Privacy Policy

This Privacy Policy describes how SL-Kinks (sl-kinks.com) collects, uses, and shares information about you when you use the Service. SL-Kinks is operated under the laws of the Netherlands and aims to comply with the General Data Protection Regulation (GDPR).

SL-Kinks is not affiliated with Linden Research, Inc. Second Life™ and Linden Lab™ are trademarks of Linden Research, Inc.

From your Second Life avatar (automatically, when you click an SL-Kinks bracelet):

• Your Second Life avatar UUID
• Your Second Life username and display name
• The UUID and name of the in-world object you clicked
• The region in which you clicked
• Your avatar's public profile image, fetched once and cached

From you directly (when you fill in your profile):

• Bio text (max 500 characters)
• Identify-as selection and title
• Kink ratings (Fave / Yes / Maybe / No) per catalog item
• Tribute settings (gate level, amount, duration)
• Block list

From your tribute jar (when someone tributes you in-world):

• The payer's avatar UUID
• The amount paid in Linden Dollars
• The platform fee deducted (5% of the payment)
• Timestamp and the jar object UUID
• The recipient's avatar UUID

Operational metadata:

• Browser session cookie (a random opaque token)
• HTTP request user-agent and IP address (in transient server logs)

We do not collect: your real-world name, email address, postal address, phone number, payment-card information, or any biometric data.

• To create and operate your SL-Kinks account, identify you across browser sessions, and let you manage your profile.
• To display profiles to other users in accordance with each user's privacy settings (visibility, tribute gating, blocks).
• To record tribute payments so we can grant the payer access to the recipient's gated content for the agreed duration.
• To detect and prevent fraud, abuse, and violation of our Terms of Service.

Legal basis under GDPR: performance of a contract (operating the Service for you), our legitimate interests (security, fraud prevention), and your consent (for optional features such as tribute gating).

• Profile data and ratings: as long as your account exists.
• Tribute records: kept for as long as needed to enforce gated access (until expiry of tribute duration), then retained in anonymised form for accounting and fraud-prevention purposes for up to seven (7) years as required under Dutch tax law.
• Server logs: rotated and deleted within thirty (30) days unless part of an active incident investigation.
• When you delete your account, we delete or anonymise associated personal data within thirty (30) days, except where retention is required by law.

We do not sell your personal data. We share data only with:

• Other SL-Kinks users, in accordance with each user's visibility settings (public profiles are visible to anyone; gated profiles only to those who have tributed; private profiles are not visible to others).
• Linden Research, Inc., indirectly: when SL-Kinks fetches your public Second Life web profile to retrieve your profile image, a request is sent to world.secondlife.com. We do not provide them with any private data.
• Our hosting and infrastructure providers: Vultr Holdings (server hosting), and the operators of any DNS / CDN services we use. These providers process data on our behalf under appropriate data-processing agreements.
• Authorities, when required by law or to respond to valid legal process.

SL-Kinks uses a single essential session cookie (slk_session) to keep you signed in across pages. This cookie contains an opaque random identifier, is HTTP-only, and expires after thirty days. We do not use advertising or analytics cookies.

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your account and associated data (right to erasure);
• Receive a copy of your data in a portable format;
• Object to or restrict certain processing;
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, contact the publisher in-world by notecard sent to [Publisher Resident]. You may also delete your account directly via your profile settings, which initiates erasure of your personal data.

All connections to SL-Kinks are encrypted via HTTPS. Sessions are stored server-side; the cookie alone is meaningless without our database. Tribute jar communications include a shared secret and are validated against Second Life's automatic HTTP headers to prevent forgery.

No system is perfectly secure; we encourage you not to share information in your bio or messages that you would not want associated with your Second Life avatar.

SL-Kinks is for adults only. We do not knowingly collect personal data from anyone under eighteen (18). If you believe a minor has created an account, please report it via in-world notecard to [Publisher Resident] and we will remove the account.

We may update this Privacy Policy from time to time. Material changes will be announced via the Service. The "Last updated" date at the top of this page indicates the latest revision.

For questions about this Privacy Policy or to exercise your rights, contact the publisher in-world by notecard to [Publisher Resident].