Draft for review by counsel
Privacy Policy
Last updated 29 September 2026
01Controller
Syren is the controller of the personal data described in this Policy, which is written to meet the EU General Data Protection Regulation (GDPR). The contact details of the controller and of the data protection officer will be stated in the final version.
02Data we collect
Account data: email address, username, password hash, language and security settings.
Usage data: subscriptions, purchases, messages, reports and technical logs needed to run and secure the Service.
Creator data: payout details and a verification status with a provider reference. Identity documents are processed by the verification provider only and are never stored by us. Card data is processed by the payment processor only.
03Purposes and legal bases
We process data to provide the Service and take payments (contract), to verify age and identity and keep records required by law (legal obligation), to prevent fraud and abuse and secure the platform (legitimate interest), and to send optional communications (consent, which you may withdraw at any time).
04Processors and transfers
We rely on hosting, content delivery, payment, verification and email providers acting under data processing agreements. Data is hosted in the European Union. Any transfer outside the European Economic Area relies on an adequacy decision or on standard contractual clauses.
05Retention
Account data is kept while your account is open and deleted or anonymised after closure, except where we must keep it longer: financial records for the statutory accounting period, and records required for age and consent compliance for the period set by applicable law.
06Your rights
You may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interest. Contact Support to exercise these rights; we answer within one month. You may also lodge a complaint with your data protection authority.
07Cookies
We use strictly necessary cookies for sign in, security and your age confirmation, and a preference cookie that remembers your display palette. We do not use advertising cookies.
08Security
Media are delivered through short lived signed links after an entitlement check. Access to personal data is restricted to authorised staff and logged. Application logs never contain email addresses, bank details or legal names.