt-out link provided in our emails. If you are a Registered User, we may continue to send you other types of transactional and relationship e-mail communications, such as emails about your account or orders, administrative notices, and surveys.
- You may use your account settings to delete your user contributions and audio/video information.
- You may also delete and deactivate your account with us at any time. If you do so, your profile will no longer be accessible by you. If you later choose to have an account with us, you will have to sign up for a new account as none of the information you previously provided or saved within your account will have been saved.
Your Rights Related to Your Personal Information
You have certain rights regarding the personal information we process and that is related to you, including the right:
- to receive information on the personal information we hold about you and how such personal information is processed (right to access);
- to correct inaccurate personal information concerning you (right to data rectification);
- to delete/erase your personal information (right to deletion, “right to be forgotten”);
- to receive the personal information provided by you in a structured, commonly used and machine-readable format and to transmit the personal information to another data controller (right to data portability)
- to object to the processing of your personal information where such processing is based on our legitimate interests or on public interests (right to object);
- in some cases, to restrict our processing of your personal information (right to restriction of processing); and
- to withdraw your consent at any time where our processing is based on consent.
You may exercise your right to access and deletion using the buttons at the bottom of this page. Additionally, you may, at any time, send us an e-mail at email@example.com to exercise your above rights in accordance with the applicable legal requirements and limitations. If you are located in the European Economic Area or the UK, you have a right to lodge a complaint with your local data protection authority.
Please note that unless you have created an account with us, we may not have sufficient information to identify you and therefore may not be in a position to respond to your request. Additionally, in some cases in order to adequately verify your identity or your authorization to make the request, we may require you to provide additional information.
Note that some requests to delete certain personal information will require the deletion of your user account as the provision of user accounts are inextricably linked to the processing of certain personal information (e.g., your e-mail address).
California Rights and Choices
The California Consumer Privacy Act (“CCPA”) provides you certain rights in relation to your personal information:
- Right to Know: You have the right to request that we disclose certain information about our processing of your personal information over the past 12 months, including the specific pieces of information we processed.
- Right to Request Deletion: You have the right to request that we delete any of your personal information we processed from you and retained, subject to certain exceptions set forth in the CCPA.
- Right to Non-Discrimination for the Exercise of Your Rights: We will not discriminate against you because you have exercised any of your rights under the CCPA.
To exercise the rights described above, please use the buttons at the bottom of this page or email us at firstname.lastname@example.org with the email subject line “CCPA Request.” In either case you will need to provide the following information to verify your identity and enable us to locate your information in our systems: your username and email address that you used to create an account with us, as well as any other information which we may reasonably request in order for us to verify your identity. We may require you verify that you have access to your account and/or email account that you used to register with us.
You can designate an agent to make a request by executing a notarized power of attorney to have that person act on your behalf and providing that person with the information listed above that allows us to verify your identity and locate your information. Alternatively, you will need to directly confirm your identity with us using the methods described above, sign an authorization for the agent to act on your behalf and provide us with confirmation that you have done so.
We disclose certain categories of California residents’ personal information for our business purposes, as described in the section above titled Disclosure of Your Personal Information.
We do not sell California residents’ personal information.
Notice to Nevada Residents/Your Nevada Privacy Rights
We do not exchange Nevada residents’ personal information for money with anyone so they may license or sell the personal information to additional parties.
We employ third-party service providers to help verify your identity and age and to check the authenticity of identification documents you provide using facial recognition technology. The facial recognition technology creates a mathematical representation of your face and detects facial features from the live scan of your face, your selfie, and the government-issued ID you submit or previously submitted to us. This mathematical representation, which is considered biometric information/identifier/data under the laws of certain states and countries, is not shared by our service providers with us, and is deleted by our service providers 7 days after its creation. Information derived from this mathematical representation, which may be considered biometric information/identifier/data under the laws of certain states and countries, is shared by our service providers with us and is deleted by us as further described below.
Your biometric information will be processed to:
- verify you are a real, live person and to prevent the use of methods which would allow a user to identify as someone else;
- to match your selfie with your government-issued ID you submit or previously submitted to us to make sure that nobody is impersonating you;
- to help confirm your age.
We may disclose your biometric information, face scan, selfie, and government-issued ID (including any government-issued ID or selfie you previously submitted to us) with members of our corporate group, and with third-party service providers. These entities may be located in jurisdictions that do not offer the same level of data protection as your jurisdiction. We (and/or any of these entities) may perform facial recognition and process your biometric information from your face scan, selfie and any government-issued ID, and processing your biometric information for the above purposes.
Biometric information shared by our service providers with us will be stored for as long as you have a Pornhub Model Partner Program account. We will delete your biometric information within three (3) years of you deleting your Pornhub Model account or withdrawing your consent, subject to any legal obligations we might have.
You will be asked to provide your consent to biometric processing. You may withdraw your consent to this processing at any time by using the links below. Withdrawing your consent will not affect the lawfulness of any processing or disclosure that occurred prior to the withdrawal.
Please note that this section entitled “Biometric Information” applies to relevant users who wish to upload content onto our Websites (through Pornhub’s Model Partner Program for example) but does not apply to identifiers processed by our third-party age verification service providers solely for the purpose of granting you access to our Websites in order to view the contents found thereon.
Transfers of Your Personal Information to Other Countries
Where the laws of your country allow you to do so, by using the Websites you consent to the transfer of information that we process about you, including personal information, to other countries in which we, members of our corporate group (including affiliates and related entities) or our service providers are located. When we transfer personal information to countries outside of the European Economic Area (“EEA”) or other regions with comprehensive data protection laws, we will ensure that the information is transferred in accordance with the applicable laws. Where relevant, our transfers outside the EEA are made pursuant to standard contractual clauses approved for use by the European Union.
Retention of Personal Information
We will only retain your personal information for as long as your account is active, or for as long as necessary to fulfil the purposes we processed it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider a number of factors, including what personal data we are processing, the risk of harm from any unauthorised disclosure, why we are processing your personal data and whether we can achieve this outcome by another means without having to process it.
Where permissible, we will also delete your personal information upon your request as explained above in the section “Your Rights Related to Your Personal Information”.
Third-Party Links and Sites
You may also contact us at 195-197 Old Nicosia-Limassol Road, Block 1 Dali Industrial Zone, Cyprus 2540, Phone: +357 22662 320, Fax: +357 22343 282.
Our Data Protection Officer can be contacted at the following email address: email@example.com.
GDPR (General Data Protection Regulation)
In accordance with the General Data Protection Regulation law in the European Union effective May 25, 2018, Pornhub users can request a copy of their personal data as well as get Pornhub to delete their personal data.