Privacy Policy

What we collect

We collect nothing that you volunteer, because we never ask for it.

• Your search text, which we need in order to answer the search.
• Standard request data our hosting provider records — IP address, browser user agent, requested page, and timestamp.
• A record of each page you open, so we can tell which parts of the site people actually use.
• A record when you click through to a creator, so we can tell that creator how many visits we sent them.
• Analytics about how visitors find us, collected by Google Analytics — but not if you are in the UK or the European Economic Area.
• How the site performed for you and a recording of your visit, collected by Better Stack — again, not if you are in the UK or the European Economic Area.

We do not ask for your name, email address, age, payment details, or any other personal information, and we have no way to associate a search with a person.

Where your search text goes

To answer a search we pass the text you typed to third-party service providers who help us process it. They receive only the search text itself, never request data that could identify you, and their handling of it is governed by their own privacy policies.

Cookies, analytics, and tracking

Nothing we run ourselves sets a cookie or saves anything on your device. We run no advertising and no advertising trackers anywhere.

We do use Google Analytics, which does set cookies, to understand where our visitors come from and which pages bring them here. It does not load at all for visitors in the United Kingdom or the European Economic Area — no analytics cookie is set and nothing about the visit reaches Google, which is why you are not asked to consent to one. Everywhere else it loads, and any standard content blocker will stop it.

We also use Better Stack to see how well the site performs and what breaks. It records how quickly pages loaded and responded for you, any errors your browser hit, and a replay of your visit — a reconstruction of the pages you moved through and where you clicked, including the address of any search page, which contains what you searched for. It keeps an identifier in your browser so the events of one visit can be grouped together. Before any of it is stored, we remove your IP address and anything that could recognise you on a later visit, so a replay is tied to that one visit rather than to you. Like Google Analytics it does not load at all in the United Kingdom or the European Economic Area, and any standard content blocker will stop it.

What Google receives is deliberately narrow: the pages you open, a count when someone clicks through to a creator, and — when you search — only the categories we read your search as, such as a niche, a hair colour, or a price range. It never receives the words you typed, and the address of the search page we report to Google has the query stripped out of it.

What we count ourselves

Three things, none of them using a cookie or anything saved on your device, and each tied to the same scrambled code described in the last paragraph below — never to a name, an account, or a stored IP address.

We record each page you open: which page it was, which country you opened it from, what kind of device you were on, and which site you arrived from.

We record each search: the text you typed, how many creators came back, and whether anything went wrong answering it.

When you click through to a creator, we record that the click happened. That record holds the creator, the time, and a scrambled code standing in for you, worked out from your IP address and browser and mixed with a secret that changes every day. Your IP address itself is never stored. Because the secret changes daily, two clicks a day apart cannot be recognised as the same person, and the record cannot be turned back into you.

How long we keep things

A search we have already answered is cached so it does not have to be processed again; that cache holds the text on its own, unlinked to any person. The search records described above are deleted after 180 days and the page records after 90. Where a search led you to click a creator, the click record also keeps the search that produced it, so we can tell the creator what people were looking for when they found them — attached to the daily scrambled code described above, never to a name, an account, or an IP address. Google keeps what it collects for 14 months, and Better Stack keeps performance data and session replays for as long as our plan with them retains it. Hosting request logs are retained briefly for security and debugging and then age out.

Who we share with

We do not sell data, and we do not share it for advertising. Data reaches only the providers who run the service, including the ones described above, Google, whose analytics product we use as described, and Better Stack, which receives the performance data and session replays described above. We may disclose information where the law requires it.

Creator information in our index

Our index describes creators, not visitors. It is built from information those creators published publicly, and it holds profile details and derived descriptive tags — not private messages, paywalled content, or contact details. If you are a creator and want your listing corrected or removed, write to us and we will act on it; see Remove a Listing.

When we remove a listing we delete it rather than hide it, including the mirrored profile picture and the record of where the handle was found. We retain one minimal record — the handle, the date, and the category of request — for the sole purpose of preventing the listing from being collected again when the index is next rebuilt. It contains no contact details and nothing from the request itself.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information a service holds about you. Since we hold no accounts and no identifying records about visitors, in most cases we simply have nothing to return. If you appear in the creator index and want that erased, see Remove a Listing. If you believe we hold something else about you, write to us and we will look.

Children

This service is for adults. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18.

International transfers

Our providers operate infrastructure in the United States and elsewhere, so handling a request may involve processing outside your country.

Links to other sites

Search results link out to OnlyFans and other third-party sites. Those links pass through this site first so the click can be counted, and you are sent straight on. The site you arrive at is told the visit came from cheekpeeks— that much and no more, never the words you searched. Once you arrive, that site's own privacy policy applies and this one no longer does.

Changes

If this policy changes, we will post the revised version here and update the date at the top.

Contact

Questions about privacy can go to contact@cheekpeeks.com.