# Privacy policy

This policy describes the limited browser and request data used by AI XXX Review, the same-origin redirect flow and the boundary between this publication and third-party providers.

Updated: 2026-09-15

## Information the editorial pages request

Reading the site does not require an account, name, email address, phone number, payment method, prompt, upload or profile. The current build does not provide a public contact form and does not intentionally ask visitors to submit sensitive, sexual, biometric, financial or identity information.

## Age-notice storage

The 18+ notice stores `adult-confirmed=yes` in browser `sessionStorage`. This value remains in the current tab session so the notice does not reopen on every page. It is not an identity check, age-verification credential or account record and normally disappears when the tab session ends.

## Outbound button processing

Creator and brand-review buttons use predefined same-origin `/continue/*` paths. The endpoint rejects unknown paths and chooses from server-side allowlists. It does not accept visitor-supplied destination URLs, prompts or free-form request bodies. The Worker returns an immediate redirect and does not request the external route on the visitor’s behalf.

Submitting an outbound action can create ordinary request records such as time, IP address, user agent, referrer and security signals at the hosting or network layer. The publication does not claim those operational logs are anonymous, absent or retained for zero time.

## Cookies, analytics and browser storage

The current build does not include advertising pixels, behavioral analytics, fingerprinting scripts, newsletter forms or non-essential cookies. The age-notice `sessionStorage` value is the only documented first-party browser persistence.

Browser caches, network intermediaries and the hosting platform can temporarily store public assets or request metadata for delivery, reliability and abuse prevention. A future release that adds analytics, consent tooling, accounts or forms requires this policy and the machine-readable data inventory to be updated before release.

## Third-party destinations

After a redirect, the selected platform and its service providers receive information normally sent with a web request and apply their own privacy, account, billing and content rules. AI XXX Review does not receive or control prompts, conversations, payment details or generated media entered on those services.

Visitors should review the destination’s current privacy and content terms before creating an account or entering personal information. Closing a destination does not delete data already supplied there.

## Rights requests and legal context

No monitored public request channel is asserted in this local release. The operator must connect and verify an appropriate channel before representing that privacy, correction, copyright or deletion requests can be received. We do not invent a mailbox or response-time promise.

This policy is descriptive, not legal advice. Applicable controller disclosures and statutory rights depend on the eventual operator, hosting configuration and jurisdictions in which the site is made available.