Privacy Policy

This policy explains how Creator Fields (Dirtyhands, the data controller) processes data for accounts, creator stars, fan signals, safety tools, analytics and optional email.

Data we collect

Account email, profile role (fan or creator), display name and avatar, creator profile details, fan signals (including messages and any media links or images you attach), moderation reports, your 18+ confirmation, the time you accepted the terms, your optional marketing email choice, optional country and optional birth year. We use birth year only for broad age grouping and do not ask for an exact birth date. We also process limited technical data such as IP address, broad device information and session tokens needed to operate and secure the service.

How we use data

To authenticate users, render creator fields, show fan signals, prevent abuse, manage creator access, remember your privacy choices, and keep creator tools safe. If you opt in to marketing emails, we also use your country and age group to send relevant creator updates or offers.

Marketing emails (opt-in)

Marketing consent is optional and separate from accepting the terms. If you opt in, Creator Fields may send you promotional and affiliate emails connected to creators you engage with. We send these on the creator's behalf using a closed-loop system: your email address is never shared with or exported to creators. You can unsubscribe at any time, from any single creator or from all marketing, and you can change your choice later. We honor opt-outs promptly.

Cookies and local storage

We use your browser's local storage to keep you signed in (session tokens) and to remember small preferences such as your selected role. These are required for the service to work; we do not use third-party advertising trackers.

Creator pages use privacy-minimal first-party analytics to count unique daily visitors, link clicks, and completed fan signals. We immediately transform the visitor's IP address and device category into a rotating one-way daily identifier; we do not store the raw IP or full browser user-agent in analytics. Analytics events are retained for up to 90 days and creators see only aggregate totals.

Service providers

We rely on a small set of processors, including Supabase for database and authentication, Cloudflare for hosting and image proxying, and Paddle for creator subscription payments. Spotify processes requests when a Spotify player is loaded. Our email provider may process account, notification and consented promotional email.

Image handling

Images attached to signals are re-served through our own image proxy, so the original image host does not see viewers' IP addresses.

International transfers

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers, including processor terms and contractual protections.

Data retention

Account, signal, consent, and safety records are kept only as long as needed to run the service, protect users, and meet legal duties. Deletion requests remove or anonymize data unless retention is required for safety, dispute, tax, or legal compliance.

Your rights

Depending on your location, you may request access, correction, deletion, portability, restriction, or objection, and you may withdraw consent at any time. Creator Fields is for adults only. To exercise your rights, contact support@creatorfields.com.

Changes

We may update this policy; material changes will be reflected in the "last updated" date above.