Privacy Policy

1. Controller Information

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Johannes Habel
Bahnstr. 21
06886 Lutherstadt Wittenberg
Germany
Email: echteralsfakebs@proton.me

2. Data Not Collected by the Porn Fetch Application

The Porn Fetch application runs locally and does not transmit browsing history or records of downloaded videos to my server. My application server does not log visitor IP addresses. It keeps aggregate counters for requests, transfer volume and approximate daily visitors. For the daily visitor count, the connection IP address is used only in memory with a secret, day-specific context to produce a non-reversible check value. Only those check values are retained briefly to prevent duplicate counting; the permanent records contain only totals by day, host and broad page section. No user profiles are created and visits are not linked across days or websites. Purchase and license-fulfilment data are processed separately as described below.

3. Self-Hosted Server & Internet Service Provider

This website is self-hosted on my own hardware. My internet connection is provided by Vodafone GmbH (Edmund-Rumpler-Straße 2, 51149 Köln, Germany) as the Internet Service Provider (ISP). As a telecommunications provider, Vodafone may be legally required to retain certain connection data (such as IP addresses and port numbers) for a limited period under applicable German telecommunications law (TKG) and potential future data retention legislation (Vorratsdatenspeicherung). This data retention is performed by Vodafone in its capacity as an ISP and is outside of my control. I have no access to and do not request any of Vodafone's retained data. For more information, please refer to Vodafone's privacy policy.

4. Privex VPS & WireGuard Transport

Public connections first reach a virtual private server operated by Privex Inc. in Sweden. The VPS forwards the still-TLS-encrypted connection through a WireGuard tunnel to my Acer Swift 3 or Google Pixel 7 Pro in Germany. HTTPS is terminated by my reverse proxy on the German endpoint, after the WireGuard tunnel; Privex does not terminate HTTPS for this website.

Privex and the data-centre/network operators involved in providing the VPS may process connection data required to route and secure the service, including:

• Source and destination IP addresses — for traffic routing, service operation, and abuse prevention
• Connection metadata — such as timestamps, ports, protocol, and traffic volume

The additional WireGuard encryption protects traffic between the Swedish VPS and the German endpoint. For more information about Privex's handling of data, please refer to Privex's Privacy Policy.

5. No Cookies or External Analytics Providers

This website uses no cookies, whether first-party tracking cookies or third-party cookies. A small self-hosted script reports only the broad page section to my server for the daily aggregate count described in section 2; URL parameters and page titles are not transmitted. I do not load external fonts (such as Google Fonts), external stylesheets, third-party analytics scripts, advertising networks, social media plugins, or other external resources. All assets are served directly from my own server.

6. Payment Processing via NowPayments.io

If you choose to purchase a license, payment is processed through cryptocurrency via NowPayments.io (operated by FD Transfers LLC). NowPayments widgets are embedded on my checkout pages. When you interact with these widgets, NowPayments may process the following data:

• Cryptocurrency wallet addresses and transaction data
• Transaction amounts and timestamps
• IP addresses and browser/device information
• In certain cases, KYC/AML verification data (identity documents) if required by applicable regulations

At checkout, you are asked to select your country so that the place of supply can be documented for tax purposes and geographic restrictions can be applied. When you submit the checkout form, my server temporarily processes the connection IP address in memory and compares its country with your selection using a locally installed DB-IP City Lite database. No geolocation API request is made. The IP address and any subdivision result are discarded before the application handles or logs the request. Only the selected country name, the fact that customer declaration and local IP geolocation agreed, and the database release label are retained with the transaction. No street, billing, or other address is requested or stored for this check. DB-IP City Lite is provided by DB-IP.com under CC BY 4.0.

NowPayments acts as an independent controller for its payment processing. My server stores the order and provider identifiers, payment status, invoice details, amount, currency, transaction hash, selected country and country-evidence metadata needed to verify and document a purchase. It does not store cryptocurrency wallet addresses. The cryptocurrency checkout does not require a name or email address. The generated license file contains an opaque license identifier and a cryptographic signature, but no name or email address.

Please note that blockchain transactions are public by nature and can be viewed by anyone on the respective blockchain network. For more information about how NowPayments handles your data, please refer to NowPayments' Privacy Policy. For data-related inquiries to NowPayments, contact: support@nowpayments.io.

7. Patreon Membership and License Delivery

If a paid Patreon membership includes a Porn Fetch license, Patreon sends a signed webhook to my server. Depending on the member's sharing preference and the API permissions, this contains a Patreon member identifier, email address, membership and entitlement status, tier identifiers, and charge status. The data are used only to verify eligibility, prevent duplicate issuance and deliver the contractual license benefit. Free, gifted, trial, unpaid or declined memberships do not receive a license through this process.

The email address is validated in memory and passed to the configured outgoing mail server with the bilingual delivery message and signed license attachment; it is not stored in the Patreon delivery table and the raw webhook is not retained. The server stores the Patreon member identifier, issued license key, delivery status and timestamps so retries cannot issue multiple keys. Patreon members may restrict email sharing; automatic email delivery is then unavailable. Patreon provides member data under its Creator Privacy Promise. For more information, see Patreon's Privacy Policy and Creator Privacy Promise.

License activation

The self-hosted licensing service at licenses.pornfetch.to stores a license identifier, its signed credential, up to ten random installation UUIDs, and necessary activation and renewal timestamps. It does not collect hardware identifiers, hostnames, browsing history or downloaded content. Customer email addresses and payment-provider references are not sent to Keygen. Installation records remain until deactivation or deletion of the license. A valid license permits seven days of provisional access on first offline import; after activation, signed offline permits last seven days from renewal. Requests normally renew once daily while the application is used. Licensing access logs and external telemetry are disabled; encrypted local backup snapshots expire after seven days.

8. External Links

This website may contain links to external third-party websites. I have no control over the content, privacy practices, or data processing of these external sites. Following any external link is entirely at your own risk. I assume no liability or responsibility for the privacy practices or content of any linked third-party websites. I encourage you to review the privacy policies of any website you visit via links from my site.

9. Legal Basis for Data Processing

Where personal data are processed for website transport and hosting, payment handling or Patreon license fulfilment, the legal bases are:

• Art. 6(1)(b) GDPR — Contractual necessity: verifying a purchase or paid membership and issuing and delivering the license.
• Art. 6(1)(f) GDPR — Legitimate interests: website and webhook security, abuse prevention, reliable retry handling, prevention of duplicate license issuance, and the conservative geographic store policy.
• Art. 6(1)(c) GDPR — Legal obligation: determining and documenting the applicable tax treatment, complying with geographic restrictions where legally required, and retaining invoice and accounting information where required by law.

10. Your Rights Under EU Law (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding personal data processed for website operation, purchases and license delivery:

• Right of Access (Art. 15 GDPR) — You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, to obtain a copy of that data.
• Right to Rectification (Art. 16 GDPR) — You have the right to request correction of inaccurate personal data.
• Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR) — You have the right to request the deletion of your personal data, provided no legal retention obligations apply.
• Right to Restriction of Processing (Art. 18 GDPR) — You have the right to request the restriction of processing of your personal data under certain circumstances.
• Right to Data Portability (Art. 20 GDPR) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR) — You have the right to object to processing based on legitimate interests (Art. 6(1)(f) GDPR) at any time, on grounds relating to your particular situation.

To exercise any of these rights, please contact me at echteralsfakebs@proton.me. I will respond to your request without undue delay and in any event within one month of receipt (Art. 12(3) GDPR).

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority for my location is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
Leiterstraße 9
39104 Magdeburg
Germany
Website: https://datenschutz.sachsen-anhalt.de

12. Data Retention

Before software updates, access-restricted local backups of the database, invoices and configuration are created for recovery. They are not served publicly. Deletion in the running service does not automatically remove these backups. Maintenance instructions require manually removing obsolete backups within seven days and before applicable deletion deadlines; backup expiration is not automated.

Patreon webhook bodies and member email addresses are not retained by my server. The member identifier, license mapping and delivery timestamps are kept while the issued license remains valid so it can be verified and duplicate delivery can be prevented; they are deleted on a valid erasure request unless contractual or legal obligations require continued retention. Transaction, invoice, selected-country and country-evidence records are retained for the applicable statutory accounting period; records covered by EU One-Stop-Shop requirements may need to be retained for ten years. They are otherwise kept only as long as needed for contractual claims and support. Checkout IP addresses and subdivision results are not retained by my application. Privex, Patreon, NowPayments, the configured mail service and Vodafone retain data according to their own applicable policies and legal obligations.

13. Changes to This Privacy Policy

I reserve the right to update this privacy policy at any time to reflect changes in legal requirements, technical changes, or business practices. The date at the top of this page indicates when this policy was last updated. I encourage you to review this policy periodically.

14. Contact

If you have any questions regarding this privacy policy or wish to exercise your data subject rights, please contact me at:
echteralsfakebs@proton.me