Privacy Policy
Effective date: 1 August 2026
Last updated: 1 August 2026
This policy explains what Smutlore collects, why, who processes it on our behalf, and how to exercise your rights. It describes the site as it actually runs today rather than features we may add later.
What we collect
If you never sign in, we collect no account data. Your age confirmation, reading preferences and reading position are stored in your own browser and are not sent to us.
If you create an account, we collect your email address, the sign-in tokens sent to it, your account role and language, and reader data you generate such as bookmarks, follows and reading progress.
On every request, our infrastructure records ordinary server and security log data: IP address, browser user-agent, the URL requested, timestamps, and events raised by the firewall.
When you report content or send a copyright notice, we keep what you send and what we did about it.
We do not ask readers for identity documents, and we do not sell reading history to anyone.
Cookies and local storage
Smutlore sets only two kinds of cookie. The age-gate cookie records that you confirmed you are 18 or over and lasts one year. Session cookies exist only if you sign in, and are required for the account to work. There are currently no analytics or advertising cookies.
Your reading preferences and reading position are kept in your browser's local storage, not in a cookie, and are not transmitted to us unless you sign in.
Who processes data for us
If we add advertising, the networks involved will be named here before they are switched on.
Why we may use it
To operate the site and your account, to send sign-in links, to keep reading position and preferences, to secure the service against abuse and attack, to moderate content and meet our obligations around illegal material, to handle copyright notices, and to comply with the law. Where the GDPR or UK GDPR applies, we rely on performance of a contract for your account, our legitimate interests in security and moderation, and legal obligations where they apply.
International transfers
The operator is established in the Republic of Korea, hosting is in the Netherlands, and Cloudflare and Amazon SES operate globally. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Account data is kept while the account exists. Server and security logs are kept for a limited operational period. Moderation records, copyright notices and records relating to illegal material are kept for as long as we need them for audit, enforcement of repeat-infringer rules, and legal obligations, which may be longer than the account itself.
Your rights
Depending on where you live, you may ask for access to your data, correction, deletion, a copy in portable form, or restriction of processing, and you may object to processing based on legitimate interests. Write to privacy@smutlore.com. We may need to confirm your identity, and we may keep some records where the law requires it.
You can delete your account at any time by writing to the same address.
Under-18s
Smutlore is not for anyone under 18 and is not directed at children. If we learn a minor has used the site, we close the account and delete the data, other than records we must preserve for safety or legal reasons.
Contact
Privacy requests: privacy@smutlore.com
A postal address for the operator is available on request.