Privacy Policy

CamSpike ("CamSpike", "we", "us") operates this website as a live webcam discovery and affiliate-analytics product for adults 18+.

CamSpike is operated by a private individual acting as sole operator of the service, established in the European Union. The operator is the data controller for the personal data described in this policy. The controller's full identity and registered address are not published on this page in order to protect the operator's own personal data; they will be disclosed without charge to any data subject, supervisory authority or law-enforcement body that requests them at [email protected].

Contact for all privacy and data-protection matters: [email protected]. No data protection officer is appointed, as CamSpike does not meet the criteria in Article 37 GDPR.

We only collect what is described below - this section is based on an internal audit of the actual running system, not a generic template.

Accounts are created and managed via Supabase Auth (email + password only - no third-party sign-in). Email confirmation is currently disabled, so an account is active immediately after sign-up.

Session cookies are managed by the Supabase client library and are strictly necessary for you to stay signed in; they are not used for tracking or advertising.

If you sign in, you can follow performers (stored as a row linking your account to that performer) and configure alert rules (e.g. "notify me when this room goes live"). This data is protected by database-level access rules so only you can read or change your own favorites and alerts.

When you click an outbound "Watch Live"-style link, CamSpike records the click (performer, platform, page/section, rank, viewer/goal state at the time, your anonymous visitor id or account, and a randomly generated tracking code) on our servers - this is a normal database record, not a browser cookie.

If the affiliate program later reports that the click led to a registration or purchase (a "postback"), CamSpike records that conversion and links it back to the original click via the tracking code, so far as the affiliate program's own postback data allows. CamSpike does not fabricate or guess at attribution when the tracking code is missing or unrecognized.

When you arrive through a paid TrafficStars advertisement, the campaign URL supplies a unique advertising click id and campaign details. CamSpike stores those values server-side to measure the path from landing page to affiliate click and conversion. If the affiliate program reports a conversion, CamSpike sends the TrafficStars click id and conversion value back to TrafficStars by server-to-server postback. This process does not use a TrafficStars cookie or write anything to your browser.

CamSpike uses Cloudflare Web Analytics to understand aggregate traffic (page views, referrers, country, device and browser class). It does not set analytics cookies or assign a persistent visitor identifier.

When Google Analytics is configured, its script loads before you make a choice, using Advanced Consent Mode with analytics storage denied by default. It sends limited cookieless page measurements to Google. Our explicit page measurements use the generic CamSpike homepage address and title, without a referrer or campaign parameters, until you allow detailed analytics. Google still receives network requests and may process technical information; cookieless does not mean guaranteed anonymous.

Accept All or enabling Analytics allows analytics cookies and detailed measurement of visited pages, performer views, filtered searches, interactions and campaign UTM parameters. Only Essential keeps analytics storage denied and our detailed events off, but limited cookieless measurement continues. On an adult-oriented site detailed activity may reveal sensitive interests. Refusing detailed analytics does not restrict access to CamSpike.

Google Signals, advertising storage and advertising personalization are disabled. Advertising click IDs, tokens, URL fragments and non-UTM query parameters are excluded from the page addresses we explicitly send to Google Analytics. You can withdraw consent through Cookie settings in the footer; this stops our detailed events and denies further analytics cookie access, while limited cookieless measurement continues. Activity already collected is not erased by withdrawal.

Analytics events never include your email, password, IP address as a stored field, or any free-text content (such as a room's live subject line).

Cloudflare provides aggregate analytics; Google provides limited cookieless measurement and optional consent-based detailed analytics as described above.

Sign-up and sign-in requests are rate-limited by IP address to slow down automated abuse (e.g. mass account creation). The IP address is processed only for this purpose, keyed alongside a short time window, and is not linked to your profile or used for any other purpose.

See the dedicated Cookie Policy for the full, itemized list of cookies and browser storage CamSpike actually uses.

Supabase (database, authentication, and realtime delivery of in-app alerts). Project data is stored in Supabase's London (eu-west-2) region.

Cloudflare (cookieless web analytics, and delivery of the analytics beacon).

Google (limited cookieless Google Analytics before a choice or after refusal; cookie-based detailed analytics only after acceptance).

DigitalOcean (application hosting and delivery of the website itself).

Where a processor above operates outside your country (e.g. Google's global infrastructure), personal data may be transferred internationally under that processor's own applicable safeguards (such as the EU Standard Contractual Clauses). CamSpike does not itself operate infrastructure outside its hosting provider's region(s).

Account data, favorites and alert rules are kept for as long as your account exists, and deleted if you request account deletion (see "Your rights" below).

Affiliate click/conversion records currently have no automatic deletion schedule implemented - retention criteria are under review. This will be updated here once a fixed retention period is defined.

Rate-limiting records are short-lived (on the order of a day) and are cleaned up automatically.

Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; object to processing based on legitimate interest, including the analytics and affiliate attribution described above; and lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email [email protected]. We will respond within one month of receiving the request, as required by Article 12 GDPR. We may ask you to confirm the email address associated with your account before acting on a request, so that we do not disclose data to the wrong person.

CamSpike is intended exclusively for adults 18+ and is not directed at children. See the 18+ Only page and the separate age-gate confirmation (see the Cookie Policy).

We will update the "Last updated" date above when this policy changes. A material change to optional analytics requires a new consent choice.