Controller
PornLess / T.A.B. Medien, Thomas Becker
Buchwaldstr. 3, 60385 Frankfurt, Germany
our support team by email
Account and login
When you register, we process your name, email address, encrypted password or selected login provider to create and secure your account. For passwordless sign-in, we store a cryptographic one-time token for up to 15 minutes and use an email delivery provider to send the link. Social login providers transmit the profile information that you approve during sign-in.
Passkeys
If you enable passkeys, we store the credential identifier, public key, account and domain association, technical authenticator metadata and creation/last-use times until you remove the passkey or your account is deleted. We do not receive your fingerprint, face data or private key. Your device or password manager handles local verification and any synchronization. One-time verification challenges expire after five minutes. Short-lived, hashed network identifiers are used to limit abuse of the login endpoint. Passkeys can be removed in your account; Google and email remain alternative sign-in methods.
Program use and sensitive information
When you use an account, we store the selected program, completed lessons, progress and any lesson notes so that you can continue across devices. This information may reveal details about sexual behaviour or mental wellbeing and is therefore treated as sensitive. It is processed only after your explicit consent, which you may withdraw for the future. Mood, browser-protection preferences and the list of protected websites remain on your device. We do not receive browsing history, search terms, page content or screenshots.
Optional short-exercise evaluation
Only if you explicitly opt in for an answer do we send and retain it in the website database for the operator’s ongoing evaluation. The record contains the exercise, rating (weaker, unchanged, stronger or unsure), interface language, server calendar day in UTC, whether the 60-second timer elapsed, consent-text version and a random deletion code. It contains no name, email, account association, browsing history, IP address or identifier linking different exercises. We do not attach account cookies to this request. Hosting providers still process technical connection data needed to deliver the service. These answers may concern wellbeing or sexual behaviour; submission is based on your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR, where applicable).
The operator sees counts by exercise and day and can export these grouped counts. Answers remain stored while this evaluation is operated, unless you delete them using your code. Keep your code: without it, we cannot associate an answer with you. Deletion removes the answer from future evaluations; existing downloaded summaries do not change. Each new answer requires a new opt-in. You can decline without losing access to any exercise. Without consent, feedback stays only in the open page until reload. These reports describe voluntary immediate impressions, not unique people, diagnoses or proven treatment outcomes.
Delete feedback using your codePayments, activation and cancellation
Subscription payments are processed by Stripe. We receive or compare the account email, plan, payment status and billing period required to activate and administer access; complete card details remain with Stripe. If you request manual activation or cancellation, we store the account email, status, time and confirmation reference until the request and applicable retention duties are complete.
Legal basis, retention and rights
Account and contract data are processed to provide the requested service and fulfil the contract. Legally required records are retained to comply with legal obligations. Program-related sensitive information is processed on the basis of explicit consent. We retain data only as long as required for these purposes. You may request access, correction, deletion, restriction and portability, object where applicable, or withdraw consent for the future.
Optional Pause Community
Joining requires separate explicit consent (Article 6(1)(a) and, where applicable, Article 9(2)(a) GDPR). We store account association, a generated alias, chosen language and goal, group membership, consent version and time, check-in ratings, submitted text, publication status, reports and mute settings. This information may concern health or sexual life. Test results and lesson notes are not used for matching. Members see their group's aliases and approved posts; the operator reviews all free text before publication and can associate it with your account. No external AI service processes community text in this pilot. The website's hosting and database infrastructure store these records. Your account's Plus entitlement is checked to provide access.
Community data remain available during your community membership until you delete your posts or leave. You may withdraw consent for the future by leaving; this deletes your membership, posts, reports and mute settings. Deleting the account also deletes its community records. Expiry of Plus blocks group reading and writing but does not automatically delete your contributions; leaving remains available. Technical account-based action counters prevent abuse and reset after one hour. Other members may make copies that we cannot recall. Please do not share identifying information. For data access, corrections or complaints about moderation, use the email contact provided above.
TrustedSite
We load an external script from TrustedSite to display its trustmark on PornLess. This establishes a connection to the provider, which receives technical connection data such as your IP address and browser information. Whether the trustmark appears depends on the domain’s certification status and the provider’s plan limits.
Reviews from ProvenExpert
In the footer of PornLess, we display the ProvenExpert review seal linked to our shared PornoPause profile. It loads automatically from the provider when you visit a page. Technical connection data such as your IP address and browser information are transmitted to ProvenExpert. Our integration does not pass test answers, results, notes or account data.
The seal links to ProvenExpert. Its processing of data and publication of your review are covered by ProvenExpert’s privacy policy. Please do not share intimate details in your review.
Self-check, goals and daily reflections
Your ten self-check answers and the resulting overview stay in the current browser visit. They are not sent to our database or PostHog. Saving to your account is optional and records only your chosen goal, time preference and submitted daily reflections (date, self-rating from 1 to 5 or no rating, whether you tried a step and your feedback), together with your account association, consent version and save time. These records are used to display your personal plan and progress across visits and devices. The save action asks for your explicit consent; the records may concern health or sexual life. They remain until you delete them. Under Progress you can withdraw by deleting the saved goal and all daily reflections. This does not delete your separate program progress. Deleting your account also removes the associated records.
Contact and deletion
Send privacy questions or deletion requests to our support team by email. Data deletion instructions.