OnlyFans Privacy Policy

This document explains how OnlyFans handles your personal information: what it collects, who it shares it with, and what rights you have. OnlyFans does not sell your data or use it for cross-site targeted advertising. If you are based in the U.S., OnlyFans may run a criminal background check on you using a third-party provider, and declining to provide requested personal data may limit or block your access to the platform.

This privacy policy establishes OnlyFans' data collection, processing, sharing, and retention practices, along with the rights available to users regarding their personal data. The policy sets a hard age threshold of 18 or older for all users and permits OnlyFans to conduct third-party criminal background checks on U.S.-based users using full name and date of birth. OnlyFans explicitly prohibits selling personal data or sharing it for cross-context behavioural advertising, and it does not engage in solely automated decision-making with legal or similarly significant effects on users. Cross-border data transfers are limited to three defined legal bases: adequacy decisions, appropriate safeguards, or authorisation by applicable law. Face Recognition Data is held exclusively by a third-party provider and never collected, received, possessed, or accessed by OnlyFans itself.

As a user, your personal data will not be sold or shared for cross-context behavioural advertising, and no consequential decisions about you will be made by automated systems alone. If you are in the U.S., OnlyFans may share your full name and date of birth with a third-party screening provider to check for serious criminal convictions. Your right to have your personal data deleted is not absolute and may be limited where, for example, your account was deactivated for Terms of Service violations. If you have undergone face recognition verification, you can withdraw consent to retention of that biometric data for authentication by contacting privacy@onlyfans.com.