Privacy Policy

This policy describes Fapple's current practices. It is not legal advice, is not described as attorney-reviewed, and does not guarantee compliance. Qualified legal counsel should review the service and these terms as the product and geographic availability change.

This policy describes personal data processed by Fapple, an unincorporated New Jersey project through the public Fapple website. Fapple is an unincorporated New Jersey project. It does not make Fapple a corporation or claim that these practices have been approved by a regulator or lawyer.

Before the public feed or account pages load, Fapple asks whether you are at least 18. Fapple stores a signed first-party cookie containing only the answer, attestation time, expiration, and current age-gate, Terms, and Privacy versions. An eligible answer lasts up to 30 days; an under-18 answer lasts up to 24 hours.

This is an age attestation, not identity or government age verification. Fapple does not collect a date of birth, government ID, face scan, payment card, or legal name for this gate.

If you create an account, Fapple stores email, username, a one-way password hash, account status, policy acceptance versions and times, security/session records, and information you submit through account, privacy, safety, or copyright forms. Fapple never stores your plaintext password.

Fapple records likes and shares you intentionally make. Public uploads, comments, direct messaging, payments, advertising, and user-created captions are disabled in the current product.

Only after you choose 'Allow personalization' may Fapple create a first-party anonymous identifier and analytics session identifier and record video impressions, play starts, watch time, completion, skips, replays, playback failures, referrer, and UTM campaign parameters. These records support feed quality, reliability, and aggregate measurement.

Choosing 'Necessary only' prevents optional public behavioral analytics and personalized watch-event storage. Aggregate view counts may still be updated without retaining a viewer identifier. You can change the preference in account privacy settings.

Fapple and its infrastructure providers process network request data needed to deliver and secure the service. Fapple security records may include a one-way hash derived from an IP address, a truncated browser user-agent string, route, event type, account or anonymous identifier when available, and limited diagnostic metadata. Rate limits may use network and account identifiers to resist abuse.

Infrastructure providers may process IP addresses and request logs under their own service terms. Fapple does not intentionally place passwords, session tokens, storage credentials, or private media keys in analytics events.

Fapple processes data to enforce the 18+ entrance boundary, provide and secure accounts, deliver curated media, remember settings, operate likes and sharing, measure service reliability when permitted, prevent fraud and abuse, respond to legal/privacy/copyright requests, maintain rights and moderation records, and comply with applicable obligations.

Fapple uses service providers for application hosting, PostgreSQL database hosting, object storage and media delivery, private-ingress bot protection, and background video processing. Current infrastructure includes Vercel, Supabase, Cloudflare, and Render. These providers process data as needed to provide their services and may operate in the United States or other locations.

Fapple may disclose information when reasonably necessary to comply with law, protect people or the service, investigate abuse or rights claims, complete a project transfer subject to appropriate safeguards, or use professional advisers. Fapple does not currently sell personal data, run targeted advertising, or train AI models on viewer activity.

Essential storage covers the signed age attestation, authentication and CSRF protection, security/session integrity, and the saved cookie preference. Functional storage remembers mute and limited interface choices. Optional analytics storage is created only after the personalization choice. The Cookie Policy provides the current inventory and durations.

Fapple keeps information only while reasonably needed for the purposes described, subject to operational backups and legal, safety, fraud-prevention, rights, and dispute needs. The age-attestation durations are stated above. Authentication cookies follow the account session duration. Optional identifiers and activity records are subject to user controls and retention review; Fapple should formalize and periodically test a written retention schedule before scaling.

Signed-in users can export profile and activity data, clear watch and search history, revoke sessions, submit privacy requests, and delete their account. Account deletion removes credentials, sessions, likes, bookmarks, comments, viewer preferences, and account-linked activity, then anonymizes the remaining user row so curated video ownership and narrowly necessary legal/security records are not destroyed.

Some pseudonymous records may be retained where reasonably needed for security, rights, moderation, fraud prevention, disputes, or legal obligations. Curated videos are not deleted merely because a viewer account is deleted.

Depending on where you live and whether a law applies to Fapple, you may have rights to request access, correction, deletion, portability, restriction, or information about processing, and to object or opt out of certain uses. Fapple does not currently sell data or use it for targeted advertising. Use account settings and the privacy-request form, or email the privacy contact below. Fapple may need reasonable information to authenticate a request.

The public service and its providers may process data in the United States and other countries. Privacy protections and government-access rules vary. Fapple should obtain counsel regarding transfer mechanisms before intentionally targeting additional jurisdictions.

Fapple uses access controls, password hashing, signed sessions, rate limits, host isolation, validation, and restricted credentials. No service can guarantee absolute security. Report suspected vulnerabilities without accessing other users' data or disrupting the service.

Fapple is for people 18 or older. Material policy changes may require renewed acknowledgment. The version and effective date appear above. Privacy requests and questions may be sent to admin@fapple.org. Business description: Fapple, an unincorporated New Jersey project.