Back to CLANKER COCK

Legal

Privacy Policy

Effective date: October 4, 2026.

This Policy explains what RIOT MOTION LLC, the owner and operator of clankercock.com (the "Site", "we", "us"), collects, why, who sees it, how long it is kept, and what you can do about it. It is part of the Terms of Service. Because the Site is an adult service, the fact that you use it is itself sensitive. We treat it that way.

1. Who is responsible

RIOT MOTION LLC, which owns and operates clankercock.com under the brand CLANKER COCK, is the data controller. Contact: [email protected]. We are based in the United States.

2. What we collect

Account. Your email address, a hashed password (held by Supabase, never by us in plain text), a sign-in user ID, the time you created the account, your account status, and any email you send us.

Age attestation. The fact and time you confirmed that you are 18 or older, at the age gate (stored in your browser), at sign-up, and with every render. We do not collect government ID unless we ask for it to verify age or identity under the Terms, in which case we keep only what the verification requires.

Generator data. Every prompt, negative prompt, seed, model, duration, resolution, aspect ratio and uploaded image you submit; the time you submitted it; the Terms version you accepted for it; the quoted and charged coins; the render's status, errors, moderation results and provider job ID; and, for about an hour after a render finishes, the provider's download link for the video. We do not store the video itself.

Chat as a guest. You can start a chat before you have an account. Your browser then holds a random guest token, and the characters, chat and messages you make are tied to that token together with a hashed copy of your network address (used only to limit how many guest tokens one network can mint per day). Signing up moves them to your account; unclaimed guest chats are deleted after 30 days of inactivity.

Chat. The characters you write (name, role, personality), your chat titles, which characters are in each chat, every message you send and every reply they produce, when, and what each reply cost; your chat settings; and, when the Spontaneous chatter setting is on, the time you were last seen in a chat, which is what allows a character to speak up only while you are there. Chats stay until you delete the chat or your account.

Coins and payments. Your coin balance and every grant, hold, spend, release and expiry (the ledger); membership plan and period; for crypto, the invoice ID, the amount, the asset, the network, the pay-in address, the processor's transaction and payment IDs and status; for Buy Me a Coffee, your per-account PIN, the supporter name, the note, the amount, the processor's support ID and refund status; and an audit log of these events. We never see card numbers, bank details or your crypto wallet's private keys.

Technical data. IP address, approximate location derived from it, browser and device type, operating system, language, referrer, pages and clips requested, timestamps, request IDs, and error reports. This is collected automatically by our hosting and network providers (Railway and Cloudflare), by the Site's server logs, and by the TraceMyIP visitor-statistics script on our pages.

Moderation and enforcement data. Reports you make or that are made about you, our notes, blocked or flagged prompts and images, and records of enforcement actions.

Browser storage. The age-gate flag, your Supabase sign-in session, and small preferences such as a chosen filter, stored in your browser's local storage. Cloudflare may set cookies needed to protect and route the Site.

3. What we do with it

• Run the Site: sign you in, show the gallery, render your prompts, run your chats, hold and spend coins, show your render history (prompts and status, not videos).
• Process payments and credit coins, including matching Buy Me a Coffee notes to PINs and NOWPayments webhooks to invoices.
• Keep minors out, enforce the Content Rules and the Terms, detect and stop fraud, abuse, chargebacks, scraping and account sharing, and preserve evidence of violations.
• Comply with law, including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children, responding to lawful requests, and keeping tax and accounting records.
• Secure, debug, measure and improve the Site. We look at aggregate statistics about which pages and clips are viewed and how renders perform.
• Communicate with you about your account, payments, renders, enforcement and changes to these documents. We do not send marketing email.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not run advertising on the Site. We do not use your prompts, images or outputs to train our own models. The render provider processes them to produce your output and under its own policies.

4. Who receives it

We share data only with the providers we need to run the Site, each of which processes it for us under its own terms and privacy policy:

• Supabase (sign-in and database hosting): email, password hash, session tokens, and the database described above.
• Railway (application hosting): the server that runs the Site and its logs, including IP addresses.
• Cloudflare (network, security, image delivery via Cloudflare Images, and hosting of the operator's own gallery clips via Cloudflare Stream): IP addresses and request data for every page view. Your renders are never sent to Cloudflare.
• WaveSpeed (render provider, running the Alibaba Wan video models): your prompt, negative prompt, settings, seed and uploaded image, and the resulting video. WaveSpeed and its model providers may be outside the United States and may keep their own copies and logs under their policies.
• Venice (chat model provider): your character descriptions, chat messages and recent transcript for each reply, sent without your account details. Venice states it does not store prompts or responses; its own policy governs.
• NOWPayments (crypto payments): the order ID, amount, description, and whatever you give NOWPayments on its invoice page, including your pay-from address, which is public on the blockchain.
• Buy Me a Coffee (tips): what you give it on its page. It sends us the supporter name you used, your note, the amount and the support ID.
• Neocities (legacy clip hosting) and RedGifs (embedded players): when a hosted or embedded clip loads, your browser contacts them directly and they receive your IP address and request.
• TraceMyIP (visitor statistics): IP address, device and browser data, and pages viewed.

We also disclose data when we believe in good faith it is required by law, subpoena, court order or government request; to NCMEC and law enforcement regarding apparent child exploitation or other serious crime; to payment processors to contest a dispute or investigate fraud; to our lawyers, accountants and insurers; to a successor if the Site is sold or transferred; and to protect the rights, property or safety of the operator, our users, our providers or the public.

5. Legal bases (EEA, UK and similar)

Where the GDPR, UK GDPR or a similar law applies: performing our contract with you (account, renders, coins, payments); our legitimate interests in securing the Site, preventing fraud and abuse, enforcing our rules, keeping minors out and defending claims; compliance with legal obligations (tax, accounting, child-safety reporting, lawful requests); and your consent, where we ask for it (for example, the age gate and the per-render confirmation). Prompts and uploaded images may reveal information about sexual orientation or sex life; by submitting them you make that information manifestly public to us for the purpose of the render, and we process it on the bases above and with the safeguards in section 8. Data is transferred to the United States and to the countries where our providers operate, under standard contractual clauses or other lawful mechanisms where required.

6. U.S. state privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, to opt out of sale, sharing or targeted advertising (we do none), and not to be discriminated against for exercising those rights. We do not "sell" or "share" personal information as those words are defined in the California Consumer Privacy Act, and we do not use sensitive personal information to infer characteristics about you beyond what running the Site requires. We honor Global Privacy Control signals where they apply. To exercise a right, email [email protected] from your account address; we may ask you to confirm you control that address. You may appeal a decision by replying to our response.

7. Retention

• Account, ledger, payments and audit log: for as long as your account exists, and then for up to seven (7) years for tax, accounting, fraud and dispute purposes.
• Prompts, settings and the Terms version accepted: with the render record, for as long as the account exists plus the period above.
• Uploaded images: kept with the render; we may delete the image bytes once a render has finished and no dispute or review is pending.
• Chat characters, chats and messages: until you delete them or close your account, or longer where a message is kept as evidence of a violation.
• Output videos: not stored by us. The provider's download link is kept on the render record for about one hour so your browser can fetch the clip, then removed and the provider asked to delete the task. The provider's own copy expires within seven days under its policy.
• Server, network and statistics logs: per each provider's retention period, typically days to a few months.
• Enforcement records and evidence of violations: for as long as we consider necessary to defend claims, cooperate with authorities and keep a banned person out, which may be indefinitely. Reports to NCMEC are preserved as the law requires.
• Browser storage: until you clear it or sign out.

When you ask us to close your account we delete or anonymize the data we can, and keep only what the retention rules above require.

8. Security

Sign-in is handled by Supabase with hashed passwords and signed session tokens. Traffic is encrypted in transit. Database access is restricted to the application and the operator. A render's download link is visible only to the signed-in account that made it and is removed after about an hour. Webhooks from payment processors are verified by signature. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires. Use a unique password.

9. Children

The Site is for adults only and is not directed at anyone under 18. We do not knowingly collect data from a minor. If you believe a minor has an account or that data about a minor is on the Site, email us and we will delete it and close the account.

10. Do Not Track and signals

We honor Global Privacy Control as an opt-out where the law gives it effect. Because we do not sell or share data, there is nothing else to opt out of. We do not respond to legacy "Do Not Track" headers.

11. Your choices

• Clear your browser's site data to remove the age-gate flag and your session.
• Do not upload an image if you do not want it processed by the render provider.
• Email us to access, correct, export or delete your data, or to close your account.

12. Changes

We will post any change here with a new effective date. Material changes may also be announced on the Site or by email.

13. Contact

[email protected]. EEA or UK residents may also lodge a complaint with their local supervisory authority.