Privacy Policy

Version MX-PRIVACY-2026-10-P · updated 30 October 2026

Discretion matters here. This explains what My Mistress X collects, why, who can see it, how long we keep it, and what you can do about it. We handle personal information under the Australian Privacy Principles.

What we collect

• Your account: email address, username, date of birth, role (Mistress or Sub) and a one-way hash of your password (no one can read your password, staff included).
• Your profile: what you choose to add — display name, titles, bio, location (as general as you like), photos, kinks and limits. Kinks and limits describe sexual interests, which the law treats as sensitive information. We collect them only because you add them, and show them only to signed-in members, as your privacy settings allow.
• What you do on the site: messages, live chat, reports, tasks, positions, games played, follows, blocks and notifications. Messages are kept on our server so they can be delivered and shown in your inbox.
• Money: every payment, top-up, refund and payout in your wallet or Earnings Vault, with top-up references. Mistresses' payout details (PayID or bank account) are stored encrypted. For a card top-up we keep the amount, what happened to it, the processor's reference and a card description such as “Visa •• 4242” — never your card number. For cards you save in MX Pay (a test payment method), we keep only the card's brand, last four digits, expiry and the name on it — never the full number or security code — plus, for each payment, what it was for and which card paid. Removing a card deletes it; closing your account deletes them all.
• Physical orders: the delivery address a buyer gives, stored encrypted and shown only to the seller (never to staff) while the order or a return is open.
• Task proof: what you send for a task — a report, photo, voice note or link — and, for reading and Ad TV tasks, how far you've got and when. Proof is seen only by you, the Mistress who set the task, and the Headmistress team when needed.
• PPV: what you bought, rented or saw through a club, your club subscriptions, your reviews (shown to members with your name) and any dispute you raise (seen by the Headmistress team). Videos you watch show your username over them, and each photo you view carries it.
• Owned positions and honours: a position you hold, who owns you and since when, and any honour the Headmistress team gives you are shown to other members on profiles and The Wall. Your application message is seen only by the Mistress you applied to.
• Recognition: the days you use the site (one entry a day, for streaks), your devotion level and XP, and trust badges with any endorsement. Your level, badges and who gave them are shown to members on your profile; the level leaderboard leaves you out if you switch off “Show me on leaderboards”.
• Wall of Shame: your requests and stays, the caption and photo she posts, and who laughed. A post is shown only to signed-in members while it's up; once it ends or you take yourself off, its photo is deleted.
• Wishlists: the wishes and goals a Mistress lists, and each gift towards them with the giver's name and note. Members see who gave unless you hide your name; she always sees it.
• Live games: the raffle tickets, lotto numbers and bingo cards you get, the play coins they cost, and what you win. Winners' names are shown in her live room and chat; she sees who entered.
• Events: the events you host or have a place at. An in-person event's address is stored encrypted, shown only to the host and to confirmed guests from 24 hours before, and erased once the event ends or is cancelled.
• Support, reports and appeals: what you write to the Headmistress team in Help & support or Contact us — and, if you're not signed in, your name and email so we can reply; when you report a problem, the page you were on and your browser type; reports you make and what they were about; appeals against a warning or suspension, and the team's decision.
• The waitlist: if you join it before you can sign up, your email address and whether you're a Mistress or a Sub — used only to invite you, and deleted when you join or ask us to.
• The gold tick: if you apply, an ID photo and a selfie, seen only by the Headmistress team reviewing them.
• Push notifications: if you turn them on for a device, the address your browser gives us to reach it (with its encryption keys), the device type (such as “Chrome on Android”) and when it was last notified. In our Android app, the app's push token instead, with the app's version. Turning them off, removing the device in Settings → App & notifications, or signing out in the app deletes them.
• Technical records: the IP address and time of each sign-in and sign-in attempt, your signed-in devices, Studio PRO device sign-ins, and Store downloads (to stop abuse and protect sellers' content). When something on the site fails, an error report: the page address, the error message and where in our code it happened — not what you typed.

We don't record live shows, paid calls, group calls or their chat. Recordings and replays you make in Mistress Studio PRO are made and saved on your own computer; we never receive them. Calls go browser to browser or through our relay; when the relay is used, nobody in a call sees anyone else's IP address. In a group call, your name, picture, camera, microphone and chat are shared with everyone in the call.

Cookies and storage

• mx_session keeps you signed in; mx_age_ok remembers that you confirmed you're 18+; Mistress Studio PRO uses its own sign-in cookie.
• The installed app keeps an offline page and its icons on your device — never your messages, profile or anything private.
• Your browser also remembers small settings such as game sound and views. We use no advertising, analytics or tracking cookies, and no third-party trackers.

How we use it

• To run the site: show your profile and content to members, deliver messages, process payments and payouts, and send account emails (verification, password resets, payout notices).
• To keep members safe: check ages and identities, handle reports, stop fraud, spam and ban evasion, and keep an audit trail of staff actions.
• To keep the service working: fix errors, monitor the server and keep backups.
• To meet legal duties, such as keeping financial records. We don't sell your information or use it for advertising.

Who can see it

• Other members see your profile and content as your privacy settings allow. Profiles are never shown to the public or search engines.
• The Headmistress team sees what it needs to run and moderate the site. Staff read private messages only through a report, and each view is recorded.
• Service providers who help run the site: our card payment processor, if you pay by card (you give your card details to the processor directly, on its own page; it tells us whether the payment went through), our email provider (to send emails), our backup storage provider (backups are encrypted on our server before they leave it, so the provider can't read them), your browser's push service (Google, Mozilla, Apple or Microsoft) for notifications you turn on — each is encrypted so only your device can read it, and by default it says only “You have a new notification”; in our Android app, notifications go through Expo's push service and Google's Firebase Cloud Messaging instead, which carry the notification's text (again, by default only “You have a new notification”), and, for calls, a STUN server that helps browsers find a connection. Some of these may store data outside Australia.
• Authorities, where the law requires it, or where it's needed to protect someone from serious harm: we report child sexual abuse material and grooming to the Australian Federal Police (ACCCE), and intimate images shared without consent or other illegal content to the eSafety Commissioner.

How long we keep it

• While your account is open, we keep what you've shared until you change or delete it.
• Gold tick ID photos and selfies are deleted as soon as the decision is made; a fingerprint of them is kept as evidence that the check happened.
• Delivery addresses are erased 30 days after the order closes.
• Error reports are kept for 30 days and server statistics for 14 days.
• If an account is reported for child abuse or intimate images shared without consent, its records are kept for as long as the police may need them, even if it's closed.
• When you close your account, your profile is removed at once and everything else is deleted 8 months later. Money records stay, without your name or contact details, because the ledger can't be edited.
• Encrypted backups are kept for 30 days, so deleted information can remain in a backup for up to 30 days after it's deleted.

How we protect it

• Photos have their location and camera details removed when you upload them.
• Payout details, delivery addresses, stream keys and backups are encrypted.
• Your date of birth is never shown to other members; only your age, and you can hide that too.
• Access to staff tools is limited by role, protected actions need the staff member's password again, and staff actions are logged.
• If a data breach is likely to cause serious harm, we'll tell the people affected and the regulator as the law requires.

Your choices and rights

• Hide yourself from Discover, or hide your age, location or online status, in Settings → Privacy.
• Download a copy of your data, or close your account, in Settings → Account.
• Correct your details in your profile and settings. Your date of birth can't be changed; if it's wrong, contact the Headmistress team.
• Ask us any question, or make a complaint, in Help & support (or Contact us if you're not signed in). We'll reply within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Adults only

The site is for adults 18 and over. If we learn that a member is under 18, we close the account and remove their information, unless the police need it kept. See the Child Safety Policy.

Changes

We'll update this policy when the site changes how it handles information, and tell members in the site about significant changes. See also the Terms of Service and Community Guidelines.