Privacy Policy
Last updated: 17 October 2026
In short: we keep what is needed to run your stories: the settings you choose, your messages and the story so far. If you sign in, we also keep your email. If you pay, we keep a record of the payment, but never your card details. Where the law requires an age check before explicit pictures, our partner Ondato does it with a selfie: we receive only the result, never your selfie. We don't sell your data and we don't use analytics or social media trackers. If you turn on notifications, your browser's push service delivers them, encrypted so that it can't read them. If you came to Crushly through one of our ads, a cookie remembers that ad for 30 days, and we tell our ad tracker when you sign up or pay (the ad's id and the amount, never your email or your stories). Your messages go to our AI provider so it can write the replies. No human chats with you, and nobody else can see your stories. You can delete your account and stories at any time.
This policy explains how Sirtemed LTD collects, uses, stores and protects your personal data when you use Crushly. By using Crushly, you confirm that you have read it.
1. Who is responsible
The controller of your personal data is Sirtemed LTD, Lordou Vyronos 61, Lumiel Building, 4th floor, 6023 Larnaca, Cyprus, company registration number HE 368447, VAT number 10368447A ("we", "us"). You can reach us through the contact form, or by email at hello@crushly.com.
2. About Crushly
Crushly is interactive romantic fiction for adults. It contains sexually explicit text and adult pictures, all generated by artificial intelligence. You never talk to a real person: there are no human chat operators, and you can't talk to other users. Users can't publish posts, upload content or share content with other users. Your stories are visible only to you.
3. What we collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Player id: a random id your browser creates and keeps in its local storage | To recognise your stories when you come back | Contract, Art. 6(1)(b) |
| Story data: the name you play under, your gender, who you're into, heat level, language and character, your messages, the story text, the characters you've met, your private chats with them (your messages, theirs, and a short summary the chat keeps of itself), what was shown to you, the pictures you have, your plan and message counts | To write and continue your story, and to apply your plan | Contract, Art. 6(1)(b); for sensitive data, your explicit consent, Art. 9(2)(a) (see section 5) |
| Account (only if you sign in): your email address, when you signed in, your sign-in sessions and your plan. Sign-in codes and session tokens are stored only as one-way hashes. | To let you sign in with a code and keep your progress on every device | Contract, Art. 6(1)(b) |
| Credits and custom pictures: your credit balance and every change to it (packs bought, credits used, refunds), and the custom pictures you asked for (your request text, its status and the picture) | To sell and keep track of credits, to make the pictures you asked for, and to refund declined requests | Contract, Art. 6(1)(b); for sensitive data, your explicit consent, Art. 9(2)(a) (see section 5) |
| News emails (only if you have an account): your email address, whether you unsubscribed, when you last wrote to each character, and (free plan) when your free messages ran out and with which character | Now and then, to tell you about new stories or features of Crushly, when you haven't been back for a while, that there is something new in your chat with a character (at most every few days), and, on the free plan, once that your free messages are back. Every news email has a one-click unsubscribe link, and you can also ask us through the contact form. Nothing in them is explicit. | Legitimate interest, Art. 6(1)(f): telling our own users about our own service. You can object at any time by unsubscribing. |
| Notifications (only if you turn them on): the push subscription your browser gives us (an address at your browser's push service and the keys to encrypt messages for it), your player id, the site language, and when a notification last went through | To tell you, when you haven't been back for a while, that there is something new in your chat with a character (at most every few days), and, on the free plan, once that your free messages are back. A notification shows at most a character's name and a short line like "New in your chat": never a picture or explicit text. Its content is encrypted, so the push service can't read it. | Consent, Art. 6(1)(a): you are asked in a private chat, and your browser asks again. You can turn notifications off at any time in your account sheet or in your browser settings, and the subscription is deleted. |
| Payment records (only if you pay): our payment reference, the provider's payment id, the amount, currency, period and status, renewal dates and attempts, refunds and chargebacks, and the email address you give us when you pay (or the one the provider sends us). We send a sign-in code to that address so you can confirm it and keep your plan on every device. We never receive or store your card number or other card details. | To give you the plan you paid for, renew or cancel it, handle refunds and disputes, and prevent payment fraud | Contract, Art. 6(1)(b); keeping records for tax and accounting, legal obligation, Art. 6(1)(c); fraud prevention, legitimate interest, Art. 6(1)(f) |
| Your approximate location: the country (and, in the US, the state) that our host Cloudflare derives from your IP address on each visit. It is not stored, except as part of an age check (below). | To find out whether the law where you are requires an age check before explicit content, and to choose how your payment is processed | Legal obligation, Art. 6(1)(c), where EU or member-state law requires the check; otherwise legitimate interest, Art. 6(1)(f): complying with the law where you are and keeping minors away from adult content |
| Age check (only where the law requires it, and only if you start one): the result (passed, rejected or pending), its date, the age range Ondato estimated, the reason for a rejection, Ondato's reference for the check, and the region you were in. Your selfie, and any identity document Ondato asks for, go to Ondato only: we never receive or store them. | To unlock explicit pictures (and, in Germany and Australia, explicit messages) once you have passed, to keep them locked otherwise, and to show that we check age where the law requires it | As for your approximate location (above) |
Ad click (only if you came through one of our ads): the random id of the ad click, which the ad link carries and the crushly_click cookie keeps for 30 days, linked to your player id when you sign up or pay. If you then sign up or pay, our ad tracker receives that click id, the kind of event (sign-up, first payment or later payment), and for a payment the amount, currency and our payment reference. |
To know which of our ads bring people who sign up or pay, so we can pay the ad partners and spend on the ads that work | Legitimate interest, Art. 6(1)(f): measuring our own advertising. You can object at any time (see section 9), or block the cookie in your browser. |
| Usage statistics per story: the story version and settings, the number and length of your messages, timings, chapters reached, pictures shown or opened, and the running cost. These statistics do not contain the text of your messages. | To find out which stories work and to improve them | Legitimate interest, Art. 6(1)(f) |
| Security data: your IP address, used in counters that limit how many sign-in codes, new stories and feedback messages one network can send; the Cloudflare Turnstile bot check, which looks at browser and device signals | To stop abuse, bots and fraud | Legitimate interest, Art. 6(1)(f) |
| Feedback, reports and requests you send: your message, the email you give (optional), your player and story id, the page, language and browser; for a removal request, also your name and the details you give us | To answer you, fix what you report, and handle complaints, removal requests, refund requests and appeals | Legitimate interest, Art. 6(1)(f); where the law requires us to act, legal obligation, Art. 6(1)(c) |
| Moderation records: reports about an account, what we found, warnings and the decisions we took | To enforce the Terms, keep the service safe and lawful, and handle appeals | Legitimate interest, Art. 6(1)(f); legal obligation, Art. 6(1)(c) |
| Technical logs: errors and request details kept by our host | To keep the service running and fix problems | Legitimate interest, Art. 6(1)(f) |
We don't ask for your real name. You enter card details only on the payment provider's page. They never reach us (see section 6).
4. Who sees your stories
Your messages are processed by AI only to write the replies, run your story, keep the service secure and improve it. No human writes replies for the characters. We don't routinely read stories. Authorised staff may look at a story only in these cases: to investigate a report or an abuse our checks detect, to help you when you ask us to, to handle an appeal, or when the law requires it.
5. Sensitive information
Who you're into and what you write in a story can reveal your sexual orientation or sex life. Under the GDPR this is a special category of data. We process it only to run your stories, and only with the explicit consent you give before you start ("By continuing you agree…"). You can withdraw that consent at any time by deleting your account, or by asking us to delete your data. Stories can't be played without it.
Age check. To estimate your age from a selfie and check that a real person is in front of the camera, Ondato processes an image of your face. If it needs an identity document, it also compares your face with the photo on the document, which is biometric data. Ondato asks for your consent on its own page before the check starts. You don't have to do the check: without it, explicit pictures (and, in Germany and Australia, explicit messages) simply stay locked where the law requires one.
6. Who else processes your data
We use these providers. Each one acts on our instructions under its own data-processing terms:
- Cloudflare, Inc. hosts the site and stores the data (Workers, Durable Objects, D1, R2). It also runs the Turnstile bot check, sends sign-in codes and news emails to your email address, sends us notifications (such as the feedback you send), and keeps technical logs.
- xAI (Grok API) writes the story replies. With each message it receives your story settings, the recent conversation and the story's memory. It does not receive your email.
- Ondato (UAB "Ondato", Vilnius, Lithuania, EU) runs the age check where the law requires one. It receives your selfie (and, if it asks for one, your identity document) directly on its own page, together with your player id so it can tell us the result. It does not receive your stories or your email. See also Ondato's privacy policy.
- Your browser's push service (Google for Chrome and most Android browsers, Mozilla for Firefox, Apple for Safari, Microsoft for Edge on Windows) delivers notifications if you turn them on. It is chosen by your browser, not by us. It receives each notification encrypted, so it can't read it, and it learns only that a message from Crushly is waiting for your browser.
- Our ad tracker measures which of our ads work. If you came through one of our ads, it receives the ad's click id and the sign-up and payment events listed under "Ad click" above. It does not receive your email, your name, your card details or your stories.
Payments are handled by one of these payment providers. The payment page shows which one:
- Finby (TrustPay, a.s., Slovakia, EU) processes card payments and stores the card for renewing plans, so that we can ask it to charge the next period.
- CardBilling (a Verotel brand run by Yoursafe B.V., Netherlands, EU) processes card payments and bills renewing plans itself.
You enter your card and billing details directly with the provider. Each provider processes them as an independent controller under its own privacy policy, and for its own legal duties such as fraud checks and anti-money-laundering rules. It sends us only what is listed under "Payment records" above.
Cloudflare and xAI are based in the United States, so your data may be processed outside your country and outside the EU. Transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, as each provider offers.
We don't sell your data. Apart from the ad click events above, we don't share it for advertising. We disclose data to authorities, courts or other third parties only when the law requires it, or when it is needed to protect our legal rights, our users or the security of the service, for example when we report illegal content.
7. Security
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, change or disclosure. All connections are encrypted (HTTPS). Sign-in codes and session tokens are stored only as one-way hashes. Access to stored data is limited to the people who need it. We monitor the service for abuse. No transmission or storage is completely secure, so we can't guarantee absolute security. If a breach puts your rights at high risk, we will tell you as the law requires.
8. How long we keep it
- Stories and account: as long as your account (or, without an account, your player id) exists. When you delete your account in the app, its stories, characters, plan and sign-in sessions are deleted straight away.
- Without an account: your stories are tied to the player id in your browser. If you clear your browser data, you lose access to them. To have them deleted, send us a request from the same browser through the contact form, which includes your player id.
- Statistics: when you delete your account, they are separated from you and kept only in anonymous form.
- Sign-in codes expire after 10 minutes. Sessions expire after 180 days. IP counters are deleted after about a day.
- Feedback is kept as long as we need it to handle your message and improve the service. If you delete your account, your email is removed from it.
- Payment records are kept for as long as tax and accounting law requires, even after you delete your account. Deleting your account stops renewals that we charge ourselves.
- Age checks: the result is kept as long as your account (or, without an account, your player id) exists, so you only verify once. When you delete your account, we delete it and ask Ondato to erase the selfie, any document and the personal data it holds for your checks. Otherwise Ondato keeps them only as long as our agreement with it and the law allow.
- Ad click: the cookie expires after 30 days. The link between the click and your player id is deleted when you delete your account. The record of the events we sent to the ad tracker is kept with the payment records.
- Notifications: the subscription is kept until you turn notifications off, your browser cancels it, or you delete your account. A subscription that stops working is deleted automatically.
- Moderation records and data needed to establish, exercise or defend legal claims are kept as long as they are needed for that purpose.
When we no longer need data, we delete it or make it anonymous.
9. Your rights
You have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent at any time. Contact us through the contact form. You can also complain to a supervisory authority: in Cyprus, the Commissioner for Personal Data Protection (Iasonos 1, 1082 Nicosia, dataprotection.gov.cy), or the authority in the country where you live.
10. Cookies and browser storage
crushly_session, set only when you sign in. It keeps you signed in (up to 180 days) and is strictly necessary.crushly_click, an advertising cookie set only when you arrive through one of our ads. It holds the random id of that ad click for 30 days, so that a sign-up or payment can be credited to the ad (see "Ad click" in section 3). It holds nothing else about you, and nothing is read from other sites.- Local storage in your browser keeps your player id, your age confirmation, your story settings and which story you're in, and, while you are on Ondato's page for an age check, which screen to bring you back to.
- Notifications: if you turn them on, your browser installs a small script from Crushly (a service worker) that shows them and opens the chat when you tap one. It stores nothing else. Local storage remembers whether you turned them on or chose "Not now".
- Cloudflare Turnstile may run a short check in your browser to tell people from bots.
There are no analytics or social media trackers, and no third-party cookies. You can block or delete cookies and local storage in your browser settings. Deleting crushly_click changes nothing for you. Deleting the rest means you can't stay signed in, and your stories on that device are lost.
11. Adults only
Crushly is only for people aged 18 or older, or the age of majority where they live if that is higher. We don't knowingly collect data from anyone younger. If we find out that a minor has used the service, we delete their data without undue delay. If you believe a minor has used Crushly, please tell us straight away through the contact form or at hello@crushly.com.
12. Changes
If we change this policy, we'll publish the new version here and update the date at the top. If the change is important, we'll also tell you in the app.
13. Contact
For questions about this policy or your data, or to use your rights, write to:
Sirtemed LTD
Lordou Vyronos 61, Lumiel Building, 4th floor
6023 Larnaca, Cyprus
Email: hello@crushly.com · Contact form