Privacy Policy

1. Responsible party and contact

The operator of xStars.co.za is responsible for deciding how personal information is processed. Use the contact page to make a privacy request or complaint. The operator should publish its full legal name, service address and monitored privacy contact there before launch. This policy is intended to align with South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA) where applicable; the operator must confirm its legal obligations and any cross-border rules for the actual deployment.

2. Information we may collect

• Account details: username, email address, password hash, age confirmation, account status, verification state and preferences.
• Content and activity: uploaded video/photo files and metadata, descriptions, tags, views, votes, comments, saved videos, creator profile information and moderation outcomes.
• Verification and safety records: age/identity review information, performer identity/consent and rights records, reports, appeals, audit logs and information supplied to investigate suspected abuse.
• Transactions: token balance and ledger entries, membership requests, payment references, creator earnings and payout/banking details submitted for verification. Payment voucher PINs should not be retained by xStars.
• Technical information: IP address or a derived security value, timestamps, browser/device information, session identifiers, server logs and security events, to the extent collected by the website or hosting providers.
• Communications: messages and details submitted through forms or support channels.

3. Purposes and lawful grounds

Information is used to create and secure accounts, provide content and community features, verify adult eligibility and performer consent, review uploads, process tokens and memberships, calculate creator balances, respond to reports and requests, prevent fraud and abuse, maintain logs, comply with law, and protect users and the service. Depending on the circumstances, processing may be based on your consent, steps requested by you, performance of a contract, compliance with a legal obligation, or a legitimate interest that does not override your rights. Where consent is the basis, you may withdraw it subject to legal and operational limits; withdrawal does not make earlier lawful processing unlawful.

4. Adult content and sensitive information

xStars is intended for adults aged 18+. Content, verification documents and reports may reveal highly private information. Access to verification and safety records should be restricted to authorised reviewers, stored securely and not displayed on public profiles. Do not send identity documents or intimate content through general support unless an approved secure process specifically requests it. We do not ask users to send suspected illegal imagery as proof.

5. Cookies and similar technologies

Essential session and security storage may be used for sign-in, CSRF protection, account verification and core features. Optional analytics, advertising or embedded third-party technologies should only be enabled with appropriate notice and consent where required. See the Cookie Policy. Browser settings can clear or block cookies, though core features may stop working.

6. Sharing and service providers

Information may be processed by infrastructure and vendors necessary to run the site, such as web hosting, database, email delivery, security, private object storage and payment-validation providers. The operator should maintain an accurate list of actual providers, purposes, processing locations and safeguards. We may disclose limited information to authorised moderators, professional advisers, law enforcement or regulators when legally required, necessary to protect someone from serious harm, or needed to investigate fraud, abuse or rights violations. We do not intentionally publish private verification or banking records.

7. International processing

Hosting or storage vendors may process information outside South Africa. Where applicable, the operator must ensure that cross-border transfers meet POPIA requirements and that suitable contractual or legal safeguards are in place. The exact countries and providers depend on the production configuration and should be documented by the operator.

8. Retention

We retain information only as long as reasonably necessary for the purposes described here, subject to legal, accounting, safety and dispute requirements. Account data is retained while the account is active; transaction and security records may be retained for legally required periods; reports and consent/verification evidence may be retained as needed to investigate and demonstrate compliance. Deleted content may remain temporarily in protected backups or be preserved under a legal hold or safety investigation. The operator should define and apply documented retention periods for each record category.

9. Security

We use or expect to use access controls, password hashing, private media storage, encrypted connections and limited administrative access. No internet transmission or storage system can be guaranteed completely secure. Keep your password private and report suspected compromise promptly. Security incidents involving personal information will be assessed and notified to affected people and the regulator when required by law.

10. Your rights and choices

Subject to applicable law, you may request access to, correction or deletion of personal information; object to certain processing; withdraw consent; ask about the source and recipients of information; or lodge a complaint with the relevant regulator. Requests may require identity verification to protect your account and others. Some information may need to be retained or withheld to protect another person’s privacy, preserve evidence, resolve disputes or comply with law. You may update details through account tools where available and use the account deletion feature if eligible.

11. Children

xStars is not intended for anyone under 18. We do not knowingly permit minors to use the service or appear in sexual content. If you believe a minor has created an account or appears in content, report it immediately through the report function or contact page. Do not download, share or forward the material.

12. Third-party links and changes

External websites and services have their own privacy practices. This policy does not cover independent third-party services outside our control. We may update this policy as features, vendors or legal requirements change; the current version and date will be published here.

13. Complaints and contact

Use the contact page to submit a privacy request or complaint. If you are not satisfied, you may raise the matter with the Information Regulator of South Africa where applicable. The operator should keep privacy requests confidential and route them to a responsible person.