1. Visitor privacy (no account)

Visitors can browse Midnight without creating an account. When you visit the platform anonymously we record only the minimum needed to render the site and to compute aggregate counts (e.g. a creator's monthly profile-view total):

• An IP address (used to detect your nearest city, then discarded — see below)
• A randomly-generated anonymous session identifier
• Page-view timestamps
• An age-verification cookie that records your 18+ confirmation for 30 days

We do not place advertising trackers, social-media pixels, or any third-party fingerprinting code on visitor pages.

2. IP-based city detection

On your first visit we may call a geolocation provider to convert your IP address to a city name. Only the city name is stored (in a cookie on your device). Your IP address itself is not retained by us once the lookup completes.

3. Account data (creators & admins)

When you create an account we store:

• Email address and a securely hashed password
• Display name, bio, avatar, city, neighborhood, age (birth date), and tier
• WhatsApp number, if provided
• Any media you upload (photos, video)
• Subscription status and payment-provider transaction references (we never see card or Mobile Money credentials)

4. Verification data

If you submit identity documents for verification, those documents are reviewed by our team and then permanently deleted within 30 days of the decision. We retain only a boolean flag indicating that verification was completed and the date.

5. How we use your data

• To render your profile and let visitors discover it
• To compute your dashboard analytics
• To process subscription payments and tier upgrades
• To prevent fraud, abuse, and trafficking
• To respond when you contact us

We do not sell your personal data. We do not share account data with advertisers. We share data with third parties only as described in section 6.

6. Third parties we use

• Cloudinary — image and video hosting
• Mobile Money providers (MTN, Orange) — subscription payment processing
• Email delivery provider — transactional emails (verification, receipts)
• Geolocation provider — IP-to-city lookup on first visit

7. Cookies

• mn_age_verified — your 18+ confirmation, kept 30 days
• mn_city — detected city, kept 30 days
• Session cookie — keeps you logged in, deleted when you sign out

8. Your rights

You may at any time:

• Access and edit your profile data from your dashboard
• Delete individual posts or media
• Delete your account entirely — this removes your public profile within minutes and erases account data within 30 days, subject to any legal retention requirements
• Request a copy of your data by emailing privacy@midnight.cm

9. Data retention

Active account data is kept for as long as your account exists. Deleted-account data is permanently removed within 30 days, except where retention is required by law (for example, payment records retained for tax purposes).

10. Children

Midnight is strictly for users aged 18 or older. We do not knowingly collect data from anyone under 18. If we discover such data we delete it immediately and terminate the associated account.

11. International data & jurisdiction

Data may be processed on infrastructure located outside Cameroon. We choose providers with strong security practices and contractual data-protection terms.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced via a banner on the homepage and an email to registered users where applicable.

13. Contact

Privacy questions and data-access requests can be sent to privacy@midnight.cm. See also our Terms of Service and Safety & Reporting pages.