Last updated October 19, 2026
This page says what Naughty Curator collects, why, and what you can do about it. The short version: we collect what we need to run the site, we don’t run ads or third-party trackers, and we don’t sell anything about you.
What we collect
If you just read
- Three small preference cookies: that you confirmed you’re 18 (
sin_age), light or dark theme (sin_theme), and content warnings you’ve chosen to hide (sin_hide). They stay on your device. - If you rate or report something without an account, a random ID cookie (
sin_vid) so one person counts once. We store only a scrambled (hashed) version of it, which can’t be traced back to you. - A count of chapter reads, for the public stats page. So that one person counts once a day per chapter, we keep a one-way hash of that cookie, or of your account, or failing both of your connection’s address, mixed with the day and a server secret; it is deleted the next day and can’t be turned back into you. What’s kept for good is only a number per chapter per day. The same counts, without any reader detail, also go to our host’s analytics store.
If you make an account
- Your email address, used for sign-in, confirmation and password resets. It’s never shown publicly.
- Your pen name, which is public.
- Your password, stored only as a one-way hash. We can’t read it.
- A sign-in session cookie, and with each session the IP address and browser details it came from, so we can spot misuse.
- If you connect an app or AI assistant to your account (through our MCP connector): the app’s registration, what you allowed it to do, and the access tokens it holds. Nothing about what you say to the assistant reaches us; we only see the requests it makes to the site on your behalf.
What you post
- Stories, chapters, edits, comments, ratings, reports and shelves (your named lists of stories, with any notes you add), plus when you posted them. A shelf is private unless you share it by link or make it public. Your stories and comments are public once they’re live. Comments posted as “Anonymous” hide your name from the public and from the story’s author, but editors can still see who wrote them.
- While you write, the chapter editor keeps an unsaved copy in your browser’s local storage so you don’t lose work. It never leaves your device unless you save.
Moderation records
- Editors’ decisions (approvals, removals, trust changes, bans) are logged with who made them and when.
Server logs
- Our host, Cloudflare, briefly keeps standard request logs (IP address, page, time, browser) for security and debugging.
Accounts made for authors of archived stories
Some stories here were first published on BDSM Library, a site whose owner let us archive it before it closed. When we republish one of those stories, with the author’s permission or under terms the author published with it, we make an author account for them so the story keeps its byline. It holds the pen name, and the contact address from the original story if there was one, nothing else. Nobody can sign in to it until the author claims it: write to us from that address, or convince us another way, and we hand it over. Authors who don’t want the account or the story here can tell us and we remove both. Stories whose author we couldn’t name are held by a shared account, The Librarian of the Lost.
Why we use it
To run your account, show your work, keep ratings fair, deal with abuse and reports, and keep the site secure. We don’t use your data for advertising, and we don’t build profiles of what you read.
Who else handles it
- Cloudflare hosts the site and our database, and sends our emails.
We’ll share information with the authorities only when the law requires it, or to protect someone from serious harm. One case is spelled out: if we find or suspect child sexual abuse material, we report it to the National Center for Missing & Exploited Children and law enforcement together with the account’s details and the related records, keep those records for as long as the law requires for that purpose, and cooperate fully with any investigation. See the Content policy.
How long we keep it
- Account data: until you delete your account.
- Sessions: until they expire or you sign out.
- Content you delete: hidden from the site straight away and kept in your bin, where you can restore it or delete it permanently. Deleting your account empties your bin. Anything deleted permanently is gone from backups within 30 days; if you want something gone sooner, or can’t do it yourself, ask us.
- Moderation records and reports: 2 years after they’re resolved, so repeat abuse can be recognised.
Your choices
- Change your email, password or pen name in account settings.
- Delete your account in account settings. This deletes your account, your stories and chapters (with the comments and ratings on them), your comments and ratings elsewhere, the worlds you own (other authors’ stories in them stay, without a world), your shelves, your bin, and any connected apps’ access. Moderation records keep the decision but no longer link to you. Banned accounts can ask us instead.
- When you delete your account you can choose instead to leave your stories to the Librarian of the Lost, a house account the editors look after. The stories stay on the site as they were, with the comments and ratings on them, under that name rather than yours; your pen name and email go with your account. Stories in your bin are deleted either way. Once left, a story is the site’s to keep or take down; if you change your mind, write to us and we’ll take it down.
- Disconnect an app from your account at any time; its access ends at once.
- Ask for a copy of your data, or ask any other privacy question, at legal@naughtycurator.com.
- Clear cookies in your browser at any time. The site still works without them, except that you’ll see the age notice again.
Children
The site is for adults only. We don’t knowingly collect anything from anyone under 18, and we close any account we learn belongs to a minor.
Changes
If we change this policy in a way that matters, we’ll say so on the site first.