Privacy

In short

• Afrilov's own counts of pages, searches and clicks hold no IP address, no browser details and no id for you. Google Analytics, which the site also uses, can tell a returning browser from a new one.
• Where a limit needs your IP address, Afrilov keeps only a one-way keyed code made from it, for a short time, or a bucket shared with many other addresses.
• An account is optional. It holds your email, your username and your favourites, and you can delete it yourself on your account page.
• Some parts of the pages come from other sites: Google Analytics, the video hosts' players on recorded-show pages, and the cam platforms' pictures and players. Each has its own privacy terms.

Recorded shows: the player loads with the page

On a recorded show's page, the video host's player (from voe.sx or mixdrop.ag) loads with the page, so your browser connects to that host as soon as the page opens. Nothing plays and no sound starts until you press Play inside the player. The host may set its own cookies, and after you press Play it may show its own adverts; those are the host's, under its own privacy terms, and a pass cannot remove them. A show's pictures load from cumlov.com or from its video host.

The free recorded shows are counted in your browser only (see what your browser keeps); nothing of that count is sent to Afrilov.

Live shows, pictures and links to other sites

Performer pictures and live previews load straight from the cam platforms' own image servers. On a performer's page while they are live, and when you rest the pointer on a live tile on a computer, Stripchat's own player loads and plays the room from Stripchat's servers; it may set its own cookies. On the insights page, your browser asks Chaturbate (chaturbate.com) directly for its list of live rooms, so Chaturbate applies its own rules for your location, and loads those rooms' pictures from Chaturbate's image servers. That request carries no cookie and no page address, and Afrilov keeps nothing of it.

Links from Afrilov to a live room or an advert go through afrilov.com/go/ first. That step records one row: the performer or the link, where on the page it was (the player or a banner, for example), your country, whether the performer was live, and the time. It keeps no IP address, no browser details and no id for you, and a bot's click is not recorded. A performer's video tiles link straight to afrilov.cam instead; those clicks are counted by the page itself, as below.

A link to a Stripchat room or to afrilov.cam, our live cam site, also carries a random number made for that one click. If the visit leads to a sign-up or a purchase there, the platform sends that number back with the kind of event, the amount, Afrilov's share and the device type it reports; Afrilov keeps no IP address from it. What you do on another site is between you and that site, under its own privacy terms.

Counting what people use

Afrilov counts page views, searches and clicks from the page itself: which page or performer, what kind of action, and for the first page of a visit, the website it came from (its domain only). A search keeps the words typed, how many results they found and which search box was used. These rows keep no IP address, browser details, account or any id that links one visit to another (while you are signed in, the requests carry your sign-in session, as all of them do, but the rows keep none of it), and they have no set deletion date. Addresses from the site's old version are redirected, and the redirect keeps only the old path, where it went and the time.

Afrilov also uses Google Analytics to count visits. Google's script loads on every page and sends Google the page's address (with any search words in it), its title, the address of the page you came from, and the browser details the script reads by default, such as the screen size and language. It sets Google's own cookies (their names start with _ga), which let Google tell a returning browser from a new one, for up to two years unless you clear them. Google sees your IP address, as any site your browser loads does, and its own privacy terms apply. A content blocker or your browser's tracking protection can stop it; the site works the same without it.

Cookies Afrilov sets

None of them holds your email, your name or your IP address. “Readable” means the page's own script can read it; only Afrilov's server can read the others. Signing in uses no cookie: the session is kept in your browser's storage (below).

• afl_go: a page-load token, the same for everyone in a given hour, so links out work only from a page of this site and not for automated traffic. 24 hours; readable.
• afl_sg: the day the support popup was last shown, so it shows at most once a day. Until the next midnight UTC; readable.
• afl_sv: only when this browser's storage is blocked: how many recorded-show pages it has opened, so the popup waits for the second. A year; readable.
• afl_rv: after a vote to record a performer: the performers this browser voted for (up to 100), signed, so a vote counts once. A year.

With the free shows' unlock:

• __Host-afl_unlock_click: after “Keep watching free”: the random numbers of this browser's last three presses, signed, so the free account it led to can be matched to this browser. 7 days, and removed once the shows are unlocked.
• __Host-afl_unlock: signed: the shows are unlocked on this browser, and until when. A year.
• afl_unlock: the same date, so the page knows before it paints. A year; readable.

With a supporter pass:

• __Host-afl_pass: signed: the pass's number and when it ends. Until the pass ends, or 90 days at most, signed again every week while you visit.
• __Host-afl_pass_ui: when that cookie was signed and when it lapses, so the page hides the ads before it paints. The same time; readable.
• __Host-afl_spc: from your first checkout: a random token that lets this browser, and no other, be shown its own codes again. 90 days, renewed at each checkout.
• __Host-afl_eco: only when you start a checkout with an email while signed out: that order's number, signed, so its pass comes on in this browser once it is paid. A day.

Signing out removes the pass cookies from that browser when the pass is on your account.

What your browser keeps

Local storage stays until you clear it; session storage goes when you close the tab. None of it is sent to Afrilov unless the line says so.

• afrilov:age-confirmed: that you confirmed you are 18 or over.
• afrilov:favorites: the performers you hearted. The home page sends them to Afrilov to fetch their tiles, and while you are signed in they are copied to your account too.
• afrilov:recent: the last 20 performer pages you opened, for “Recently viewed”. The home page sends them to Afrilov only to fetch their tiles; Afrilov keeps none of it.
• afrilov:promo-dismissed: that you closed the promo bar.
• afrilov:sponsored-tab:last: when this browser last opened a sponsored tab, so one opens at most once an hour.
• afl_req: the performers you voted for and when (up to 200, for 90 days), only to thank you later.
• afrilov:show-meter: today's date (UTC) and the recorded shows opened today, nothing else; older days are dropped.
• afrilov:show-unlock:asked: when you pressed “Keep watching free”, so the page can check by itself for the next 20 minutes; then it is removed.
• afrilov:support-goal:last: the day the support popup was last shown.
• afrilov:support-goal:views: how many recorded-show pages this browser has opened.
• afrilov:support-goal:quiet: when the site last said no pass is on sale, so it is not asked again for an hour.
• afrilov:support-checkout: the order number and time of the last checkout this browser started, so the page waits for that payment for two hours and no longer.
• afrilov:pass-sync: when this browser last checked your account for a pass.
• sb-…-auth-token: your sign-in session, while you are signed in. It goes with your requests to show who is signed in, and signing out removes it.

Session storage:

• afrilov:support-goal:visit: when this visit began, how many pages it has seen and whether it came from a search engine, for the popup's rules.
• afrilov:support-state: the last answer about the week's goal and passes, for ten minutes.
• afrilov:pass-recheck: when this tab last asked to renew the pass cookie.
• afrilov:support-goal-bar: that you closed the goal bar in this tab.
• video-pages-v2:…: the addresses of the video pages already seen, for the pager.

Clearing this site's data in your browser removes all of it and the cookies above, and signs you out. Your account, and a pass on it, stay: sign in and they come back.

Your account

To sign in, you give your email address or your username, and Afrilov emails a six-digit code from code@afrilov.com. The code is kept only as a salted hash and works for 10 minutes; its record, with keyed codes of your email and IP address, is deleted within two days. Sign-in attempts are limited by counts kept under one-way keyed codes made from what you typed and your IP address, kept about two hours, then cleared at the next attempt by anyone.

Your account holds your email, the username you choose and your favourites: the ones already in your browser are added to it when you sign in. Recently viewed performers are never kept on your account. Supabase, which runs the sign-in, can note the IP address and browser a session was started from, as most sign-in services do.

On your account page you can sign out on this device or on every device, and delete your account. Deleting it removes your email, your username and your favourites, for good. A supporter pass is not removed: it keeps working on the devices that already have it, and with its code, until it ends; it just stops following you when you sign in.

Supporter passes

A pass is optional. You pay in crypto on Trybit's own page: Afrilov sends Trybit only the amount, its currency and an order number, and never keeps your wallet address or a transaction id. Bought signed out, the pass goes on the account for the email you type, made then if there is none, and checkouts with an email are limited under keyed codes of the address and your IP address, kept about two hours, then cleared at the next attempt by anyone. The receipt with your code is sent to your email from code@afrilov.com.

Our pass records, which run apart from the site, keep your orders and passes under a one-way keyed code made from your account's id: never your email, your IP address, your wallet address or a transaction id. They are separated from that code when you delete your account. From the moment you start a checkout, Afrilov also keeps a note of which account the order is for, so its receipt can be emailed; it is cleared when the receipt is sent, or after 8 days at most. Each order keeps its amount, its status, Trybit's invoice number, the coin and network that paid it and how much arrived; a copy of your code is kept locked with a key only Afrilov's own server holds, so you can see it again when signed in. A checkout or a code entry counts in one of 65,536 anonymous buckets, so that thousands of codes cannot be tried; the bucket cannot be turned back into an address. More on the support page.

Forms you send

• A DMCA notice: your name, your email, the notice, your signature and the addresses it names, and a postal address if you give one. It is kept to handle the notice and passed to our recordings partner's takedown process.
• “Is this you? Claim it” on a performer's page: your email, and a handle and a note if you give them, with the page you claimed, so we can reply.
• A vote to record a performer: it keeps the performer and the day. To count one vote a day each, a one-way keyed code made from the day, the performer, your IP address and your browser's details is kept for that day and the next, then cleared at the next vote by anyone. The vote is passed on to our recordings partner with one number out of 65,536, made one way from part of your IP address, so a single network cannot outvote the rest.

A notice or a claim has no set deletion date: write to us to have yours removed.

Hosting and your location

Afrilov runs on Cloudflare, which sees your IP address on every request, as any host does, and sends the site's emails. Afrilov reads your country and region from it, with your browser's language setting, to respect performers who choose not to be shown in some places. Your country is kept with an outbound click, and nothing else of your location is stored; Afrilov's own code uses the address only for the keyed codes and buckets above. Afrilov's accounts and database are hosted by Supabase, and your browser sends page views, searches, your favourites and your sign-in to it directly, so Supabase sees your IP address too, as any host does.

Adults only

Afrilov is for adults only. The site contains adult content, and by entering you confirm you are at least 18 years old. If you think someone under 18 has an account here, write to us.

Your choices

• Clear this site's data in your browser to remove every cookie and stored item above.
• Use your account page to sign out everywhere or to delete your account.
• Block Google Analytics with a content blocker; the site works the same without it.
• To ask what Afrilov holds about you, or to have something you sent removed, write to afrilovhq@gmail.com. Takedown notices go to dmca@afrilov.com or the form on the DMCA page.