Privacy Policy

Last updated: December 26, 2025

1. Introduction

This Privacy Policy explains how Brand Enforcer – Tomasz Struk (VAT: PL9662097635), doing business as OnlyErase ("we", "us", or "our"), collects, uses, discloses, and protects personal data when you use the OnlyErase copyright protection service (the "Service").

We are committed to processing personal data lawfully, fairly, and transparently in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, you must not use the Service.

The Service is intended solely for adult content creators and is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

We may update this Privacy Policy from time to time. If material changes are made, we will notify users via email or through the Service. The "Last updated" date reflects the most recent revision.

2. Data Controller

The data controller responsible for your personal data is:

Brand Enforcer – Tomasz Struk
VAT: PL9662097635
ul. Warszawska 55/21
15-062 Białystok
Poland

Email: [email protected]

3. Information We Collect

We collect only the personal data necessary to operate and improve the Service.

3.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored in hashed form)
• Display name or username
• Account preferences and settings

This information is used to create, authenticate, and manage your account.

3.2 Platform Verification Information

To verify copyright ownership, we collect:

• Your OnlyFans profile URL (or similar platform profile)

This information is used solely to confirm that you are the rightful owner or controller of the content you submit for protection.

3.3 Image Fingerprints (Vectors)

When you upload an image:

• The image is processed to generate a non-reversible mathematical fingerprint (vector)
• The original image file is immediately deleted
• Only the fingerprint is stored for matching purposes

These fingerprints cannot be reversed to reconstruct the original image and are used solely to detect unauthorized copies online.

3.4 Usage and Technical Data

We automatically collect limited technical and usage data, including:

• IP address
• Browser and device type
• Timestamps and access logs
• Pages and features used
• Actions performed within the Service

This data is used for security, abuse prevention, service reliability, and performance analysis.

4. How We Use Personal Data

We process personal data for the following purposes:

• Providing and maintaining the Service – Including account management, authentication, and copyright monitoring.
• Detecting unauthorized use of content – Using stored image fingerprints to identify potential infringements.
• Submitting copyright takedown notices – Where authorized, submitting DMCA or equivalent notices on your behalf.
• Notifications and communications – Sending service-related emails, including detection alerts and enforcement updates.
• Improving and developing the Service – Analyzing aggregated and anonymized usage data to improve functionality and performance.
• Marketing communications (optional) – Sending product updates or announcements where permitted by law. You may opt out at any time.

5. Legal Bases for Processing (GDPR)

We rely on the following legal bases under Article 6 GDPR:

• Contractual necessity – to provide the Service you requested
• Legitimate interests – to secure, improve, and operate the Service
• Legal obligation – to comply with applicable laws and regulations
• Consent – where required (e.g., optional marketing communications)

6. Image Privacy and Security

We do not store original images.

Image fingerprints are:

• Generated temporarily
• Stored securely
• Non-reversible
• Never displayed publicly

If you delete an image or close your account, associated fingerprints are permanently deleted in accordance with our retention policy.

7. Information Sharing and Disclosure

We do not sell or rent personal data.

We may share limited data only in the following cases:

7.1 Service Providers

We use trusted third-party processors (e.g., hosting, email delivery, payment processing) who process data on our behalf under contractual confidentiality and data protection obligations.

7.2 Takedown Notice Recipients

When submitting copyright notices, we may disclose:

• Your name or authorized identifier
• Proof of ownership (e.g., platform profile link)
• Details of the infringing and original content

Only the minimum information required by law is shared.

7.3 Legal Requirements

We may disclose data where required by law or valid legal process, or to protect our rights, users, or the public.

7.4 Business Transfers

In the event of a merger, sale, or restructuring, personal data may be transferred subject to equivalent privacy protections.

8. Data Hosting and International Transfers

Our servers are located within the European Union.

In limited cases (such as submitting takedown notices to non-EU entities), personal data may be transferred outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs), or
• Transfers necessary for the establishment, exercise, or defense of legal claims

9. Data Retention

We retain personal data only as long as necessary:

• Account data: Deleted within 30 days of account deletion
• Image fingerprints: Deleted upon image removal or account deletion
• Takedown records: Retained as required for legal compliance
• Usage data: Retained for limited periods, then anonymized

Encrypted backups may temporarily retain residual data until overwritten.

10. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (right to erasure)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

You may also lodge a complaint with your local data protection authority. Our lead authority is the Polish President of the Personal Data Protection Office (UODO).

11. Data Security

We implement industry-standard technical and organizational measures, including:

• Encryption in transit and at rest
• Access controls and audit logging
• Secure EU-based infrastructure
• Ongoing monitoring and security reviews

No system is completely secure, but we continuously improve our safeguards.

12. Contact

For privacy-related inquiries:

Email: [email protected]

Address:
Brand Enforcer – Tomasz Struk
ul. Warszawska 55/21
15-062 Białystok
Poland

13. California Residents

While OnlyErase is EU-based, we do not sell personal information and extend similar rights to California residents under the CCPA/CPRA. Requests may be submitted to [email protected].