Privacy policy

Last updated: 3 August 2026.

This site is operated from France and is subject to the GDPR and to French data protection law. The French version prevails in case of any discrepancy.

This policy describes exactly what this site does — and nothing else. It was written from the code actually running online, not from a generic template.

The short version

No analytics. Google Analytics was removed from the entire site on 3 August 2026. No advertising or statistics tracker remains.
No cookies are set, except on the Contact page, where a technical session cookie carries the form’s security token.
No third-party call is made when a page loads: the typeface is served from this site, and the video is only loaded after an explicit click.

Data controller

The data controller is the publisher of the site, writing under the pen name HardGaySexSlave (see the legal notice). They can be reached through the contact form, which is the official channel for exercising the rights described below.

Processing of personal data

Processing	Data	Legal basis	Retention
Contact form	Name or pseudonym, email address, subject, message	Consent (GDPR art. 6.1.a), given by voluntarily submitting the form	For the duration of the exchange, then limited archiving in the publisher’s mailbox
Form anti-spam protection	Salted fingerprint of the IP address + timestamp of the last submission	Legitimate interest (art. 6.1.f): preventing automated bulk submissions	Automatically erased after 1 hour
Form security (anti-CSRF)	Random token held in session	Legitimate interest (art. 6.1.f): preventing another site from triggering a submission	Until the browser is closed
Host’s technical logs	IP address, date, page requested, user agent	Legal obligation (art. 6.1.c, LCEN art. 6-II)	1 year

The contact form

Messages sent through the form are forwarded by email to the publisher. They are not stored in any database and are never sold, shared or used for marketing. Please do not include sensitive information — health data in particular — that is not necessary for your request.

What the anti-spam protection actually does

To limit automated submissions, the site temporarily keeps the timestamp of the last message received from a given visitor. The IP address itself is written nowhere. It is combined with a secret salt specific to this site, which never leaves the server, and then hashed with SHA-256. The result cannot be used to recover the original address: the salt defeats the only conceivable attack, which would be to try every possible address. These markers are erased automatically after one hour.

Cookies and local storage

This site uses no advertising cookie, no analytics cookie and no social network cookie. It writes nothing to your browser’s local storage (localStorage).

Only one cookie exists, strictly necessary for the contact form to work. As such it is exempt from consent under article 82 of the French Data Protection Act and the CNIL’s guidelines — which is why this site shows no cookie banner.

Name	Type	Set on	Purpose	Duration
`PHPSESSID`	Session cookie	Only on /contact/	Carries the form’s anti-CSRF token and anti-spam counter	Until the browser is closed

This cookie is set with HttpOnly (out of reach of JavaScript), SameSite=Lax (not sent from another site) and Secure (sent over HTTPS only).

Third-party services

What is no longer here

Google Analytics ran across the whole site until 3 August 2026. It set cookies as soon as a visitor arrived. It has been removed entirely, not merely placed behind a banner.

Typefaces

The Oxygen typeface is served from this site. No request is made to Google Fonts, so your IP address is not sent to any Google server when a page is displayed.

YouTube video (Music page only)

The Music page offers a video hosted by YouTube (Google Ireland Limited / Google LLC). It is displayed behind a façade: only a thumbnail served from this site is visible, and no request is made to Google until you click — not even a connection prepared in advance. If you do click, the player is loaded from youtube-nocookie.com, YouTube’s privacy-enhanced mode: it sets no cookie on load, but your IP address is then sent to Google, some of whose servers are located outside the European Union, on the basis of the European Commission’s standard contractual clauses. Simply not clicking avoids that transfer entirely.

Hosting

The site is hosted by AMEN (Agence des Médias Numériques), in France. AMEN acts as a processor and keeps connection logs for one year, in accordance with its legal obligations.

Links to other sites

This site links to external platforms (Recon, X, Bluesky, Mastodon, JustFor.Fans, StudFist.Fans, OnlyFans, Pinterest, Tarisss and others). These links only fire on click: no data is sent to those services while you stay on this site. Once you are on their site, their own privacy policy applies.

Your rights

Under the GDPR, you have the following rights over your data:

Access — obtain a copy of the data concerning you;
Rectification — have it corrected if inaccurate;
Erasure — request its deletion;
Restriction of, and objection to, processing;
Portability of the data you provided;
Withdrawal of consent at any time, without affecting the lawfulness of processing already carried out.

These rights are exercised through the contact form. A reply is provided within one month at most. In practice, the data concerning you amounts to little more than the message you sent yourself.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the French supervisory authority, the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or with the supervisory authority of your own EU member state.

Minors

This site is restricted to adults. No data is knowingly collected from minors. Should such a collection be brought to the publisher’s attention, the data concerned would be deleted without delay.

Changes to this policy

This policy may be amended to reflect changes to the site or to applicable regulations. The date of the last update appears at the top of this page.