Privacy Notice
Summary
creampiehd.com has no user accounts, sets no cookies and embeds no analytics or social trackers. We do not sell or share personal information.
Advertising and external services
Advertising, when present, is served by third-party networks that operate under their own privacy policies. We send them no personal data, and this site sends no referrer header, so they do not learn which page you came from.
You will not find an external analytics tag, a tag manager, or a social sharing widget on any page.
Clicking through to a producer's site takes you outside creampiehd.com; from then on its own cookies and privacy policy apply, including its record of the referral.
If we ever add a feature that needs cookies or similar technology, this policy will be updated first and your consent will be asked where the law requires it.
Children
This site is for adults only. We do not knowingly process data of anyone under 18; if you believe a minor has contacted us, tell us and we will delete the message.
Controller
Questions about this policy, and any request about your data, go to the operator of creampiehd.com at dmca@creampiehd.com.
Your rights
Under the GDPR you may ask to access, correct or erase personal data about you, to restrict or object to its processing, and to receive it in a portable form.
Because we keep almost nothing that identifies a visitor, most requests will find no data. Write to dmca@creampiehd.com and we will reply within one month.
You also have the right to complain to the data protection authority of the country where you live or work.
Why we may process this data
We process the limited data described above on the basis of our legitimate interest in running, securing and improving the site (Article 6(1)(f) GDPR).
When you write to us, we use your message to reply and, where it concerns copyright or abuse, to comply with the law.
Cookies and local storage
No cookie is set by creampiehd.com, nothing is placed in local storage, and your browser is not asked to remember anything about you.
Because nothing is stored on your device, there is no consent banner: there is nothing to consent to.
US privacy laws
We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act and similar state laws, and we do not use it for targeted advertising.
What we measure
We count page views and video plays so we know which pages are worth keeping. These are counters, not records: there is no table of visits, and no event is stored with your identity attached.
Terms typed into the search box are kept the same way: as anonymous totals - the phrase and how many times it was searched - so we can see what visitors look for and add it. No search is linked to a visitor, an address or a session.
Unique-visitor estimates come from a hash built out of a secret that changes every day, your IP address with the last part removed, and your browser identification string. That hash goes straight into a counting estimator and is never written down.
Who processes data for us
Pages, images and videos reach you through the Cloudflare network, which also shields the site from attacks; the servers themselves are hosted by OVHcloud in the EU.
Cloudflare has to see your complete IP address to deliver the site. It acts as our processor under its data processing agreement; transfers outside the EU are covered by standard contractual clauses and the EU-U.S. Data Privacy Framework.
Retention
Totals and search tallies contain nothing personal and stay as long as the site does; server logs last 14 days, rate-limit counters roughly a minute, vote fingerprints 12 hours.
Emails are retained only for as long as handling the request, and any resulting legal duty, requires.
Why you cannot be tracked across our sites
The site identifier is part of the hash. The same visitor on two of our sites produces two hashes with no relationship to each other, so the visits cannot be linked - not by a third party, and not by us.
The secret rotates daily and is not retained, which means yesterday's figures cannot be matched to today's.
Technical logs
Our web server keeps a technical log of requests: the time, the page requested, the response, your browser's identification string and a shortened form of your IP address with its last part removed. The full address is not written to the log.
These logs exist for security and troubleshooting, are not used to profile anyone, and are deleted automatically after 14 days.
Abuse protection counts requests from each shortened IP address for about a minute; votes are deduplicated with a fingerprint built from a daily secret that expires after 12 hours.
Last updated: October 6, 2026