← Back to SubSurrender

Privacy Policy

Last updated: June 2026

1. Who We Are

SubSurrender is operated as a sole proprietorship based in Norway. We are committed to protecting your privacy and handling your data responsibly in accordance with the General Data Protection Regulation (GDPR) and Norwegian law.

Contact: support@subsurrender.com

2. Data We Collect

When you register and use SubSurrender, we collect:

• Username, email address, and password (encrypted)
• Date of birth (to confirm you are 18 or older)
• No-go zones and preferences you specify
• Task completion data, proof texts, and confessions
• XP, streak, and level progress
• Payment information (handled entirely by our payment processor — we never store card details)
• Basic usage data (login times, activity)

Proof images are never stored. When you upload a photo to verify a task, it is processed only temporarily in memory, sent to an AI service for verification, and deleted immediately afterwards. Proof images are never saved to any server or database.

3. How We Use Your Data

We use your data to:

• Operate your account and provide the service
• Generate personalised AI tasks based on your profile and no-go zones
• Display your activity in the community feed and leaderboard
• Process payments for premium features
• Send service-related emails (inactivity reminders, account notices)
• Improve the Platform

We do not sell your data to third parties. We do not use your data for advertising.

4. Sensitive Data

SubSurrender processes what the GDPR calls special categories of personal data — information concerning your sex life and sexual preferences, such as kink preferences, intensity settings, no-go zones and related content you choose to share. We are open about this: it is the nature of the Platform.

This data is processed exclusively to personalise your experience, on the basis of the explicit consent you give at registration and in your preference settings. It is never shared for any other purpose, never sold, and never used for advertising. You are always in control of what you share, and you can withdraw your consent or delete your account at any time.

5. Data Sharing

We share data only with the processors needed to run the Platform:

• NanoGPT — AI task generation for users who have explicitly opted in to explicit content. Only an anonymised profile is sent (never your name, email or user ID), and we request zero data retention on every request.
• Anthropic — AI task generation and proof-image verification. Prompts are anonymised, and data sent via the API is not used for model training.
• Cloudinary — storage of profile pictures/avatars only.
• Railway — hosting and database infrastructure.
• A specialised payment processor for adult-industry merchants — payment processing for premium features. We never see or store card details.

We are working with our providers to put data processing agreements (DPAs) in place to ensure GDPR compliance.

6. Age Requirements

SubSurrender is strictly for adults aged 18 or over. We apply measures to verify that users are of legal age, including a mandatory date-of-birth declaration at registration, and age verification through a third-party verification service is being introduced. Accounts found to belong to minors are deleted immediately.

7. Community Content

Proof texts and task completions you post are visible to other users in the community feed. Your username is displayed publicly. You can control visibility settings from your profile. If your profile is set to public, confessions and failed tasks may be posted to the Wall of Shame; if your profile is private, nothing is ever posted publicly.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Anonymised usage statistics may be retained for analytics.

9. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing of your data
• Data portability
• Lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority)

To exercise these rights, contact us at: support@subsurrender.com

10. Cookies

SubSurrender uses only essential functional storage (localStorage) to keep you logged in. We do not use tracking cookies or third-party analytics cookies.

11. Security

Passwords are stored encrypted. All data is transmitted over HTTPS. We take reasonable technical and organisational measures to protect your data.

12. Changes to This Policy

We may update this policy occasionally. Significant changes will be communicated via email. Continued use of the Platform after changes constitutes acceptance.

13. Contact

Privacy questions or requests: support@subsurrender.com

Norwegian Data Protection Authority: datatilsynet.no