US State Privacy Rights
Last updated: 10 April 2026
This page provides information for residents of US states with comprehensive consumer privacy laws. These rights are in addition to the rights described in our Privacy Policy.
Applicable laws
Categories of personal information we collect
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email, username, IP address | Yes |
| Internet/electronic activity | Pages visited, content viewed, interactions | Yes |
| Financial data | Payment card details processed by Stripe (not stored by FanLuma) | Indirectly via Stripe |
| Age/date of birth | Used for age verification (18+) | Yes |
| Government ID (creators only) | Uploaded for KYC / identity verification | Yes (creators) |
| Referral data | Referral codes, referrer IDs, referral earnings | Yes |
| Commercial information | Transaction history, subscription records | Yes |
| Sensitive personal information | Government ID, precise age (for 18+ verification) | Yes (creators) |
| Geolocation data | Country inferred from IP address | Limited |
| Inferences | Platform usage patterns for fraud prevention | Yes |
How we use personal information
- To provide and improve the FanLuma Platform.
- To verify your age and identity (creators).
- To process payments and calculate the 5% platform fee.
- To operate the referral programme and pay out 1% referral earnings.
- To send transactional communications (receipts, verification results).
- For fraud prevention, security, and legal compliance.
- For analytics to understand Platform usage (aggregated and de-identified where possible).
We do not sell your personal information
FanLuma does not sell personal information to third parties as defined under CCPA/CPRA or any other applicable US state privacy law. We do not share personal information with third parties for cross-context behavioural advertising.
We share personal information with service providers (Stripe, Supabase, Resend, Replit) only as necessary to operate the Platform, under data processing agreements that restrict their use of that data.
Your rights
Depending on your state of residence, you may have the following rights:
- Right to know / access: Request information about the personal data we collect, use, and disclose about you, and a copy of that data.
- Right to correct: Request that we correct inaccurate personal information.
- Right to delete: Request that we delete your personal information, subject to certain exceptions (e.g. legal obligations, fraud prevention).
- Right to data portability: Receive a copy of your personal information in a portable format.
- Right to opt out of sale or sharing: Opt out of the sale or sharing of your personal information (we do not sell or share for advertising — this right is not applicable).
- Right to limit use of sensitive data: Limit our use of sensitive personal information (government ID, precise age) to what is necessary to provide our service.
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
- Right to appeal: If we deny a privacy request, you may appeal that decision by following the process described in our response.
How to submit a request
To exercise any of your US state privacy rights, submit a request by:
- Emailing privacy@fanluma.com with the subject line "US Privacy Rights Request" and your state of residence.
- Clearly identifying the right(s) you wish to exercise.
We will respond within 45 days (California: 45 days, extendable by 45 days with notice). We may need to verify your identity before processing your request. We will not charge a fee for processing requests unless they are excessive or repetitive.
Authorised agents
California residents may designate an authorised agent to submit requests on their behalf. The agent must provide written authorisation signed by you, and we may require direct verification of your identity before processing the request.
California "Shine the Light" (Cal. Civ. Code § 1798.83)
California residents may request information about personal information we share with third parties for their direct marketing purposes. FanLuma does not share personal information with third parties for direct marketing purposes, so this right is not applicable. For any questions, contact us at privacy@fanluma.com.