Privacy Policy

Last Updated: September 2026

1. Operator Identity

ToyFans is operated out of Dublin, Ireland, with EU-based hosting. For privacy inquiries, contact us at privacy@toyfans.org.

2. Information We Collect

  • Account credentials via Clerk
  • Shop orders and shopping cart details
  • Custom design specifications
  • Creator and Brand media uploads
  • Age verification tokens

3. How We Use It

We use this data to deliver orders, provide a discreet wellness marketplace, and moderate content.

We do not train AI models on your designs or personal content.

4. What We Do Not Do

We do not sell your personal data, ever. We do not use data brokers, third-party advertising trackers, or cross-site profiling.

5. AI and External Processors

We use an AI cascade (Google Gemini, Mistral, OpenRouter, Pollinations) for product design ideation and content level verification.

No PII (Personally Identifiable Information) or identity tokens travel to our AI providers.

6. Data Security

All traffic uses HTTPS. Our encrypted database runs on Turso (LibSQL) in the aws-eu-west-1 region. We use Cloudflare R2 for storage and our primary edge execution runs in Dublin (dub1).

7. Retention & Deletion Policy

We offer 3 guarantees upon account deletion:

  • Private items are hard-deleted.
  • Public aggregates are anonymized (user reference is removed).
  • User records are soft-deleted with a tombstone (all PII is cleared).

8. Signing in with Clerk

We use Clerk for authentication (Google social or email authentication). Access is scoped strictly to basic identity with no onward transfer.

9. Who This Service Is For

Explicit minimum age: Strictly 18+. This is an adult sexual wellness platform.

10. Third-Party Processors

We work with the following third-party processors to provide our services:

  • Clerk: Authentication
  • Turso/LibSQL: Database
  • Cloudflare R2: Storage
  • Vercel: Hosting
  • Upstash: Rate limiting / caching
  • AI Providers: Gemini, Mistral, OpenRouter, Pollinations

11. Your Rights

You have the right to access, rectify, and delete your data.

  • Self-service data export via /api/user/export
  • Self-service deletion via /api/user/delete
  • The right to lodge a complaint with a supervisory authority

12. Changes to this Policy

We may update this policy periodically. When we do, we will revise the 'Last Updated' date at the top of this page.

13. Contact Details

If you have any questions or concerns about your data privacy, please contact us at privacy@toyfans.org.