Privacy Policy
Last updated September 25, 2026
1. Summary
- All The Babes is an adults-only directory of about 124,000 model and performer profile pages.
- You can browse without an account. We collect basic technical data when you visit, and an age-gate cookie.
- If you create an account we collect your email and a password. If you claim a profile we also collect a link to a social account and a selfie, which is deleted about 30 days after we decide the claim.
- We use Cloudflare for hosting and analytics. We do not currently show ads.
- We do not sell your personal data.
2. What we collect
When you visit. Our hosting provider, Cloudflare, receives your IP address and request details (the page you asked for, browser type, and similar) in order to deliver the site. Our server also produces operational logs of requests, held by Cloudflare for a short period.
Age-gate cookie. When you confirm you are 18 or older we save a cookie so we do not ask again. We do not collect ID.
Analytics. We use Cloudflare Web Analytics to count visits and see which pages are used. Cloudflare states that this service does not use cookies or track individuals across sites. We do not use Google Analytics.
Account. If you sign up we store your email address, your name or display name, a securely hashed password, and the time you confirmed you are 18 or older. When you sign in we also record the IP address and browser details of your session.
Things you do while signed in. Profiles you save, ratings, and any edit suggestions or trivia you submit.
Claiming a profile. A link to a social account and a selfie photo. A person reviews them by hand to check that you are the person profiled. We do not use automated facial recognition. The selfie is kept in private storage, is never shown publicly, and is deleted about 30 days after we decide your claim.
Disputes. If you file a dispute about a claim, we store your message, any contact detail you choose to give, and a one-way scrambled (hashed) version of your IP address, which helps us spot repeated abuse without keeping the raw address.
Email. If you write to abuse@allthebabes.com, we keep your message and address so we can deal with your request.
What we do not collect. Government ID, payment details (the site takes no payments), or your precise location.
3. Why we use it, and our legal basis
Where the GDPR or UK GDPR applies, these are the bases we rely on:
| Information | Why | Legal basis |
|---|---|---|
| IP address, request data, logs | Deliver and secure the site, fix faults, prevent abuse | Legitimate interests |
| Age-gate cookie | Remember your age confirmation | Legitimate interests (strictly necessary to run an adults-only site) |
| Cloudflare Web Analytics | Understand how the site is used | Legitimate interests |
| Account data and session records | Run your account and keep it secure | Contract (providing the account you asked for); legitimate interests for security |
| Claim information and selfie | Verify identity before giving someone control of a profile | Your consent, and legitimate interests in preventing false claims |
| Disputes, correspondence | Handle reports and requests | Legitimate interests; legal obligation where it applies |
4. Cookies
| Name | Purpose | Duration |
|---|---|---|
| age_verified | Remembers that you confirmed you are 18 or older | 1 year |
| Session cookie (set by our sign-in system) | Keeps you signed in. Only set if you sign in | About 7 days |
Cloudflare Web Analytics does not set cookies. We do not currently use advertising or tracking cookies.
5. Who else sees your data
Cloudflare hosts and delivers the site, stores our database and images, and provides analytics. See Cloudflare’s privacy policy. It also delivers the account emails we send you, such as a password-reset or email-verification link.
Our fonts are served from our own site, so loading a page does not send your details to any font provider.
We do not sell personal data. We may disclose information if the law requires it, or to protect the rights and safety of people affected by content on the site.
Advertising. We do not currently show ads. If we start, the advertising provider may set its own cookies, and we will update this policy and add any required consent choice before the ads go live.
6. Information about the people profiled
Profile pages carry the names, photographs and biographies of adult models and performers. This information comes from third-party public sources, and biographies are written from those sources and can contain errors. We do not claim that each photograph was supplied or approved by the person pictured.
If you are pictured or profiled and want something corrected or removed, emailabuse@allthebabes.com with the URL and what you want changed. We aim to reply within 7 calendar days, hide the material while we review, and keep what you send only to deal with your request. See our Content Removal page for the full process. Requests are reviewed individually and are not automatically granted.
7. How long we keep things, and security
- Selfies for profile claims: about 30 days after we decide the claim.
- Account data, saves, ratings and submissions: while your account exists. Ask us to delete the account and we will delete it along with these.
- Sign-in sessions: until they expire or you sign out.
- Server logs: held by Cloudflare for a short period, on its own schedule.
- Disputes and emails to abuse@allthebabes.com: for as long as needed to handle the matter and any follow-up.
Passwords are stored hashed, selfies sit in private storage that is never publicly reachable, and the site is served over HTTPS. No system is completely secure, and we cannot guarantee it.
8. International transfers
Cloudflare runs a global network, so your information may be processed in countries other than yours, including the United States. Where UK or EU law requires a safeguard for that, we rely on the safeguards Cloudflare offers, such as standard contractual clauses.
9. Your rights
UK and EU. You can ask for a copy of your personal data, correction, deletion, restriction, or to object to processing, and you can take back consent where we rely on it. You can also complain to your local data protection authority.
California. You can ask what personal information we hold, and ask us to correct or delete it. We do not sell personal information or share it for cross-context advertising.
Everywhere else. Depending on where you live, you may have similar rights.
To use any of these, email abuse@allthebabes.com and say what you want. We may need to check that you are who you say you are before acting, for example by asking you to write from the email address on your account. We aim to reply within 30 days.
10. Children
The site is for adults only, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has used the site or an account, email us and we will delete the information.
11. Changes
We may update this policy. The date at the top shows when it last changed. If the changes are significant and you have an account, we will email you.
12. Contact
Privacy questions and requests: abuse@allthebabes.com.