Privacy Policy

Last updated: October 9, 2026

This policy explains what LustLit ("we", "us") collects when you use lustlit.com, why, who else handles it, how long we keep it, and the choices and rights you have. It’s also our cookie policy.

The short version

We never see your card. Patreon takes the payment.
We keep what LustLit needs to work. Your account comes from Patreon when you sign in. What you like and save stays on your account, so you can find it again. My LustLit asks before it keeps your likes and playlists.
What you do here is private. What you watch, like, save and read says something about your sex life. The law treats that as sensitive, and so do we. We never sell it and never use it for advertising. Your likes, saves, history and taste stay with us.
We learn your taste only with your yes. You can see it, switch it off or wipe it at any time.
Statistics run only with your OK, and never while you’re signed in. You can change your mind with the Cookies button at the bottom of the screen.
You’re in control. You can see, download or correct your data. If you ask, we delete all of your data. Write to [email protected].

1. Who we are

LustLit runs lustlit.com and is responsible for your personal data (the "controller"). We’re based in the United States.

Privacy questions and requests: [email protected]

This policy covers lustlit.com: the Issues and their stories, Shorts (our short videos), the pages about our characters and their worlds, and My LustLit. It doesn’t cover Patreon, our shop at shop.lustlit.com (run by Fourthwall), or other sites we link to. They have their own policies.

2. What we collect, and why

When you visit

Connection details. Our servers receive your IP address, your browser and device type, the pages you ask for, the page that sent you, and the time. Our web host and our security tools keep these in logs, so we can run LustLit, keep it secure and fix problems.
Your rough location. Our network provider, Cloudflare, works out your country and, in the US, your state from your IP address. We use it only to block places where the law requires us to. We don’t store it.
Your age answer. When you confirm you’re 18 or over, a cookie remembers your answer.
Your cookie choices. A cookie remembers what you chose.
Searches. When you search LustLit, your search words go to Automattic’s Jetpack Search, which runs our site search.
Fonts. Some of our fonts load from Google Fonts and Bunny Fonts, so your browser shares your IP address with them.
Statistics, only with your OK. If you allow statistics, Google Analytics, Microsoft Clarity and Jetpack Stats show us how LustLit is used: which pages are opened, which features are used, how people find us, and roughly where they are. They see your IP address and a random ID in your browser, never your name or your LustLit account. Clarity also records clicks, taps, scrolls and mouse movements on a page, so we can see where a page confuses people. None of them runs while you’re signed in, or on our Shorts pages.
What you watch stays on LustLit. Our Shorts pages (lustlit.com/videos/) use no outside statistics tool. We count plays, finishes, likes, saves and skips for each short on our own servers, without linking them to you or anyone else, and we never share those counts. They tell us which shorts people enjoy, so we can make more like them.

With your permission, Patreon sends us:

your Patreon user ID, name, username, email address (and whether it’s verified), profile link and profile picture;
details of your LustLit membership: whether it’s active, how much you pay and how often, when you joined, when you were last charged and whether the payment went through, and how much you’ve paid us in total;
access codes that let us check your membership with Patreon.

We use these to create and run your account, show your name and picture in My LustLit, switch Premium on or off, and contact you about your account if we need to. We keep a copy of your profile picture on our server. We never receive your Patreon password or your payment details.

When you use your account

My LustLit: the pictures and stories you like there (a short you like there joins your Shorts likes), and the playlists you make there: the pictures, stories and shorts you save to them, in the order you keep them, and the names you give them. What you keep says something about your sex life, so we ask first: the first time you tap a heart or save something to a playlist, LustLit asks whether to keep it. Until you say yes, it stays in that browser tab only, and it’s gone when you close the tab. You can clear every like and playlist, or take back your yes, at any time in My LustLit with Clear my likes.
Shorts: the shorts you like, your playlists and mixes, and the names you give them.
Our earlier story pages, which have closed: the stories you liked and bookmarked, the days you read, the stories you finished and the hour you finished them by your own clock, the pictures you revealed in them, and your achievements. Nothing new is added. We keep what’s there until you ask us to delete it.
Only with your yes: your watch history (your last 60 shorts, and how far you got) and your taste. Your taste is a list of scores for the characters, acts and themes you seem to enjoy, worked out from what you watch, finish, like, save and skip. The scores fade over time. We ask once, the first time you use Surprise me or Tonight. You can see your taste, switch learning off or wipe it in Your Library on Shorts at any time. Switching off stops learning at once. What was already learned is kept, unused, until you wipe it.

Kept only in your browser

Some things are stored only on your device and are never sent to us:

where you stopped in each video, so you can carry on;
your player settings, and whether we may greet you by your first name;
when you last visited, so we can welcome you back and show what’s new since then;
likes and playlists you chose to keep for this visit only, until you close the tab;
your Issue reader settings;
a copy of your Premium video links, so playback starts faster;
what Surprise me learns in an open tab while taste learning is off. It’s gone when you close the tab.

You can remove these at any time by clearing this site’s data in your browser.

Counting plays, without knowing who

To show what members love, we count plays, finishes, likes, saves and skips for each short, and likes for each picture and story. The counts are numbers per short, picture or story, never linked to a person. To count each play only once, your browser sends a random code for your visit, which we keep in scrambled form for half an hour.

Keeping LustLit safe

Our firewall, Wordfence, checks requests for attacks and records details of those it blocks and of sign-in attempts, including the IP address.
We log redirects and missing pages, with the IP address, browser and page, for 7 days, to fix broken links and spot attacks.
To stop abuse of our video features, we keep a scrambled form of your IP address for 10 minutes.

When you write to us

If you email us, we keep your message and our reply for as long as we need them to deal with what you wrote about and any follow-up, then delete them.

Email updates

If you signed up for our earlier email updates, we keep your email address, the date you signed up and the IP address you used, until you unsubscribe or we close the list.

3. Your sensitive information

What you watch, like, save and read on LustLit, and your taste, say something about your sex life. In UK and EU law that is "special category" data. Several US state laws call it sensitive data.
We use it only to run the features you choose. We learn your taste, keep your watch history and keep your likes and playlists in My LustLit only after you say yes, and we ask first because they say something about your sex life. Your likes, bookmarks and playlists exist only because you made them, and we use them only to show them back to you. You can withdraw your consent at any time: wipe your taste or your history in Your Library on Shorts, clear your likes and playlists in My LustLit, or ask us to delete all of your data.
We never sell it and never use it for advertising.
Your likes, bookmarks, playlists, mixes, history and taste never leave our systems, except to our hosting, network and backup providers, who handle them only to keep LustLit running for us.
Our statistics tools never run while you’re signed in or on our Shorts pages, so they never see your account or learn what you watch.
Your taste only changes which videos we suggest. We never use any of this to make decisions about you that have legal or similarly significant effects.

4. Our legal reasons (UK and EU)

To give you what you asked for (contract): your account, Premium access, your library and the features you use.
Your consent: statistics cookies, greeting you by your first name, your watch history and taste, and keeping your likes and playlists in My LustLit. Because your history, taste, likes and playlists say something about your sex life, we rely on your explicit consent for them.
Our legitimate interests: keeping LustLit secure and working, preventing abuse, blocking places where we can’t operate, counting plays without knowing who, answering your messages, and handling legal claims. We’ve weighed these against your interests, and you can object (section 8).
Legal duties: answering lawful requests from authorities, and keeping the records the law requires.

You don’t have to give us any information. Without a Patreon sign-in, though, we can’t give you an account or Premium.

5. Who handles your data

We never sell your data, and we don’t use advertising networks.

Companies that work for us

DreamHost (US) hosts our website and database, and keeps server logs.
Cloudflare (US, with a worldwide network) delivers LustLit, protects it from attacks, and works out your country or state.
BunnyCDN (Slovenia, with a worldwide network) delivers our pictures and video files. Its Bunny Fonts service delivers some of our fonts.
Google runs our email (Google Workspace), stores our backups (Google Drive), serves some of our fonts (Google Fonts) and, with your OK, runs Google Analytics.
Automattic runs our site search (Jetpack Search) and, with your OK, Jetpack Stats.
Microsoft runs Clarity, with your OK.
Defiant makes our firewall, Wordfence.

These companies may use your data only to provide their service to us, with two exceptions. If you allow statistics, Google, Microsoft and Automattic may also use statistics data to improve their own services, under their own privacy policies. And Cloudflare and Defiant use what they learn about attacks, including attackers’ IP addresses, to protect other websites too.

Other companies

Patreon is a separate company that runs memberships under its own privacy policy. When you sign in, Patreon tells us who you are and about your LustLit membership. We don’t send Patreon anything about what you do on LustLit.
When the law requires it, or to protect someone from harm, or to establish or defend legal claims.
If LustLit changes hands, to the new owner, who must keep to this policy.

6. Where your data goes

We’re based in the US, and most of our providers handle data in the US and other countries. If you’re in the UK or the EU, your data leaves your country, and those countries’ laws may not protect it in the same way. Where the law requires it, our providers protect these transfers with recognised safeguards, such as certification under the EU-U.S. Data Privacy Framework and its UK Extension, or contract clauses approved by regulators.

7. How long we keep it

If you ask, we delete all of your data: your account, your likes, playlists, history and taste, your activity on our earlier story pages, your Founder date, our copy of your profile picture, and anything an earlier plugin kept about you. We do it within 30 days of your request, and copies in our backups are gone within a further 30 days. The only exceptions are our firewall’s security records (below), which expire by themselves, and anything the law makes us keep.
Your account and library: while your account exists.
Your likes and playlists in My LustLit: until you clear them, take back your yes, or ask us to delete your data.
Watch history: your last 60 shorts, until you clear it or ask us to delete your data.
Taste: until you wipe it or delete your account. The scores fade over time, halving about every 45 days.
Server logs: about a week.
Redirect and missing-page logs: 7 days.
Firewall records: about two weeks. Records of sign-in attempts: up to about a year.
Scrambled IP address for abuse checks: 10 minutes. Play-count code: half an hour.
Emails with us: as long as we need them to deal with what you wrote about and any follow-up.
Email updates list: until you unsubscribe or we close it.
Statistics: Google Analytics keeps data for up to 14 months. Clarity keeps recordings for 30 days, and a sample for up to 9 months. Jetpack Stats keeps its logs for 28 days.
Cookies: see section 9.

We keep data longer only when the law requires it, or for an ongoing legal claim.

8. Your rights

Wherever you live, you can ask us to:

tell you what we hold about you, and give you a copy, including in a form you can take elsewhere;
correct anything that’s wrong;
delete all of your data and close your account;
stop or limit using it, including where we rely on our legitimate interests;
withdraw any consent you’ve given. That doesn’t affect what we did before.

In UK and EU law these are your rights of access, rectification, erasure, restriction, portability and objection. Residents of US states with privacy laws, including California, have similar rights to know, access, correct and delete. We don’t sell personal data, and we don’t use it for targeted advertising. Apart from the security uses in section 5, our statistics tools are the only place other companies may use data for their own purposes, and the Cookies button switches them off: that is your opt-out.

How to use them

Write to [email protected], ideally from the email address on your Patreon account. We may ask for more information to confirm it’s you.
Wipe your taste or clear your history yourself, at any time, in Your Library on Shorts, and clear your likes and playlists in My LustLit.
To disconnect LustLit from Patreon, remove LustLit from the apps connected to your Patreon account. That stops Patreon sharing with us. To delete everything we hold, write to us, and we’ll delete all of it.
We’ll answer within one month. If a request is complex we may need up to two more months, and we’ll tell you.
In the US, someone you authorise can ask for you, with your signed permission. If we turn down your request, you can appeal by replying to our answer. If you’re unhappy with the result, you can contact your state attorney general.
We’ll never treat you worse for using your rights.

Complaints

Please tell us first, at [email protected]. We’ll confirm we’ve received your complaint within 30 days, and deal with it without undue delay.
In the UK you can also complain to the Information Commissioner’s Office (ico.org.uk). In the EU you can complain to the data protection authority where you live or work.

9. Cookies and similar technologies

Cookies are small files a website stores in your browser. Local storage works in a similar way. We use them for three things.

Essential (always on)

These make LustLit work as you asked:

age_gate remembers that you confirmed you’re 18 or over: up to 1 year if "Remember me" is ticked, otherwise until you close your browser.
cmplz_ cookies remember your cookie choices: 1 year.
wordpress_logged_in_ and wordpress_sec_ cookies keep you signed in: up to 1 year, or until you sign out.
wordpress_test_cookie checks that your browser accepts cookies: until you close your browser.
Cloudflare may place a short-lived security cookie, such as cf_clearance, if it needs to check your connection.

Your settings (in your browser only)

Browser storage keys starting with llv- (Shorts), llm- (My LustLit) and ll-reader (Issues) remember your settings, where you stopped, what you skipped in Surprise me, when you last visited, and likes and playlists you chose to keep for one visit only. Apart from the random visit code that counts each play once (section 2), they never leave your browser. They’re needed for features you ask for, or they only adapt LustLit to your choices, so we don’t ask before storing them. You can remove them at any time by clearing this site’s data.

Statistics (only with your OK)

_ga and ga cookies (Google Analytics) tell visits apart: up to 2 years.
_clck (1 year) and _clsk (1 day) (Microsoft Clarity). Microsoft may also place MUID (1 year) on its own domain.
tk_ai, tk_qs and other tk_ cookies (Automattic, for Jetpack Search and Jetpack Stats): from 30 minutes to 1 year.

Your choices

Use the Cookies button at the bottom of the screen to change your mind at any time.
If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a no to statistics.
You can also block or delete cookies in your browser settings. LustLit needs the essential ones to work properly.

10. Children

LustLit is for adults only. We don’t knowingly collect data from anyone under 18. If we learn that we have, we’ll delete it and close the account. If you think a child is using LustLit, tell us at [email protected].

11. Keeping your data safe

Every connection to LustLit is encrypted.
Paid pictures and videos are kept outside the public part of our server, and sent only to members entitled to them.
Your account data is never kept in our delivery network’s caches.
Only the people who run LustLit can reach our systems, through protected accounts.
No system is perfectly secure. If a breach puts your data at risk, we’ll tell you, and the regulators, as the law requires.

12. Changes to this policy

We’ll post any change here with a new date. If a change is significant, we’ll tell signed-in members on the site before it applies.

13. More for US residents

What we collect, in the categories US laws use: identifiers (such as your name, email address, IP address and Patreon ID); commercial information (your membership status); internet activity (the pages and videos you open, your likes, bookmarks and playlists); inferences (your taste, only with your yes); sensitive information (what you watch and like says something about your sex life, and we use it only to run the features you choose); and rough location from your IP address.
Where it comes from: you, your browser and Patreon.
Why: the purposes in sections 2 to 4.
Who receives it: the companies in section 5, for those purposes. We don’t sell personal information, and we haven’t in the past 12 months. To stop our statistics tools, use the Cookies button.
Do Not Track and Global Privacy Control: see section 9.
Other companies tracking you: if you allow statistics, Google, Microsoft and Automattic may collect information about your visits over time and across other websites that use their tools. Without your OK, their statistics tools don’t run on LustLit.
California’s "Shine the Light" law: we don’t share personal information with anyone for their own direct marketing.

14. Contact us

Write to [email protected] about your privacy, your data or this policy.