Last updated: July 17, 2026
Data we collect
- Account information. Email address, display name, username, and profile photo
- Content. Posts, messages, photos, and videos you upload to the platform
- Financial data. Balance, trading and pass activity, transaction history, and Solana wallet address
- Device information. Device type, operating system version, and IP address
- Usage data. Pages viewed, features used, and timestamps of activity
How we use your data
- Provide and operate the hey.lol service
- Process payments, trades, and creator earnings
- Send notifications about activity on your account
- Enforce community guidelines and moderate content
- Improve the product and user experience
Third-party sharing
- We do not sell your personal data
- Payment processing occurs via the Solana blockchain; wallet addresses and transactions are publicly visible on-chain
- Authentication providers (Google, X/Twitter) receive only the information necessary for login
- We may share data if required by law or to protect the safety of our users
Data retention
- Account data is retained while your account is active
- Deleted account data is removed within 30 days
- Blockchain transactions are permanent and cannot be deleted
Age verification & §2257 records
When you opt in to publish or view adult content, our identity-verification partner VerifyMy collects and stores identity records as required by United States federal law (18 U.S.C. §2257 and 28 CFR Part 75). Depending on the verification method, those records may include government-issued ID data, biometric selfie or liveness data, and verification metadata.
We retain a minimal cross-reference index (VerifyMy verification identifier, verification timestamp, provider status, and related audit metadata) in our own database for the recordkeeping window required by 18 U.S.C. §2257 and 28 CFR Part 75. For full questions about these records, contact privacy@hey.lol.
California users: Your right to delete under California Civil Code §1798.105 remains intact for content, follows, messages, and account data. However, §1798.105(d)(8) exempts deletion when retention is required to “comply with a legal obligation.” Because federal age-verification recordkeeping rules require retained records, your VerifyMy-related records will be preserved through that window even after account deletion. Once the retention window elapses, the records are purged automatically.
Outside the age-verification system, no other portion of your account is exempt from deletion. To exercise your CCPA or other privacy rights, email privacy@hey.lol.
Your rights
- Request a copy of your data
- Request deletion of your account and associated data
- Opt out of non-essential communications
To exercise these rights, contact us at privacy@hey.lol
Children
hey.lol is not intended for users under 17 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.
Changes to this policy
We may update this privacy policy from time to time. We will notify users of material changes by posting a notice on the platform or sending an email.
Contact
Questions about this privacy policy? Contact us at privacy@hey.lol