At KinkKal, we respect the privacy and security of the kink and BDSM community. This Privacy Policy outlines how we handle data on our website (kinkkal.com). We believe in total transparency: we only collect what is strictly necessary to keep the directory accurate and the platform secure.
Information We Collect on the Website
1. Event Submissions & Contact Info
When you submit an event, claim a listing, or request a correction, we may ask for your name and email address. This information is kept strictly internal for moderation purposes (so our Editors can contact you if there is an issue with your listing). We never publish your personal email address or sell it to third parties.
2. Editor & Admin Accounts
If you volunteer as a KinkKal Editor, we store your email address, securely hashed password, and optionally, links to your public profiles to verify your identity within the community.
3. Paid Event Promotions
When a user or guest purchases featured placement, KinkKal stores the purchaser account ID when one exists, whether the purchaser is an assigned organizer or a community supporter, the event and package selected, promotion dates, payment status, amount and currency, and Stripe Checkout Session and PaymentIntent identifiers. Stripe processes the payment and provides KinkKal with the email address entered during checkout for payment support. For community-sponsored placements, KinkKal notifies assigned event owners but does not share the sponsor's personal or payment information with them. KinkKal does not receive or store complete card numbers or card security codes. Stripe handles payment information under its Privacy Policy.
4. Security & Edge Protection (The Sentinel)
KinkKal uses Cloudflare as its primary security edge. Our security controls, collectively branded The Sentinel, may challenge, rate-limit, or block abusive requests before they reach KinkKal's application servers.
KinkKal does not maintain an application-level log of every routine page view. Cloudflare necessarily processes request information such as IP address, User Agent, requested path, and security signals to provide proxy and security services. KinkKal retains only redacted security alert episodes needed to investigate significant incidents, and automatically removes those local incident records after a limited retention period.
📍 Location Data & Geolocation
Our interactive map includes a "Find my location" feature designed to center your view and highlight nearby events. If you click this button, your web browser will ask for permission to access your device's GPS coordinates. This calculation happens entirely locally on your own device. KinkKal does not transmit, track, collect, or store your physical location or GPS coordinates on our servers.
🍪 Cookies & Local Storage
KinkKal uses minimal cookies to function securely. We use standard, heavily armored session cookies (flagged as Secure and HttpOnly) to keep our Admins and Editors logged in safely. We also use a simple local cookie (kinkkal_beta) to remember your preference if you opt-in to testing beta features like our interactive map filters. We do not use third-party tracking or advertising cookies.
🌍 Public Event Data
KinkKal is a public directory. By submitting an event to KinkKal, you acknowledge that the event details (Name, Location, Dates, Description, Links) will be publicly available on the internet, accessible via our JSON APIs, and included in our RSS feeds. Do not submit private, invite-only residential parties to this public database.
🇪🇺 European Union Users (GDPR)
If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have specific data protection rights under the General Data Protection Regulation (GDPR). Because we process your email address and IP address, you have the right to:
- Request Access: You may request a copy of the personal data (e.g., your Editor account details) we hold about you.
- Request Rectification: You have the right to request that we correct any information you believe is inaccurate.
- Right to be Forgotten: You may request that we permanently delete your account, email address, and associated personal data from our systems.
- Withdraw Consent: Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.
To exercise any of these rights, please email our administration team using the contact information below.
✉️ Contact Us
If you have any questions about this Privacy Policy, need to exercise your data rights, or wish to appeal an automated IP block, please contact our administration team at:
[email protected]
