End User Privacy Policy for OFAuth Linking and Login

This Privacy Policy applies to individuals who link or log in with their OnlyFans account using an OFAuth form on a third-party application or website ("Client Platform"). It explains what information OFAuth processes to enable account linking, the purposes and legal bases for such processing, and your choices. This policy supplements (and does not replace) the Client Platform's own privacy policy, which governs its handling of your data once received.

1. Data We Process for Linking and Login

To securely enable linking and login, OFAuth may process limited categories of data, which can include:

Identifiers related to your OnlyFans account necessary to verify ownership and linking status (e.g., account ID or handle as presented via the verification flow).
Linking events and metadata (e.g., timestamps, link status, token/session identifiers) to support authentication, audit, and security.
Technical and security details when you interact with OFAuth services (e.g., IP address, device/browser information, logs) used for fraud prevention, service reliability, and abuse detection.

OFAuth does not require your OnlyFans password and does not sell your personal data.

2. Sources of Information

We receive information directly from you when you initiate linking or login, and from your interaction with OFAuth services during the process. The Client Platform may separately collect or receive information from you; refer to its privacy policy for details.

3. Purposes of Processing

We process information to:

Verify account ownership and enable linking or login you request.
Operate, secure, and improve OFAuth services.
Detect, prevent, and investigate fraud, abuse, and violations of our acceptable use guidelines.
Maintain logs and records for security, auditing, and legal compliance.

4. Legal Bases

Where applicable privacy laws require a legal basis, we rely on your consent (for linking/login you initiate), our legitimate interests in providing and protecting the service, and compliance with legal obligations. The Client Platform may rely on different legal bases once it receives your information.

5. Sharing of Information

We share the minimum necessary information with the Client Platform to complete linking or login that you request. We may also share information with service providers (processors) that support our operations under contractual confidentiality and security obligations, and with authorities when required by law.

6. Retention

We retain information only for as long as necessary to provide linking/login, ensure security, maintain auditability, and meet legal obligations. Retention periods vary by record type and applicable law.

7. International Transfers

If information is transferred internationally, we implement appropriate safeguards consistent with applicable law (for example, contractual protections where required).

8. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal data, or to object to processing or withdraw consent. To exercise rights related to information held by the Client Platform, contact the Client Platform directly. For rights related to OFAuth processing during linking/login, contact us using the details below.

9. Security

We use organizational and technical measures designed to protect your information. No system is 100% secure; we continuously improve controls and monitor for abuse.

10. Children

OFAuth is not intended for individuals under the age required to hold an OnlyFans account. Do not attempt to link or log in if you do not meet eligibility requirements.

11. Updates to This Policy

We may update this policy from time to time. The "Last updated" date will reflect the most recent changes. Your continued use of OFAuth linking/login after updates constitutes acceptance of the changes.

12. Contact

For questions, requests, or complaints regarding OFAuth's processing during linking or login, contact: support@ofauth.com.