XVIDEO2027 · Private preview

Privacy Policy

Last updated: November 8, 2026

Preview notice: This site is currently a private preview. The information below describes the features presently implemented to the best of our knowledge. Some controls and contact processes still need to be completed before any public launch.

1. Who operates this site

XVIDEO2027 is an owner-managed website project. For privacy questions or requests, use the Report content or request removal form and select “Privacy request”. The operator must monitor this queue and respond to applicable requests.

2. Information processed

Age confirmation: if you choose to continue, the site receives an adult-status declaration and stores a short-lived, signed age-attestation cookie. This is self-attestation only; it does not verify identity, date of birth, or an identity document.
Owner sign-in: the protected owner area uses a signed authentication cookie to maintain the owner session.
Basic analytics: the site processes a random browser identifier and a one-way hash of that identifier, country code supplied by the hosting platform, date, page-view counts, and first/last-seen timestamps. The browser identifier is not intended to identify a named person.
Rate limiting and abuse prevention: the analytics endpoint hashes the connecting IP address to enforce a limit of 60 tracking requests per 60-second window. The report form separately hashes the connecting IP address to enforce a submission limit. These hashes are pseudonymous security data, not raw IP addresses, and are stored in the private D1 database for rate-limiting purposes.
Video requests: when a video is listed, thumbnailed, or played, the server processes the requested video identifier and normal streaming/range request information needed to deliver it.
Upload and rights records: the owner dashboard stores video title and description, upload time, a rights/consent declaration timestamp and version, and a non-identifying reference code for the supporting consent record when supplied. The reference code is not proof that consent was independently verified. Supporting records should be held securely by the uploader outside the public site and must not be uploaded here.
Content reports: if you submit a report or removal request, the site stores the reason, page/video URL, your name, contact email, explanation, a random reference number, review status, internal note, and timestamps in its private report database.
Hosting and technical data: Cloudflare and other service providers may process IP addresses and request information for delivery, security, abuse prevention, and service operation under their own terms.

3. Cookies and local storage

The site uses a short-lived age-confirmation cookie and an owner-session cookie. It may also store a random analytics browser identifier in your browser's local storage so approximate unique-browser counts can be calculated. You can clear cookies and site storage through your browser settings; doing so may require you to confirm your age again.

4. Why information is used

Information is used to operate the private preview, enforce access controls, remember age confirmation for a limited period, protect the owner area, deliver videos, understand aggregate site usage, and investigate technical or security problems.

5. Hosting, advertising, and service providers

The site is hosted using Cloudflare Pages and related Cloudflare services. Video objects are stored in a private Cloudflare R2 bucket, and security/analytics records may be stored in Cloudflare D1. The site also loads web fonts from Google Fonts. These providers may process information under their own terms and privacy documentation.

The site displays advertising supplied through Adsterra. When an advertisement is loaded or used, Adsterra and its advertising partners may process technical information such as your IP address, browser and device information, approximate location, cookies or similar identifiers, and ad impressions or interactions. This may be used to deliver ads, measure performance, prevent fraud, and support advertising services. The exact data collected, purposes, retention, and available choices are governed by the advertising provider and its partners; review their current privacy and cookie notices for details. The operator does not control their independent processing. You can manage cookies and similar technologies through your browser settings, although blocking them may affect some site or advertising features.

Cloudflare Web Analytics is also enabled to provide aggregated website page-view and performance insights. Cloudflare describes this service as privacy-first and states that it does not collect visitors' personal data. See Cloudflare's privacy policy for provider details.

6. Retention and security

The age-attestation cookie expires after 24 hours. Pseudonymous browser analytics records are deleted when older than approximately 13 months; aggregate daily page-view counts may be retained longer. Analytics IP-hash rate-limit entries are cleaned up opportunistically after their 24-hour window. Report-form IP-hash rate-limit entries are cleaned up opportunistically after 30 days. These cleanup operations occur as requests are processed, so deletion is not a guaranteed exact-time schedule. Content reports are retained while assessed and for as long as reasonably necessary for rights, safety, legal, and record-keeping purposes; the operator must periodically review and securely delete records no longer needed. Upload declaration timestamps, versions, and consent-reference codes may remain with a video until it is deleted. Supporting consent evidence must be stored separately and securely by the uploader. Security logs and hosting-provider records may follow provider retention settings. Reasonable safeguards are used, but no internet service can guarantee absolute security.

7. Sharing and sale

The project does not currently offer public user accounts, user uploads, subscriptions, or payment processing. It does not intentionally sell analytics information. Information may be processed by hosting/service providers or disclosed where required to comply with law, protect rights, or address security and abuse.

8. Adults-only access

This preview is intended only for adults aged 18 or older, or the higher age of majority where they live. A click-through age statement is not robust age assurance and is not a substitute for any legally required age-verification system. Stronger age assurance and jurisdiction-specific compliance must be assessed before public launch.

9. Your choices and privacy requests

You can clear browser cookies and local storage at any time; this may reset age confirmation and analytics preferences stored in your browser. To request access, correction, deletion, objection, or help with another privacy matter, use the Report content or request removal form and select “Privacy request”. You may leave the video/page URL blank for this request type. The operator must monitor the queue, verify requests proportionately, and respond within the periods required by applicable law. Do not submit identity documents or intimate material through the form.

10. Changes

This notice may be updated as the site changes. The date at the top indicates the latest revision. Material changes should be reviewed before the site is opened to the public.

11. Contact

For privacy matters, use the Report content or request removal form and choose “Privacy request”. The operator must review the private request queue regularly and maintain a documented handling process before public launch.