This privacy policy explains how Signal & Static ("we," "us," "our") handles personal information when you visit our website — whether you're reading our NSFW AI video generator review or browsing our policy pages. We've tried to write it in plain language, but where the law uses specific terms — "personal data," "data controller," "legitimate interest" — we use those terms too, because they have specific legal meanings that ordinary substitutes don't capture. For broader site-usage rules, see our terms of service. For the small print on our editorial independence around ai porn coverage, see our disclaimer.
1. Who We Are
Signal & Static is the publisher and data controller for this website. We are based in Amsterdam, Netherlands. For all privacy-related correspondence, including data subject requests under the GDPR or the CCPA/CPRA, please contact us at [email protected] or via our contact page.
2. What Information We Collect
We collect three categories of information:
- 2.1 Automatically collected (every visit)
- When you visit any page, our servers and analytics tools automatically receive: your IP address (truncated for analytics), browser type and version, operating system, referring page, the pages you visit, the time spent on each, your approximate geographic location (typically at the city level, derived from IP), and your device type.
- 2.2 Provided by you (when you contact us)
- If you send us an email or submit a form, we receive the contents of your message, your email address, and any other information you choose to provide. We do not require you to create an account to read our content.
- 2.3 Stored locally on your device (cookies)
- Cookies and similar technologies store small pieces of information in your browser. See our separate Cookie Policy for a complete inventory.
We do not knowingly collect: government-issued identification numbers, financial account numbers, precise geolocation, biometric data, racial or ethnic information, religious beliefs, political opinions, trade union membership, genetic data, or data concerning sex life or sexual orientation. If you send us any of this information voluntarily (for example in an email), we do not store, process, or share it beyond what is necessary to respond to your message.
3. Why We Collect It
We use the information described above for the following purposes:
- To operate the website. Server logs and basic analytics are necessary to keep the site running, debug problems, and protect against attacks.
- To understand how the site is used. Aggregate analytics — how many people read which articles, where they come from, which devices they use — help us decide what to cover and how to improve the site.
- To respond to you. If you contact us, we use your message and email address to reply.
- To comply with law. Where we are legally required to retain or disclose information (for example in response to a valid legal order), we do so.
We do not use your information to build advertising profiles, to sell to data brokers, or to train any artificial intelligence or machine learning system.
4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation, we must identify a legal basis for each type of processing. Ours are:
- Legitimate interest (Article 6(1)(f)): operating and securing the website, basic analytics in aggregated/pseudonymous form, and responding to inquiries.
- Consent (Article 6(1)(a)): for any non-essential cookies and any optional features that involve processing of personal data. Consent is requested via our cookie banner and can be withdrawn at any time.
- Legal obligation (Article 6(1)(c)): retention or disclosure required by law.
5. Who We Share Data With
We share personal information with the following categories of third parties, only as necessary to operate the service:
- 5.1 Hosting and infrastructure
- Our website is served via standard web infrastructure providers. These providers process IP addresses and server logs strictly to deliver our content to your browser.
- 5.2 Analytics
- We use a privacy-conscious analytics tool that does not set cross-site tracking cookies, does not collect personally identifying information, and does not share data with third parties. Analytics data is aggregated and does not identify individual visitors.
- 5.3 Email
- If you email us, your message passes through standard email infrastructure. We use a reputable business email provider; we do not share email contents with anyone else unless legally compelled.
- 5.4 Legal requirements
- We disclose information when legally required to do so — for example in response to a valid court order, subpoena, or government request. We push back on overly broad requests and we publish a transparency report annually summarizing any compelled disclosures.
We do not sell personal information and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act.
6. How Long We Keep Data
We keep different categories of data for different periods:
- Server logs — 30 days, then deleted automatically.
- Aggregated analytics — retained indefinitely in aggregated form that does not identify individual visitors.
- Email correspondence — typically retained for 24 months after the last related message, then archived or deleted.
- Legal-hold records — retained for as long as the relevant law requires (for example, tax records and DMCA notices have statutory retention periods).
7. Your Rights
Depending on where you live, you may have some or all of the following rights:
- 7.1 Right of access
- You can ask us what personal information we hold about you and receive a copy.
- 7.2 Right to rectification
- You can ask us to correct information that is inaccurate or incomplete.
- 7.3 Right to erasure
- You can ask us to delete information we hold about you. We will do so unless legal obligations or a clear legitimate interest require us to retain it.
- 7.4 Right to restrict processing
- You can ask us to pause processing while we investigate a request or correct an issue.
- 7.5 Right to data portability
- You can ask us for a copy of your data in a structured, machine-readable format.
- 7.6 Right to object
- You can object to processing based on legitimate interest. We will reassess and stop processing unless we have compelling reasons not to.
- 7.7 Right to withdraw consent
- Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- 7.8 Right to lodge a complaint
- You have the right to complain to your local data protection authority. In the Netherlands, that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
To exercise any of these rights, contact [email protected]. We respond to verified requests within 30 days. For California residents, equivalent rights are provided under the CCPA/CPRA and can be exercised through the same address.
8. Cookies and Tracking
We use only essential cookies by default and request consent for any non-essential cookies through a clearly labeled banner. Our full Cookie Policy explains what is set, by whom, and how long each cookie persists.
9. Children's Privacy
Signal & Static is not directed to children. Our coverage frequently addresses adult themes and is intended for an adult audience. We do not knowingly collect personal information from anyone under 18 years old. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
10. International Data Transfers
If you access our site from outside the European Economic Area, your information may be transferred to and processed in countries with data protection laws different from those of your country. Where we transfer personal data outside the EEA, we rely on appropriate safeguards including European Commission adequacy decisions and Standard Contractual Clauses.
11. Security
We use industry-standard security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encryption at rest where applicable, access controls limiting personnel who can read correspondence, and regular review of our infrastructure.
No security measure is perfect. If we discover a breach affecting personal data, we will notify affected individuals and the relevant authorities within 72 hours where required by law.
12. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, post a notice on our home page for at least 30 days. We encourage you to review the policy periodically.
13. How to Contact Us
For any question about this privacy policy, your personal data, or how to exercise your rights:
Email: [email protected]
Postal: [Address to be provided], Amsterdam, Netherlands
General contact: /contact