← BabeCock Maker

Privacy Policy

Last Updated: April, 2026

BabeCock Maker (“we”, “us”, “our”) operates the website babecock.app (the “Site”). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

This Site contains sexually explicit material and is intended solely for adults (18+). By using the Site, you confirm that you are of legal age in your jurisdiction.

1. Information We Collect

1.1 Account Registration

When you create an account, we collect:

• Username (publicly visible)
• Email address (used for password resets only; never shared or displayed publicly)
• Password (stored as a one-way bcrypt hash; we never store or see your plaintext password)

1.2 User-Uploaded Content

When you upload images, we collect:

• The image file itself (JPEG, PNG, or WebP)
• The pool category you select (babe or cock)
• Any optional tags you assign

Uploads are stored on our servers and are private to your account. They are only visible to you and used in your own personal rotations. Your uploaded images are never shared with other users or included in any public pool.

1.3 Shared Creations

When you share a creation, we collect:

• The snapshot image (JPEG) and optional video (WebM)
• The title you provide
• Image dimensions
• Your user ID (if you are logged in)

Shared creations are publicly accessible at their share URL unless you toggle them to private.

1.4 Automatically Collected Data

IP addresses: We use a one-way hash (MD5) of your IP address solely for rate limiting (preventing abuse). These hashes are stored temporarily and automatically deleted after 1 hour. We do not store your plaintext IP address in our application database.

Server logs: Our web server may record standard access logs (IP address, request URL, timestamp, user agent). These logs are managed by our hosting provider and subject to their retention policies.

1.5 What We Do NOT Collect

• No third-party analytics or tracking scripts (no Google Analytics, no Facebook Pixel)
• No advertising cookies or profiling
• No browsing history, search queries, or behavior tracking
• No geolocation data
• No device fingerprinting
• No data is sold to or shared with third parties

2. Cookies

We use only essential cookies required for the Site to function:

Cookie	Purpose	Duration
wordpress_logged_in_*	Keeps you logged in	2 weeks
wordpress_sec_*	Authentication security	2 weeks
wp_rest (nonce)	Prevents cross-site request forgery	Session

We do not use any marketing, analytics, or third-party cookies. No cookie consent banner is required because we only use strictly necessary cookies.

3. How We Use Your Information

• Account management: To let you log in, reset your password, and manage your uploads
• Content delivery: To display your uploaded images in your personal rotations and shared creations in the gallery
• Abuse prevention: Rate limiting via hashed IP addresses to prevent spam and misuse
• Diagnostics: Upload error logs (containing user ID, file metadata, and truncated user agent) to troubleshoot technical issues

4. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Hosting provider: Your data is stored on servers operated by our hosting provider (Vedos.cz), who may have access to server logs as part of their service
• Email delivery: Password reset emails are sent through our email service provider, which receives only the recipient address and message content
• Legal requirements: We may disclose data if required by law, court order, or to protect our rights

When you click social sharing buttons (Reddit, X/Twitter), you are redirected to those platforms. No data is sent to them until you choose to interact with their site.

5. Data Retention

Data	Retention
User account	Until you request deletion
Uploaded images	Until you delete them (max 30 per user)
Shared creations	Until you delete them or request removal
Rate-limit hashes	1 hour (auto-purged)
Server logs	Per hosting provider policy

6. Your Rights & Choices

You can:

• Delete your uploads at any time through the upload management modal on the Site
• Make shares private by toggling their visibility from your profile
• Request account deletion by contacting us (see below); we will delete your account, uploads, and shared creations
• Request your data by contacting us; we will provide a copy of the personal data we hold about you

If you are located in the EU/EEA, you have rights under the GDPR including access, rectification, erasure, and data portability. Contact us to exercise these rights.

7. Data Security

• All connections are encrypted via HTTPS (TLS)
• Passwords are hashed using bcrypt (never stored in plaintext)
• All API requests are protected by nonce tokens to prevent CSRF attacks
• The REST API user enumeration endpoint is disabled
• Upload file types are strictly validated server-side

8. Children’s Privacy

This Site is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that a minor has created an account, we will immediately delete the account and all associated data.

9. International Data Transfers

Our servers are located in the Czech Republic (EU). If you access the Site from outside the EU, your data will be transferred to and processed in the Czech Republic.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the Site after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions, data requests, or account deletion:

Email: info@babecock.app