Privacy Policy

Last updated: June 1, 2026

This Privacy Policy describes how toon.wtf ("we", "us") collects, uses, and protects information about you ("user", "member") when you visit or use this site.

1. Information we collect

Account data

When you register or log in, we store: username, email address, encrypted password, role, account creation date, and your subscription status (managed through our payment processor and aMember Pro).

Profile data (optional)

Avatar image, cover image, display name, and bio — only if you choose to add them.

Activity data

Login dates, posts and comments you create, suggestions and votes you submit in People's Choice, pics you favorite or tag, packs you open, trades you make, and battles you participate in. This data powers the gamification features and is associated with your account.

Technical data

IP address, browser type, and request logs — kept on the server for security and abuse prevention.

2. How we use it

• To authenticate your account and provide access to subscriber content.
• To run the gamification systems (albums, vault, trading post, battles, People's Choice).
• To display public-facing content you choose to make public (forum posts, comments, profile, suggestions submitted under your username or chosen display name).
• To send essential service emails (account changes, payment receipts, password resets) — we do not send marketing email.
• To investigate abuse, fraud, or technical issues.

3. What we do NOT do

• We do not sell or rent your personal information to third parties.
• We do not use third-party advertising trackers on member areas.
• We do not share your individual activity logs with other members.

4. Cookies and session storage

We use first-party cookies and PHP session storage strictly to keep you logged in, remember your preferences (e.g. age-gate acceptance), and protect against cross-site request forgery (CSRF). We do not use third-party tracking cookies.

5. Payment processing

Subscription payments are handled by our payment processor (Verotel and/or aMember Pro). We do not store your full payment card data on this server. Payment processors operate under their own privacy policies, which you accept when subscribing.

6. Third-party services

• aMember Pro — membership and billing management.
• Payment processor — secure card processing.
• Hosting provider — server infrastructure.

These services receive only the data necessary to operate.

7. Your rights

• Access — you can view most of your data directly via your profile and settings pages.
• Correction — update your profile, display name, avatar, and bio at any time.
• Deletion — you may request full account deletion by contacting support. Note: deletion is permanent and includes your album progress, trading history, and content you have posted.
• Data portability — on request, we provide an export of your account data in a machine-readable format.

8. Age restriction

This site contains adult content and is restricted to users aged 18 or older. We do not knowingly collect data from minors. If we learn that we have collected data from someone under 18, we will delete it.

9. Data retention

We retain account data while your account is active. Inactive accounts (no login for 24+ months) may be archived or deleted at our discretion. Backups may persist for up to 90 days after deletion.

10. Security

We use HTTPS, password hashing, CSRF protection, and parameterized database queries. No system is perfectly secure — if you suspect unauthorized access to your account, change your password immediately and notify support.

11. Changes to this policy

We may update this policy. Material changes will be announced via the site's Announcements section. The "Last updated" date at the top will always reflect the most recent revision.

12. Contact

Questions about this policy? Open a ticket via the helpdesk.