Privacy policy

The controller of your personal data is LustorVR Studio Ryunosai Andree, ul. Przykładowa 1, 00-001 Warszawa, Poland, NIP 0000000000. For anything about your data, email privacy@lustorvr.com.

• Your account. Your email address and name. If you sign in with Patreon, your name and verified email come from Patreon. We need these to create your account and sign you in (to provide the service, GDPR Art. 6(1)(b)).
• Sign-in codes. The 6-digit code we email you is valid for 5 minutes. Codes that pass your Patreon sign-in to the player are valid for at most 10 minutes and work once.
• Your Patreon membership. When you sign in with Patreon, we receive your Patreon user ID and sign-in tokens. We also receive the status of your memberships in LustorVR's campaign and in the campaigns of partner creators whose scenes are on LustorVR, including tier and charge status and dates. We check this about once a day while you use LustorVR, to decide which scenes your library unlocks (Art. 6(1)(b)). That decision is automatic and only affects which scenes you can watch.
• If you support LustorVR on Patreon. Patreon also shares your membership details with us (name, email, tier, pledge amounts and charge history), including through notifications when your membership changes. We use them only to give you the access you pay for. Patreon's own privacy policy covers that sharing. We never see your payment card or bank details.
• Sessions and request logs. When you are signed in, we store your IP address and device details (browser or app version) with your session. Our API logs each request: your account ID, IP address, device details, what was requested and when. We use this to keep accounts secure, prevent abuse and fix problems (our legitimate interest, Art. 6(1)(f)).
• Analytics and session recordings. On lustorvr.com, PostHog records the pages you visit, what you click, your browser and device type, and errors. It also makes recordings of page sessions, which we watch only to find and fix bugs. Text you type into forms is masked in recordings. PostHog stores nothing on your device. We do this to understand how the site is used and to fix it (legitimate interest, Art. 6(1)(f)), and you can object at any time.
• Emails. We email you sign-in codes and, when needed, notices about your account or your access, for example if the way you get access changes. We do not send marketing emails unless you have agreed to receive them.
• The LustorVR player. The player keeps your sign-in and its settings (storage folder, VR and audio preferences, haptics settings) on your computer. It sends no analytics. If you connect a Handy device, the player sends your Handy connection key and the haptic script of the scene you play to The Handy's servers.

You need an email address to sign in. Everything else is optional: without Patreon you can still sign in, but your library will be empty. We do not sell your data, use it for advertising or share it with partner creators.

We set only the cookies needed to sign you in: a session cookie that keeps you signed in for 30 days after your last visit, a short-lived cache of that session, and short-lived cookies that protect the Patreon sign-in. The site also remembers your colour scheme in your browser's local storage. We use no advertising or tracking cookies, so there is no cookie banner.

These services process data for us, only to run LustorVR:

Some of these services are outside the European Economic Area, mainly in the United States. Those transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses. Norway is in the EEA.

• Your account, linked Patreon account and membership status: until you ask us to delete your account. A membership Patreon no longer reports is removed at the next check.
• Sign-in codes: 5 to 10 minutes, then they stop working.
• Sessions and request logs: 90 days. After that we delete your account ID, IP address, device details and request contents, and keep only anonymous usage statistics.
• Analytics events and session recordings: deleted by PostHog after its retention period, at most 12 months for events and 90 days for recordings.

You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to receive it in a portable format. You can object to processing based on our legitimate interest, including analytics and session recordings. Email privacy@lustorvr.com from the address you sign in with. We reply within one month.

To delete your account, email us and we will delete your account and the data linked to it. To stop LustorVR using your Patreon connection, you can also remove LustorVR from the connected apps in your Patreon settings.

You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live.

LustorVR is only for people aged 18 or over. We do not knowingly collect data from anyone younger. If you believe a minor has an account, email privacy@lustorvr.com and we will delete it.

When we change this policy, we update the date at the top. If a change affects how we use your data, we will tell you by email or on the site before it takes effect.