PRIVACY POLICY

Effective date: July 28, 2026
Last updated: July 28, 2026

1. Introduction

Sexy Stella Merton respects the privacy, autonomy, and personal data of every visitor.

This Privacy Policy explains what information may be collected when you visit sexystellamerton.com, why that information may be processed, how it may be used, how long it may be retained, and what rights may be available to you.

The Site is operated from Brazil and is intended exclusively for adults aged 18 or older. The Site seeks to process only the minimum personal data reasonably necessary for security, access control, communication, website operation, and legal compliance.

This Policy is designed to reflect the Brazilian General Data Protection Law, Law No. 13,709/2018 — LGPD; the Brazilian Civil Rights Framework for the Internet, Law No. 12,965/2014; the California Online Privacy Protection Act; the California Consumer Privacy Act, as amended by the California Privacy Rights Act, where applicable; the European Union General Data Protection Regulation; and applicable European rules concerning electronic communications and cookies.

2. Privacy Contact

The person responsible for the operation of the Site is:

Affonso Henriques
Belém, Pará, Brazil
Privacy email: nogu0012@gmail.com

Privacy requests must include sufficient information for the Site to understand and verify the request. Never send passwords, complete identification documents, financial information, intimate photographs, or unnecessary sensitive information by email.

3. Adults Only

Sexy Stella Merton is not directed to children or adolescents.

No person under the age of 18 is permitted to access or use the Site. If the law applicable in a visitor’s location requires a higher minimum age for accessing adult material, that higher age applies.

The age gate asks visitors to confirm that they are adults. It does not request or collect identity documents, facial images, biometric data, or government identification numbers.

The Site does not knowingly collect personal data from minors. If information from a person under 18 is identified, it may be deleted without notice. A parent, legal guardian, or competent authority may report the matter through the privacy email.

4. Information That May Be Collected

The Site may process the following limited categories of information:

Technical and access information

The hosting provider, security systems, and WordPress installation may automatically receive:

IP address;
date and time of access;
requested pages;
browser and device type;
operating system;
referring website;
approximate geographic region;
error and security logs;
cookie identifiers;
activity associated with suspected abuse, attacks, or unauthorized access.

Age-gate information

The Age Gate plugin may place a cookie in the visitor’s browser recording that the visitor declared being at least 18 years old.

The current configuration remembers that choice for approximately 30 days. The cookie does not prove the visitor’s identity or actual age.

Information submitted voluntarily

If you contact the Site, subscribe to a newsletter, submit a privacy request, or use a form, the Site may receive:

name or chosen identifier;
email address;
message content;
subscription preference;
records required to answer the request;
technical information associated with the submission.

Do not submit information about your sexual orientation, sex life, health, political opinions, religion, government identification, financial accounts, passwords, or other sensitive matters unless it is strictly necessary for a legitimate privacy or legal request.

Personal data concerning a person’s sex life or sexual orientation receives special protection under the GDPR. The Site does not request such information from visitors.

5. Purposes of Processing

Personal data may be processed only for legitimate and defined purposes, including:

operating and displaying the Site;
applying the age-access restriction;
remembering a visitor’s age-gate selection;
maintaining security and preventing fraud, attacks, and unauthorized access;
responding to messages and privacy requests;
administering subscriptions requested by the visitor;
diagnosing technical errors;
generating aggregated audience statistics;
maintaining evidence of consent or requests;
protecting legal rights;
complying with lawful obligations, court orders, or regulatory requests.

The Site does not use personal data to determine a visitor’s sexual preferences, psychological profile, intimate behavior, or suitability for employment, credit, insurance, housing, education, or public services.

6. Legal Bases

Depending on the activity and applicable jurisdiction, processing may rely on:

the visitor’s consent;
performance of a service specifically requested by the visitor;
compliance with legal or regulatory obligations;
the legitimate interest in maintaining security, preventing abuse, and operating the Site;
the establishment, exercise, or defense of legal claims;
another lawful basis recognized by applicable legislation.

Under the LGPD, personal-data processing must rely on a lawful basis such as consent, contractual necessity, legal obligation, legitimate interest, or the regular exercise of rights.

Consent may be withdrawn at any time. Withdrawal does not invalidate lawful processing performed before the withdrawal.

7. Cookies and Similar Technologies

The Site may use essential cookies necessary for:

age-gate operation;
security;
session management;
website functionality;
remembering choices made by the visitor.

Essential cookies may be used without optional consent when they are strictly necessary to provide the service requested by the visitor.

Analytics, advertising, audience-measurement, or other nonessential cookies must be separately identified. Where applicable law requires prior consent, those cookies must not be activated until the visitor has made a valid choice.

European electronic-privacy rules require clear information and, subject to limited exceptions for strictly necessary technologies, a meaningful opportunity to accept or refuse cookies placed on the visitor’s device.

Visitors may also delete cookies through their browser settings. Deleting the Age Gate cookie will cause the age confirmation to appear again.

8. Analytics and Third-Party Services

The Site is hosted by Hostinger and operates through WordPress. It may also use plugins or services supplied by Google, Automattic/Jetpack, Yoast, LiteSpeed, email providers, security providers, and other technical suppliers.

Depending on configuration, these providers may receive technical information such as IP address, browser data, device identifiers, requested pages, and cookie information.

Each provider may act as a processor, service provider, contractor, or independent controller under applicable law. Their processing may also be governed by their own privacy notices.

The Site should activate optional analytics only in a manner consistent with the visitor’s consent choices and applicable law.

Sexy Stella Merton does not knowingly sell personal information.

The Site does not intentionally disclose personal information for cross-context behavioral advertising. If this practice changes, this Policy will be updated and legally required opt-out mechanisms will be provided.

Where the CCPA applies, California residents may have rights to know, delete, correct, and opt out of the sale or sharing of personal information, as well as the right not to be discriminated against for exercising those rights.

10. Do Not Track and Global Privacy Control

Some browsers offer a legacy “Do Not Track” setting. Because there is no universally implemented standard governing every Do Not Track signal, the Site may not respond identically to all such signals.

Where legally applicable, a valid Global Privacy Control signal will be treated as a request to opt out of the sale or legally defined sharing of personal information.

California law requires a commercial website collecting identifiable information from California consumers to explain its Do Not Track practices and whether third parties may collect information across websites.

11. Disclosure of Information

Personal data may be disclosed only when reasonably necessary to:

hosting and infrastructure providers;
security and anti-abuse providers;
email and communication services;
analytics providers, subject to applicable consent requirements;
professional advisers bound by confidentiality;
courts, regulators, law-enforcement agencies, or public authorities acting under lawful authority;
protect the rights, safety, integrity, or security of the Site or another person.

The Site does not authorize service providers to use personal information for unrelated purposes.

12. International Transfers

Because the Site is available internationally and uses global technology providers, personal data may be processed in Brazil, the United States, the European Economic Area, or other countries.

Where legally required, international transfers should rely on appropriate safeguards, contractual protections, adequacy decisions, consent, or another legally recognized transfer mechanism.

13. Retention

Personal data is retained only for as long as reasonably necessary for its stated purpose.

In particular:

the age-gate preference is normally stored for approximately 30 days;
newsletter data is retained until withdrawal or unsubscription;
contact messages may be retained while the request remains relevant;
security and server logs may be retained according to security needs, hosting-provider policies, and applicable legal requirements;
records connected with disputes, abuse, or legal claims may be retained until the relevant limitation period expires.

Information that is no longer necessary should be deleted, anonymized, or securely isolated.

14. Security

Reasonable administrative and technical measures are used to reduce the risk of unauthorized access, alteration, loss, disclosure, or destruction.

However, no website, hosting service, email account, plugin, or internet transmission can be guaranteed to be completely secure. Visitors must not send confidential material through ordinary email unless strictly necessary.

A material security incident will be evaluated and, where required, reported to affected individuals and competent authorities.

15. Your Privacy Rights

Subject to applicable law and valid exceptions, a person may request:

confirmation that personal data is being processed;
access to personal data;
correction of inaccurate or incomplete data;
deletion, anonymization, or blocking;
restriction of processing;
data portability;
information about recipients;
withdrawal of consent;
objection to certain processing;
information about automated decisions;
freedom from discrimination for exercising privacy rights;
review of a decision concerning a privacy request.

Brazilian data subjects have rights established by the LGPD. European data subjects may have rights under the GDPR. California residents may have rights under the CCPA/CPRA where that statute applies.

The Site does not currently make decisions producing legal or similarly significant effects solely through automated processing.

16. Exercising Your Rights

Send requests to:

nogu0012@gmail.com

Use the subject:

PRIVACY REQUEST — SEXY STELLA MERTON

The Site may ask for limited additional information to verify that the requester is the person concerned or is legally authorized to act for that person.

A request may be denied or limited when necessary to protect another person’s privacy, preserve security, comply with law, maintain legally required records, or defend legal rights.

You may also submit a complaint to the competent data-protection authority in your jurisdiction, including the Brazilian National Data Protection Authority, a competent European supervisory authority, or the appropriate California authority.

17. Changes to This Policy

This Policy may be revised when the Site changes its services, plugins, cookies, analytics, commercial activities, or legal obligations.

Material changes will be identified through a new “Last updated” date and, when appropriate, an additional notice on the Site.

Continued use after a revision does not replace consent when applicable law requires new consent.