Privacy Policy

This is an adult service, so we treat what we hold about you as sensitive by default. The short version: we collect the minimum we need to run your account and your renders, we do not sell anything to anyone, and we never share your generated content with other members unless you choose to make a mate public.

1. Who is responsible for your data

The controller is TODO B.V., TODO street and number, TODO Almere, The Netherlands, chamber of commerce number TODO.

For anything about your data, write to filthymates_privacy@gardenframe.com or use the support form.

2. What we collect

You give us

• Account details — username, email address, and a password we store only as a hash (we cannot read it).
• What you build — the options you choose in the mate builder, the prompts and settings behind each render.
• What you generate — the images and videos produced for your account.
• Messages — anything you send us through the support form or by email.

We record automatically

• Technical data — IP address, browser and device type, pages visited, timestamps.
• Render logs — job states, timings, failures. This is how the progress bar works and how we debug a render that went wrong.
• Security logs — sign-in attempts, and submissions our spam traps rejected.

We do not collect

• Card details. Payments run through a third-party provider. Your card number never reaches our servers.
• Special category data. We do not ask for it. Please do not put health, political or similar details in a support message.
• Your real name, unless you volunteer it when you contact us.

3. Why we use it, and our legal basis

What for	Legal basis (GDPR art. 6)
Running your account and delivering renders you paid for	Performance of a contract
Taking payment and keeping the coin ledger straight	Performance of a contract
Answering your support messages	Performance of a contract / legitimate interest
Keeping the service secure, stopping fraud, abuse and spam	Legitimate interest
Enforcing the Content Policy, including keeping records of enforcement	Legitimate interest / legal obligation
Confirming you are an adult	Legal obligation / legitimate interest
Tax and accounting records	Legal obligation
Optional emails about the service	Consent — withdraw any time

We do not use your generated content to train models, and we do not profile you or make automated decisions with legal effects about you. Automated filtering does screen generation requests against the Content Policy; if that blocks something you believe is legitimate, a person will review it if you ask.

4. Who else sees it

We do not sell personal data and we do not share it for anyone else's marketing. We do use suppliers who process data on our behalf, under contract, and only on our instructions:

• Hosting and storage — the servers that run the site and hold your renders.
• GPU compute — when our own hardware is at capacity, renders overflow to a rented GPU provider. The job data needed to produce your render is processed there and is not retained after the job finishes.
• Payment provider — handles the transaction and holds the card data we never see.
• Email delivery — for account and support mail.
• Error and security logging — to keep the service up.

We will also disclose data where we are legally obliged to, or where it is necessary to report content involving the abuse of minors. That is not optional for us and we do it without notice to the account holder.

5. Transfers outside the EEA

We keep data in the EEA wherever we can. If a supplier processes data outside it, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed. Ask us and we will tell you which applies to a given supplier.

6. How long we keep it

• Account data — while your account is open, then up to 90 days after you close it, so it can be undone if you change your mind.
• Generated content — until you delete it or close your account. Deleting a mate deletes her videos and it is immediate.
• Payment and invoice records — seven years, which Dutch tax law requires.
• Security and access logs — normally 12 months.
• Support messages — up to 24 months.
• Enforcement records — where we closed an account for a serious breach, we keep the minimum needed to stop the same person signing up again.

7. Your rights

Under the GDPR you can ask us to:

• Give you a copy of what we hold about you.
• Correct anything that is wrong.
• Delete your data — the “right to be forgotten”. We will, except where we must keep something by law.
• Restrict or object to how we use it, including anything we do on the basis of legitimate interest.
• Port it — get it in a machine-readable format.
• Withdraw consent where consent is the basis. That does not affect what we did before you withdrew it.

Write to filthymates_privacy@gardenframe.com. We answer within one month and it is free. We may ask you to confirm who you are first — for an adult service, handing an account's data to the wrong person would be worse than the delay.

If you are not happy with how we handled it you can complain to your data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens.

8. Cookies

We keep this deliberately small. We use:

• A session cookie, so you stay logged in. Strictly necessary — the site does not work without it.
• A “keep me logged in” cookie, only if you tick that box.

Strictly necessary cookies do not need your consent. If we ever add analytics or anything non-essential we will ask first, and you will be able to say no.

9. Security

Traffic is encrypted in transit. Passwords are hashed, never stored in readable form. Access to production data is limited to the people who need it. We log access and review it.

No system is perfectly secure. If a breach affects your rights we will tell you and the regulator within the deadlines the GDPR sets.

10. Children

This service is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If we discover an account belongs to a minor we close it and delete the data. If you believe a minor is using the service, tell us at filthymates_abuse@gardenframe.com.

11. Changes

If we change this policy we will update the date at the top, and for anything material we will tell you by email or on the site before it takes effect.