Privacy

pretty.sexy is a private link-page service. It is invite only and run by one operator. There is no company page and no email address behind it, on purpose: we talk to you on the messenger you give us.

When you ask for access we store what you type on the request form:

• your display name and the handle you want;
• the links to where you post;
• your contact channel and your handle on it;
• the note about who sent you, if you wrote one;
• that you ticked the box saying you are 18 or older.

We also keep a scrambled form of your network address (a salted one-way hash, not the address). It is used only to limit how often one connection can send requests. We do not store your browser type. We do not collect an email address.

Rejected or withdrawn requests are deleted 90 days after the decision (or after you sent them, if nobody decided). Requests that are still open are kept until someone decides. If you are approved, your contact channel and handle are kept on your account for as long as you have one, so we can send you your sign-in link. Your page, its links and your uploads are kept until you remove them or your account is deleted.

When a request arrives, the operator gets a short notice in a private chat with your display name (cleaned of odd characters), the handle you want and how many links you gave. Your contact handle is not in that notice.

Short-lived counters that limit how often a connection can use the site are kept as hashes for up to an hour and cleared by a nightly clean-up.

If you only look at a public page or this one, we set no cookies. The request form sets none of ours either; it loads a Cloudflare Turnstile check so we know a person filled it in. Turnstile is Cloudflare's, and it sees your connection under its own privacy rules.

If you open a page through a private link, we set two cookies on that site, for 24 hours:

• ps_priv: a signed cookie that proves you came in through a private link, so the private links stay visible while you browse that page. The browser does not let scripts read it.
• ps_pm: a plain flag that tells the page it is a private visit. It holds no personal data.

Public creator pages use Google Tag Manager and Google Analytics, but only for visitors who did not come in through a private link. Google may set its own cookies for that. The request form, this page, the creator sign-in and private visits do not load Google code. There are no ads.

Creators sign in on the studio site through Clerk, which sets the cookies it needs to keep you signed in. Nobody else meets Clerk.

We count visits and clicks on links per page and per day, with a mark for whether the visit came through a private link. A count has no visitor in it: no address, no browser type, no cookie, no way to tell two visitors apart.

The site is hosted by Cloudflare, which handles every request and may keep ordinary server logs under its own rules. We do not read or store visitor addresses ourselves.

A private link is a secret. We store only a one-way hash of it, never the link itself, and we never put it in our logs or reports.

There is no email address, by design. To have your data deleted or corrected, message the operator on the same messenger handle you gave on your request, or through the person who invited you. We delete it when you ask. If you have an account or a page, say so and we remove those as well.

If this changes, the new text replaces this page. We will not start using what we hold for something new without telling you here first. Last updated: October 2026.