Last updated 18 October 2026
LustXR is a directory. Most of what you do here ends in a click through to a partner site that hosts the video, and that partner's privacy policy takes over at that moment. We do not control what they collect and we cannot delete it for you.
What we pass to them when you click is what any link passes: your browser sends its usual request, and the link carries an identifier telling the partner the visit came from us so the commission is credited. That identifier identifies us, not you. We do not append your email address, your account or anything else about you to an outbound link.
Only if you create one, which browsing does not require. An email address and a password hash; a display name and avatar if you set one; for creators, the payout details needed to pay you and the enrolment record described below.
Adult content requires an adult audience, and in some places it requires us to prove we checked. Where a check is required, it is run by a third-party identity provider. They see the document and the selfie; we receive the outcome — pass or fail, the date, and a reference number — and store that. We do not receive or store the image of your identity document.
You do not need an account to pass the age check. If you are in a state that requires one, the check runs for you as a visitor, and in that case we store nothing at all: the result is a signed cookie in your own browser saying a provider confirmed you are an adult, which state you were in, and when it expires. There is no record of you at this end to delete, and clearing your cookies clears it. Where the law asks only for a confirmation rather than a document, that is the same cookie recording a button press.
In Florida there is a second route, and it keeps nothing. Florida law requires that we offer an anonymous alternative to the document check and let you pick. If you take it, your camera takes one photograph and sends it to our verification provider, who estimates an age from the face in it and returns a yes or a no. The request tells them to store nothing — no copy of the photograph and no face template — and it carries nothing that identifies you, so there is no record at their end and nothing for either of us to delete. We never receive the photograph. What we are left with is the fact that a check passed, in which state and when: a cookie in your browser if you are not signed in, or a line against your account if you are. A photograph that is declined leaves nothing at all. The estimate is set to pass only faces that are clearly adult, so being declined is not a finding that you are under 18 — you can confirm with a document instead.
Which jurisdictions require this, and what happens everywhere else, is set out in the terms of service.
Card details are handled by a payment processor and never reach our servers. What we hold is the ledger: the credits bought, what they were spent on, and when. That record is also your receipt, which is why it is itemised in your profile.
Server logs record IP address, user agent, the address requested and the time. They exist for abuse handling, debugging and security, and are not used to build a profile of you.
We use Google Analytics 4 to count visits and see which parts of the site are used. It sets cookies and sends Google an identifier for your browser. It is configured for aggregate measurement — we read it as totals, not as a record of what any one person watched.
Advertising on this site is served by JuicyAds. Their script runs in your browser and may set its own cookies to limit how often you see the same advertisement and to measure clicks. We do not send them your email address, your account, your verification status or your viewing history, and we do not receive personal information back from them.
The live cam row is an affiliate feed from Chaturbate. Two different things happen there, and the difference matters:
Browsing the row sends them nothing about you. Our server fetches the list of who is online, once, and shares the one answer with every visitor. Your address is not passed on, and no request leaves your browser for them while you are only looking at the thumbnails.
Opening a room does. The player is their page running inside ours, so from that moment your browser is talking to Chaturbate directly: they see your IP address and user agent and may set their own cookies, exactly as if you had gone to their site. The same is true of clicking through. Their privacy policy governs that, not ours. We do not send them your email address, your account or your verification status, and the affiliate identifier on the link identifies us, not you.
Transactional email — receipts, password resets, security notices — is sent because you have an account and cannot be switched off while you do. Marketing email is sent only if you opted in, and every one of those carries an unsubscribe link that works in one click.
Our identity provider, our payment processor, our email delivery, our hosting and CDN providers, and Google Analytics and JuicyAds as described above. Each gets only what its job needs. We will also disclose information where we are legally required to, and where it is necessary to investigate abuse of the service.
Account and ledger records are kept while the account is open and for seven years after it closes, which is what tax and chargeback rules require. Server logs are kept for 90 days. Age-verification outcomes and the records described in our 2257 statement are kept for as long as the law requires, which in that case is a fixed period we do not get to shorten by request.
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, and ask us to delete it. If you are in the EU, the UK, California or any of the US states with a comparable law, those rights are statutory and we answer on the statutory timetable. Everywhere else we answer the same way, because running two standards would be more work than running one.
Email contact@lustxr.com. We do not charge for this and we will not ask you to justify the request.
A session cookie keeps you signed in. An age cookie records that you passed the age check, where you were when you passed it and when it expires — it holds no name, no document and no identifier for you, and it is the only copy of that result when you are not signed in. Analytics and advertising cookies are set by Google and JuicyAds respectively, and opening a cam player lets Chaturbate set theirs.
Blocking the third-party ones will not break the site. Blocking the session cookie will sign you out; blocking the age cookie means being asked the age question again on every visit.
This service is for adults. We do not knowingly collect information from anyone under 18, and an account we find belongs to a minor is closed and deleted rather than suspended.
If we change this policy in a way that affects what we collect or who we share it with, we will email account holders rather than only changing the date at the top.