Privacy Policy

Effective September 24, 2026 · Last updated October 1, 2026

This Privacy Policy explains how Peek Entertainment, LLC (“Peek Entertainment”, “Peek”, “we”) collects, uses, shares and protects personal information when you use the Peek website and progressive web app (the “Service”). Peek Entertainment is the data controller for the Service. Because Peek is an adult-oriented platform, we treat the fact that you hold an account, and much of the data described here, as sensitive and handle it accordingly.

1. At a glance

• We collect what is needed to run an age-verified creator subscription platform: your email, handle and profile, an age-verification result (never your ID documents), your content and messages, subscription and transaction records (never full card numbers), device and log data, and push-notification registrations you opt into.
• We do not sell your personal information and we do not run third-party advertising or ad trackers.
• Your legal name and email are never shown to other users. Creators see your handle and plan tier, not your email or payment details.
• We share data only with the service providers that run the platform (hosting, database, email, age verification, payments, push delivery), with authorities when the law requires or safety demands it, and in a corporate transaction.
• You can access, correct, export or delete your data, control push notifications per device, and object to marketing. Contact services@thepeekentertainment.com.

2. Information we collect

2.1 Information you give us

• Account. Email address (used for passwordless sign-in codes), the date you accepted our Terms, and your role (member, creator).
• Profile. Handle, display name, bio, avatar and cover images, an optional gender field, and whether you are a creator or verified. Profile information is visible to other signed-in users.
• Content. Posts (image and caption), the audience level you set, comments, loves, saved posts and the creators you follow.
• Messages. Direct messages you send and receive, including any images, and the time they were sent.
• Creator business details. For creators: plan names, descriptions and prices; payout method details (bank or PayPal identifiers); tax forms (W-9/W-8) when payouts launch.
• Reports, complaints and appeals. Anything you include when you report content, file a complaint (with or without an account), appeal a decision, or email us — including your email address if you use the public complaint form, so that we can send you a case number and the outcome.
• Creator applications. Legal name, country, stage name, content description, optional links to other profiles, and your attestations. Where we request § 2257 records, the documents you upload in response (kept private to compliance staff).
• Blocks. The accounts you block.

2.2 Age and identity verification

Before you can use the Service you complete verification with our partner (Yoti). The partner processes your government ID and/or a facial age estimate on its own systems under its own privacy notice. Peek receives and stores only: a verification session reference, the outcome (approved / rejected / timed out), the type of check (age or identity), the provider name and a timestamp. We do not receive or store images of your ID or your face. Verification outcomes are retained while your account exists to prove that access was lawfully granted.

2.3 Payments

Payments are taken by our merchant of record / payment processor (CCBill) on a hosted checkout page. We receive a transaction reference, type (subscription, rebill, tip, refund, chargeback), amount, plan, currency and status, plus the processor’s subscription identifier. We never receive or store your full card number, CVV or bank credentials. The processor’s privacy notice governs the data it collects.

2.4 Information collected automatically

• Session and security data. When you sign in we record the IP address and browser user-agent of the session and a session token stored in a cookie.
• Push notification registrations. If you enable notifications, your browser gives us a push endpoint URL and encryption keys, which we store along with a device name you can edit, the user-agent, and when the device was last seen. One record exists per browser or installed app.
• Usage and analytics. We measure visits to our public and sign-up pages only (the landing page, house rules, sign-in, age verification, handle selection, creator application and legal pages). Inside the Service our analytics are totals only: hourly counts of actions such as swipes, searches and posts opened, with no account attached, and the hours in which an account was active (not what it viewed). Separately, the Service remembers which posts you have already seen so your feed can show you new ones. For the public and sign-up pages we keep our own aggregate statistics: the page path, referring website, campaign tags (utm_*), country/region, device type, browser and operating system, and a visitor identifier that is a one-way hash of your IP address and user-agent with a secret that changes every day and is deleted after two days, so it cannot be linked back to you or followed across days. The IP address and full user-agent are not stored with a page view. We also use Vercel Analytics, a cookie-less service, on the same pages. We do not use Google Analytics, advertising pixels or cross-site trackers.
• Sign-up source and device signals. When you create an account we record what first brought you to Peek (referring website, campaign tags and the first page you landed on, held in a first-party cookie for up to 30 days before sign-up) and, to detect fake or duplicate accounts and abuse, the IP address, user-agent, approximate location (country, region, city), language, time zone, screen size and similar device characteristics of the browser used to sign up.
• Approximate location. Creators can hide their profile from chosen countries or US states. To honour that we look at the country and region our hosting provider derives from your IP address on each request; it is used for that check and not stored with your account.
• Server logs. Our hosting provider records request logs (IP address, URL, timestamp, status, user-agent) for security and debugging, retained for a limited period.
• Local storage and cookies. See Section 8.

2.5 Information from other users

Other users may mention you in comments or messages, or report your content. Creators may upload content in which you appear; they are required to hold your consent and age records before doing so.

2.6 Sensitive information

By its nature, holding a Peek account and your subscription choices may reveal information about your sexual life or orientation. We process this only to provide the Service you have asked for, with your explicit consent where required, and never for advertising or profiling for unrelated purposes.

3. How we use information

We do not use your data to train generative-AI models, and we do not make decisions with legal or similarly significant effects about you solely by automated means, other than automated screening of content for illegal material, which is always subject to human review on appeal.

4. How we share information

4.1 With other users

• Your handle, display name, bio, avatar, cover, follower count and verified badge are visible to all signed-in users. Your email, legal name, verification data and payment data are never shown.
• Creators can see the handle and plan tier of their subscribers and followers, and the messages you send them.
• Comments you post are shown with your handle to anyone who can view the post.

4.2 With service providers (processors)

We share data with providers who process it on our behalf, under contracts that restrict their use of it:

• Vercel, Inc. — Application hosting, content delivery, file storage (Vercel Blob) and privacy-friendly site analytics (Vercel Analytics).
• Neon, Inc. — Managed Postgres database hosting for account, profile, content and transaction records.
• Resend, Inc. — Transactional email delivery (sign-in codes, welcome and account emails, announcements you have opted into).
• Yoti Ltd — Age and identity verification. Yoti processes your ID or facial age estimate and returns only a pass/fail result to Peek.
• CCBill, LLC — Payment processing for subscriptions and tips. CCBill handles all card data; Peek never receives your full card number.
• Apple, Google and Mozilla push services — Delivery of web push notifications to devices where you have enabled them.

4.3 For legal, safety and compliance reasons

We disclose information when we believe in good faith it is required by law, subpoena, court order or other legal process; to report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as required by 18 U.S.C. § 2258A; to report suspected human trafficking or exploitation to law enforcement; to protect the rights, property or safety of Peek, our users or the public; to detect and prevent fraud; or to enforce our Terms. See our Anti-Trafficking & Exploitation Policy.

4.4 Corporate transactions

If Peek Entertainment is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

4.5 With your direction

We share information when you ask us to, for example when you use a “share” feature or link a payout account.

We do not sell personal information and we do not share it with third parties for their own marketing or cross-context behavioural advertising.

5. How long we keep information

• Account and profile data — while your account is active, then deleted within 30 days of a deletion request, except as noted below.
• Content and messages — until you delete them or your account is deleted; copies may persist in encrypted backups for up to 30 further days.
• Age-verification outcome — for the life of the account plus 7 years, as evidence of compliance with age-verification laws.
• Transaction and payout records — 7 years, to meet tax, accounting and anti-fraud obligations.
• Records of removed illegal content and related account data — as required by law (for example, 18 U.S.C. § 2258A requires preservation of reported material for at least one year) and to prevent re-registration by banned users.
• Complaint and appeal records — 3 years from closure, so that appeals, neutral review and card-network audits can be completed.
• Account-deletion record — a hashed copy of your email, the deletion date and whether you were a creator, kept so we can prove the deletion and honour bans.
• Server logs and analytics — typically 30–90 days for logs; analytics are aggregated.
• Push registrations — until you remove the device, disable notifications, or the endpoint is reported dead by the push service.

6. Your choices and rights

6.1 Controls in the app

• Profile → Personal Details: view your handle, email and verification status.
• Profile → Edit Bio: change your display name and bio. Creators can delete posts under Manage Posts.
• Profile → Notifications: turn announcement emails on or off, enable or disable push per device, rename devices, remove devices, send a test.
• Profile → Blocked Accounts: manage who you have blocked.
• Profile → Personal Details → Delete my account: delete your account yourself, immediately.
• Profile → My Subscriptions: view and cancel subscriptions.
• Theme preference (light/dark) is stored only on your device.

6.2 Rights available to everyone

Regardless of where you live, you may ask us to:

• Access the personal information we hold about you and receive a copy in a portable format;
• Correct inaccurate information;
• Delete your account and personal information (we will retain only what Section 5 requires);
• Object to or restrict certain processing, including marketing announcements;
• Withdraw consent where processing is based on consent (for example push notifications), without affecting prior processing.

Send requests to services@thepeekentertainment.com from the email address on your account, or write to us at the address below. We will verify your identity (usually by sending a code to your account email) and respond within 30 days (45 days where permitted by law). You may use an authorised agent; we will ask for proof of authority. We will not discriminate against you for exercising your rights.

6.3 California and other U.S. state residents

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a comprehensive privacy law, you have the rights described above, including the right to know the categories of personal information we collect (identifiers, account and commercial information, internet activity, sensitive information as described in Section 2.6, and user-generated content), the sources (you, your device, our verification and payment partners), our business purposes (Section 3) and the categories of third parties we share with (Section 4). We do not “sell” or “share” personal information as those terms are defined under the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes other than those permitted by law. We do not knowingly collect personal information from anyone under 18. You may appeal a decision on your request by replying to our response; if we deny your appeal you may contact your state attorney general.

6.4 European Economic Area, United Kingdom and Switzerland

We rely on the legal bases in Section 3. You have the rights in Section 6.2 plus the right to lodge a complaint with your local supervisory authority. Our servers are in the United States; where we transfer your data from the EEA/UK we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, or our providers’ participation in the EU-U.S. Data Privacy Framework. Contact services@thepeekentertainment.comfor a copy of the relevant safeguards.

6.5 Marketing and “Do Not Track”

We may send occasional service announcements about Peek. Transactional messages (sign-in codes, receipts, security and policy notices) are necessary to run your account and cannot be disabled while your account exists. You can turn off push notifications per device and turn off announcement emails under Profile → Notifications, or use the unsubscribe link in any announcement email. We do not respond to browser Do Not Track signals because there is no industry standard, but we honour Global Privacy Control signals as an opt-out of any “sale” or “sharing” (of which we do none).

7. Security

We protect your information with encryption in transit (TLS) and at rest, passwordless sign-in codes that expire after 10 minutes, HTTP-only session cookies, access controls that limit staff access to what their role requires, and separation of production and development data. No system is perfectly secure; if we learn of a breach affecting your data we will notify you and regulators as required by law. Please protect your email account, since it controls access to Peek.

8. Cookies and local storage

Peek uses first-party cookies and local storage only: those that are strictly necessary to run the Service, plus the two measurement and fraud-prevention cookies listed below. We do not use advertising or third-party tracking cookies.

9. Children

The Service is strictly for adults. We do not knowingly collect information from anyone under 18, and every account must pass age verification before access is granted. If you believe a minor has accessed the Service or appears in any content, contact services@thepeekentertainment.com immediately; we will remove the account and content and report to NCMEC and law enforcement as required.

10. International users

Peek Entertainment is based in the United States and processes data there. By using the Service from elsewhere you understand your information will be transferred to and processed in the United States, subject to the safeguards in Section 6.4.

11. Changes to this Policy

We will post any changes here and update the “last updated” date. For material changes we will notify you through the Service or by email before they take effect.

12. Contact us

Peek Entertainment, LLC
Attn: Privacy
Tampa, Florida, United States
services@thepeekentertainment.com