1. Who We Are
TonightBabe ("we", "us", "our") operates TonightBabe.com, an adult-oriented advertising and companionship directory. This Privacy Policy explains how we collect, use, store, and protect your personal information, and what rights you have regarding that information.
For privacy-related enquiries, contact our Data Protection contact at: info@tonightbabe.com
2. Information We Collect
2.1 Registration Data
- Name or display name
- Email address
- Phone number (when provided for verification)
- Date of birth (age verification)
- Account type (member, escort, agency)
- Password (stored as a one-way hash — we never store it in plain text)
2.2 Profile Data
- Photos and videos you upload
- Profile description, rates, availability, and service details
- City, region, and country (no precise GPS coordinates are collected or stored)
- Verification badge status
2.3 Usage Data
- Pages visited, search queries, filters applied
- Features used (booking requests, messaging, stories)
- Wallet and credit transaction history
- Review and rating activity
2.4 Technical & Log Data
- IP address (used for fraud prevention and legal compliance)
- Browser type, operating system, device identifiers
- HTTP request logs (URL, timestamp, response code)
- Cookie identifiers and session tokens
3. How We Use Your Information
- Service delivery — to operate your account, display your profile, process bookings, and deliver messages.
- Age and identity verification — to confirm users meet the 18+ requirement and to authenticate accounts.
- Payments — to process credit purchases, record transactions, and handle refund requests.
- Safety and moderation — to review content, enforce our Terms of Service, investigate reports, and prevent fraud or abuse.
- Communications — to send account notifications, security alerts, and (with consent) marketing emails.
- Analytics and improvement — to understand how the Platform is used and to improve features, performance, and content.
- Legal compliance — to comply with applicable law, including responding to lawful requests from authorities.
4. Cookies and Tracking
We use cookies and similar technologies (local storage, session tokens) for the following purposes:
- Essential cookies — required for login sessions, the age gate, CSRF protection, and core functionality. These cannot be disabled.
- Preference cookies — remembering your language, currency, and display settings.
- Analytics cookies — aggregated statistics about traffic and feature usage (no cross-site tracking).
You can manage or withdraw cookie consent at any time via the cookie banner or your browser settings. Disabling essential cookies will prevent login.
5. Third-Party Services
We share data with the following categories of third-party processors, each bound by a data processing agreement:
- Hosting & infrastructure — servers located in the EU/EEA. Data is stored in data centres with ISO 27001 certification.
- Payment processing — your payment card details are processed directly by our payment provider and are never stored on our servers.
- Email delivery — transactional emails (password reset, notifications) are sent via a trusted third-party email service.
- Analytics — aggregated, anonymised usage statistics. No individual user profiles are shared with analytics providers.
- CDN / media storage — profile photos and videos are served via a content delivery network.
We do not sell, rent, or trade your personal data to any third party.
6. Data Retention
- Active accounts — data is retained for the lifetime of your account plus 90 days after deletion to handle disputes.
- Transaction records — kept for 7 years for tax and legal compliance.
- Content (photos, videos, stories) — deleted within 30 days of account deletion. Stories expire and are purged automatically.
- Log data — HTTP request logs retained for 90 days; access logs for up to 12 months for security purposes.
- Moderation records — reports and related data are kept for up to 5 years to support law enforcement cooperation.
7. Your Rights (GDPR & Beyond)
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — request deletion of your data where there is no overriding legal basis for retention.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to restriction — ask us to limit processing while a dispute is resolved.
- Right to object — object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, email us at info@tonightbabe.com with "Data Request" in the subject line. We will respond within 30 days. If you are unsatisfied, you have the right to lodge a complaint with your national data protection authority.
8. Children's Privacy
TonightBabe is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account or submitted content, please contact us immediately at info@tonightbabe.com so we can delete the account and all associated data without delay. See our 18+ Statement for details on our age verification approach.
9. International Data Transfers
Our servers are located in the EU/EEA. Where data is transferred outside the EEA (for example to third-party processors), we ensure adequate safeguards are in place through Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms.
10. Security Measures
- All data transmitted between your browser and our servers is encrypted via TLS/HTTPS.
- Passwords are hashed using bcrypt with a per-user salt.
- Access to production databases is restricted to authorised personnel via VPN with multi-factor authentication.
- Regular security audits and dependency updates are performed.
- Automated monitoring for anomalous access patterns and potential data breaches.
No transmission over the internet can be guaranteed 100% secure. If you discover a vulnerability, please disclose it responsibly to info@tonightbabe.com.
11. Contact
For privacy-related questions, data requests, or concerns:
- Email: info@tonightbabe.com
- Contact form: tonightbabe.com/contact