Privacy notice

Draft: the text in square brackets has not been filled in yet. This page will be completed before accounts open.

This notice explains which personal data dollforum.eu ("DollForum") processes, why, for how long, and which rights you have. It describes what the site actually does today.

Who is responsible

The controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. Email: [CONTACT EMAIL].

For privacy questions and requests, contact [DPO/PRIVACY CONTACT].

Visiting the site

You can watch every video without an account. When you visit, the following is processed:

• Web server logs: for every request our web server records your IP address, the date and time, the address requested, the result, the amount of data sent, the referring page and your browser identification (user agent). We use them to keep the site secure and working and to investigate abuse. They are deleted automatically after 14 days.
• Request limits: to protect the site against floods of requests, the web server counts requests per IP address in memory. These counters are never written to disk.
• View counts: so that a video counts one view per visitor at most every 30 minutes, the site keeps your IP address together with the video number in memory, for at most 30 minutes, and never writes it to disk. The view count itself contains no personal data.

Legal basis: our legitimate interest in a secure, working and fairly counted service (Art. 6(1)(f) GDPR).

Cookies

DollForum sets only its own cookies, each needed for something you asked for. There are no analytics, advertising or third-party cookies, and no tracking pixels.

• __Host-df_age: remembers that you confirmed you are 18 or older. Kept for 12 months.
• __Host-df_lang: remembers the language you chose (or the one picked from your browser settings on your first visit). Kept for 12 months.
• __Host-df_csrf: a random value that protects forms against cross-site request forgery. Kept for 30 days.
• __Host-df_sid: only while you are signed in; a random session identifier. Kept for 30 days or until you sign out. We store only a SHA-256 hash of it, never the identifier itself.
• __Host-df_pc: remembers your answer to “Suggest videos based on what I watch on this device?” (yes or no). Kept for 12 months.
• __Host-df_pv: only if you said yes; the random ID your viewing history is stored under (see “Video suggestions and viewing statistics”). Kept for 180 days and renewed while you use the site; deleted as soon as you turn personalised suggestions off.
• __Host-df_pcask: set for 10 minutes when you confirm your age, so that the question about personalised suggestions is asked once. It contains no data.

Video suggestions and viewing statistics

To suggest videos (for example “Up next” and “Trending”) we record what visitors who confirmed that they are 18 or older do with the videos on DollForum: which videos were shown (a video card visible for at least one second), which were clicked (with the list it was in and, for a suggestion, the video you came from), started, watched to 25, 50, 75 and 95 percent and to the end, liked or marked “not interested”.

• For everyone: these events are stored only as counts, without your IP address and without any identifier: per video and day how often it was shown, clicked and played, the watch time, how far it was watched and the likes, and how often visitors went from one video to another. These counts contain no personal data and are kept. The individual events themselves are not stored.
• To protect the site and keep the counts fair, events are limited per IP address (for IPv6, the first half of the address): 60 a minute; per video and day at most 3 plays and 1 completion, like or unlike; a move from one video to another once a day; 20 “not interested” a day; and 3 new IDs for personalised suggestions a day. These counters are kept in memory only, for at most one day, never written to disk, and IP addresses never reach the database of suggestions.
• Personalised suggestions, only if you say yes (we ask once after the age confirmation; you can change it at any time in Privacy settings): a random ID is stored in the cookie __Host-df_pv, and the events of this browser are stored with it, together with, per video, how long and how far you watched it, whether you liked it and whether you marked it “not interested”. This history is used to suggest videos to you on this device; the individual events stored with the ID are deleted after 180 days. It counts towards the suggestions everyone sees (such as “Up next”) only for pairs of videos that at least 5 different people who said yes have both watched, so that what one person watched cannot be seen there. It is not linked to your account, name, email address or IP address.
• Your viewing history is deleted 180 days after your last visit. If you turn personalised suggestions off or reset them in Privacy settings, the cookie and everything stored under the ID are deleted at once (a derived copy used to compute suggestions within 15 minutes). Deleting your account also deletes the viewing history of the browser you delete it from: at once or, if the database of suggestions is unavailable at that moment, at the latest after 180 days.

Legal basis: for the anonymous statistics, our legitimate interest in suggesting the videos visitors want to watch (Art. 6(1)(f) GDPR); for personalised suggestions, your consent (Art. 6(1)(a) GDPR), which also covers storing the ID cookie on your device and which you can withdraw at any time with effect for the future.

Your account

When you create an account we store your email address, your display name, the date you signed up and your password as an argon2id hash (we never store or see the password itself). We also store account settings: whether you asked to become an uploader and the shop order number you gave for that, whether your comments are approved automatically, and whether the account is suspended.

Your display name is public: it appears with your comments, your videos and on your member page. Your email address is never shown publicly.

Sign-in protection: failed sign-ins are counted per network address (the full IPv4 address, or the first half of an IPv6 address) and per email address, and new accounts per network address per hour, to stop password guessing and mass sign-ups. These counters are deleted after one day at the latest.

Legal basis: providing the account you asked for (Art. 6(1)(b) GDPR) and our legitimate interest in protecting accounts (Art. 6(1)(f) GDPR).

Comments

We store the text of your comment, the video, the time and your account. Comments are public with your display name. The first comments of a new member are checked by our team before they appear.

When a comment is deleted (by our team, or because you delete your account) its text is erased at once, and the empty record is removed within 30 days.

Reports

Anyone can report a video or comment. We store the reported item, the reason you give, the time, your account if you are signed in, and your network address (the full IPv4 address, or the first half of an IPv6 address). The network address is used to limit reports to 20 a day and to recognise repeated reports; it is removed after 90 days. The rest of the report is kept as a record of our moderation.

Legal basis: our legitimate interest, and our duty, to act on reports of illegal or unsuitable content (Art. 6(1)(f) and (c) GDPR).

Uploads

Verified uploaders can upload videos. We store the title, description and doll number you enter, the original file you upload and the versions we make for playback. Before uploading you confirm that the video is your own, that everyone shown is an adult who agreed to be filmed and published, and that it shows no human nudity.

The published versions are re-encoded without the file’s embedded metadata (such as the recording device or location). The original file is kept privately on our server and is never published.

• Rejected videos: the original file is deleted 30 days after the upload.
• Uploads that could not be processed: deleted after 30 days.
• Published or hidden videos: the original is kept while the video is on the site or hidden by our team.
• If you delete your account, your videos are taken off the site at once and their files, including the originals, are deleted by the next daily clean-up.

Legal basis: providing the upload service you asked for (Art. 6(1)(b) GDPR).

Moderation

Staff of [COMPANY LEGAL NAME] review uploads, comments, reports and uploader requests in a private moderation tool, where they can see account email addresses and order numbers. Every moderation action is recorded with the staff member, the time and the affected item.

Who receives data

We do not sell personal data and do not use advertising or analytics services. The public pages load no scripts, fonts or images from other companies.

The site runs on a server provided by [HOSTING PROVIDER AND COUNTRY], which processes data on our behalf. We disclose data to authorities only where the law requires it.

“Buy” buttons lead to our online shops; when you follow one, you leave DollForum and the shop’s own privacy notice applies.

Backups

Once a day the forum database (accounts, comments, reports and moderation records) is copied to a backup on the same server. We keep 14 daily and 8 weekly copies, so deleted data can remain in a backup for up to 8 weeks before it is overwritten. Backups are only used to restore the site after a failure. The database of suggestions (statistics and the viewing history of visitors who said yes, see above) is backed up the same way. If a backup of it is ever restored, viewing histories deleted since the backup was made are deleted again: for this we keep the random IDs of deleted histories (and nothing else) outside that database for 180 days. Uploaded video files are not part of these backups.

When an account is deleted we keep a short record (the account number, the time and a pseudonymous hash of the email address instead of the address itself; it can be matched against a known address) for 70 days, so that the deletion can be repeated if the database ever has to be restored from a backup.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), to have it erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on our legitimate interests (Art. 21).

• You can change your password and delete your account yourself on your account page. Deleting your account removes your account and sessions, erases your comments, takes your videos off the site, and removes your name from reports you made.
• You can turn personalised suggestions on or off, or reset them, at any time in Privacy settings. Turning them off or resetting them deletes the viewing history stored under your ID at once.
• For everything else, including a copy of your data or a change of email address, contact [DPO/PRIVACY CONTACT]. There is no automatic password reset by email yet: if you forgot your password, write to us from the email address of your account.
• If your account has been suspended you can no longer sign in, but you can still have it deleted: write to [DPO/PRIVACY CONTACT] from the email address of the account.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you think the infringement took place.

Other information

DollForum is only for adults: we do not knowingly process data of anyone under 18. We make no decisions based solely on automated processing; which videos are suggested is chosen automatically, but has no legal or similarly significant effect on you. We will update this notice when the way we process data changes.

Last updated: 22 October 2026