Privacy Policy
Last updated: October 16, 2026 · POP OFF LIVE (popofflive.com), operated by Garry D.
1. The short version
POP OFF LIVE is free for the audience and carries no ads, ever — so we do not collect data to sell, and we do not sell personal data to anyone. We collect the minimum needed to run the app: your account details, the content you post, and basic technical logs. Our only cookie is the one that keeps you signed in.
2. What we collect
Account information: your email address, display name, handle, password (stored only as a salted cryptographic hash — we cannot see it), and your date of birth. Your date of birth is used only to enforce the 18+ rule and is never displayed on your profile or shared.
Content you create: videos you upload (after the owner's approval), comments, room chat messages, profile text, and the gifts you send or receive (kept as an internal ledger).
Activity basics: follows, likes, room presence, reports you file, members you block, and moderation actions — the records the app needs to function and stay safe.
Technical data: standard server logs (IP address, browser type, timestamps) kept by our hosting provider, Cloudflare, for security and abuse prevention.
3. Why we collect it
To run your account and the app's features; to enforce the 18+ rule; to let the owner review uploads before they go public; to run the gift ledger and (later) host payouts; to respond to reports and keep the community safe; and to protect the service from abuse and attacks. That is the whole list.
4. Cookies
We use exactly one cookie: a session cookie that keeps you signed in for up to 30 days. It is HttpOnly (page scripts cannot read it) and contains a random token, not your personal information. There are no advertising cookies and no third-party tracking cookies on POP OFF LIVE.
5. Who we share data with
We do not sell personal data. We do not rent it. We do not hand it to advertisers — there aren't any.
We use service providers to run the app: Cloudflare (hosting, database, video storage) and LiveKit (live video) process data on our behalf to deliver the service. When the payments phase launches, a payment processor (such as Stripe) will handle purchases and host payouts under its own privacy terms, and hosts who cash out will go through that processor's identity checks — we never see your full card number.
We may disclose information if the law requires it, or to report content that appears to involve child exploitation to the proper authorities (such as NCMEC's CyberTipline), as the law expects of US platforms.
6. Private Sector content
Private Sector videos and rooms are served only to the owner and the members the owner has admitted, and access is enforced on the server — not just hidden on screen. Other members cannot see that Private Sector content exists. The owner can view Private Sector content for moderation and safety, as the Terms describe.
7. Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time from My Page → Danger Zone in the app. Deleting your account ends it immediately: your sign-in is destroyed, your name and contact details are scrubbed, your direct messages are deleted, and your profile disappears. Your videos move to a non-public holding area for 30 days — visible only to the owner, for safety investigations and accidental-deletion recovery — and are then permanently erased, files included. The same 30-day rule applies when you delete a single video. Your email is released; your handle is retired so nobody else can take it.
Records we must keep for legal reasons (for example, reports about illegal content and moderation actions) may be kept longer, in the smallest form that satisfies the obligation.
8. Security
Passwords are hashed with PBKDF2 (100,000 iterations, per-user salt). Session tokens are random, stored only as hashes. The site runs over HTTPS everywhere, with strict transport security headers. Private content is checked on the server for every single request. No system is perfect, but the design goal is that a leak of our database would not expose passwords or session tokens in usable form.
9. Children
POP OFF LIVE is 18+ only. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, report the profile in the app or email us and we will close and delete it.
10. Your choices
You can edit your profile, block any member, report any content, and delete your account at any time inside the app. For anything else about your data — a copy, a correction, a question — email garryd2027@gmail.com and the owner will handle it personally.
11. Changes and contact
We may update this policy as the app grows; material changes will be noted here with a new date. Questions about your privacy: garryd2027@gmail.com.