Back

Legal · xDreams

xDreams Privacy Policy

Last updated: November 2026

Operator

Your privacy is our top priority. Here we explain what data we collect and how we use it.

1. Data Controller

XDreams LLC, a Limited Liability Company organized under the laws of the U.S. state of Wyoming, 30 N Gould St Ste N, Sheridan, WY 82801, USA. Contact: [email protected]

2. Data We Collect

  • Account data: display name, email address, country, and language.
  • Verification data (Creators only): legal name, date of birth, government-issued ID, and selfie, processed through our verification partner Didit.
  • Usage data: platform activity, streams, messages, and transactions.
  • Payment data: payments are processed by PCI-DSS-certified third parties (including CCBill, NOWPayments, Paxum, and Cosmo Payment, depending on the payment method chosen); XDreams does not store full card data.
  • Technical data: IP address, device type, browser, and session cookies.

3. Purpose of Processing

  • Providing the streaming service and user communication.
  • Identity verification and compliance with legal requirements, including age verification (18+) and record-keeping under 18 U.S.C. § 2257.
  • Payment processing and earnings management.
  • Fraud detection and prevention.
  • Handling reports and appeals under our Complaints Policy and Appeals Policy.
  • Platform improvement through usage analytics.
  • Automatic translation of messages between users of different languages.
  • Sending relevant account notifications.

4. Legal Basis

To the extent the General Data Protection Regulation (GDPR) applies to the processing of data of users resident in the EU/EEA, we rely on the following legal bases: • Contract performance: processing necessary to provide the service, including the automatic translation of messages that you send or receive. • Legal obligation: age verification, record-keeping under 18 U.S.C. § 2257, and reporting obligations to authorities. • Legitimate interest: fraud prevention and platform security. • Consent: optional marketing communications. You can withdraw your consent at any time with effect for the future.

5. Data Retention

Account data is retained as long as the account is active. After termination, data is deleted within 90 days unless a legal retention obligation applies. Verification records (including records under 18 U.S.C. § 2257) are retained for 7 years due to legal requirements.

6. Third Parties & International Transfers

• Supabase (data storage). • CCBill, NOWPayments, Paxum, Cosmo Payment (payment processing, depending on method chosen). • Didit (identity and age verification). • OpenAI (automatic translation of messages between users of different languages; the text of a message is sent to this provider in order to translate it). We do not sell or transfer data to third parties for commercial purposes. As XDreams LLC is based in the United States, processing may involve data transfers outside the EU/EEA; we take appropriate measures to ensure a comparable level of protection.

7. Your Rights

• Access: request a copy of your personal data. • Rectification: correct inaccurate data. • Erasure: request deletion of your data (right to be forgotten), subject to any legal retention obligation. • Data portability: receive your data in a machine-readable format. • Objection & restriction: restrict certain processing activities. • Complaint: if you live in the EU/EEA, you may lodge a complaint with the data protection supervisory authority in your country of residence. To exercise your rights: [email protected]. Reports about content and appeals of moderation decisions are handled under our separately published Complaints Policy and Appeals Policy.

8. Security

xDreams applies industry-standard technical and organizational measures: TLS encryption in transit, encryption at rest, role-based access control, and regular security reviews.