Privacy Policy

1. Introduction

Aquarix LLC ("we", "us", "our") operates CosplayXclusive (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. By using CosplayXclusive you agree to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

2.1 Information you provide directly

• Account information: username, email address, password (hashed), role (fan/creator).
• Profile information: display name, bio, avatar image, fandom tags, subscription pricing.
• Payment information: billing details collected and processed by Stripe. We do not store raw card numbers.
• Content: photos, captions, messages, and comments you upload or send.
• Communications: messages or emails sent to our support team.

2.2 Information collected automatically

• Usage data: pages visited, features used, clicks, and session duration.
• Device & browser data: IP address, browser type, operating system, and device identifiers.
• Cookies & similar technologies: session cookies for authentication and analytics cookies for performance measurement.

2.3 Information from third parties

• Stripe: transaction identifiers, payout status, and fraud signals.
• Vercel: hosting and edge-network performance data.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Process subscriptions, pay-per-view purchases, tips, and creator payouts.
• Deliver content you have subscribed to or purchased.
• Send transactional emails (e.g., receipts, account alerts).
• Send service announcements and policy updates.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms & Conditions.
• Improve and personalise the Platform through aggregate analytics.

We do not sell your personal information to third parties.

4. Sharing of Information

We may share your information in the following circumstances:

• Service providers:Supabase (database & storage), Stripe (payments), and Vercel (hosting) — only to the extent necessary to provide the Platform.
• Other users: your public profile information (username, display name, avatar, bio) is visible to other users. Content you publish is visible according to the access level you set (free / subscriber-only / pay-per-view).
• Legal requirements: we may disclose information when required by law, subpoena, court order, or to protect our legal rights, or if we believe disclosure is necessary to prevent imminent harm or illegal activity.
• Child safety:we will report any apparent child sexual abuse material (CSAM) to the National Center for Missing & Exploited Children (NCMEC) and cooperate fully with law enforcement investigations.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity.

5. Cookies & Tracking Technologies

We use essential cookies for authentication (session management) and may use analytics cookies to understand how the Platform is used. You can disable non-essential cookies in your browser settings; however, doing so may affect Platform functionality, including your ability to stay logged in.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal compliance, fraud prevention, or dispute resolution purposes.

Content you have published may remain visible if other users have legitimately obtained access (e.g., purchased a PPV post) unless subject to a valid takedown request.

7. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest via Supabase, hashed passwords (via Supabase Auth), and role-based access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please notify us immediately at security@cosplayxclusive.com if you believe your account has been compromised.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Objection / restriction: object to or restrict certain processing activities.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@cosplayxclusive.com. We will respond within 30 days.

9. Children's Privacy

CosplayXclusive is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from persons under 18. If we discover that a minor has provided us with personal information, we will delete it immediately and terminate the associated account. If you believe a minor has registered, please contact us at support@cosplayxclusive.com.

10. International Transfers

CosplayXclusive is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to this transfer.

11. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you by email or in-Platform notice. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

13. Contact & Data Controller

The data controller for personal information collected through CosplayXclusive is: