Privacy notice

Last updated: 2026-10-19

WellHungTGirls.com is operated by UBERSV LIMITED, registered in England and Wales, company number 07208408. Registered office: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX. Contact: legal@ubersv.com.

Scope and responsibility

UBERSV LIMITED is responsible for personal information processed for this website. This notice covers our service, not independent sponsor or gallery websites. It describes the UAT service: age verification is not enforced and scheduled event aggregation is not yet operating. An optional AgeVerif test flow may be available while the integration is being tested; a test result does not establish production access eligibility.

Information and purposes

Our hosting and delivery providers necessarily receive connection information, including your IP address, browser information and requested URL, to deliver pages and media and protect the service. Operational error logs are retained for 14 days. We do not deliberately copy raw IP addresses, user agents, search terms or referrer histories into our analytics events.

If you opt in, we record page views, visible loaded thumbnail impressions, clicks and sponsor/advertising interactions. Events can include content IDs, placement, acceptance time, a hashed browser identifier and session identifier. These are pseudonymous records, not anonymous records, and adult-content interactions may reveal sensitive interests. We use them to measure use and prepare content-performance statistics, not to identify your real-world identity or infer your sexual orientation.

Consent and other lawful grounds

Optional browser-linked analytics rely on your consent. You may decline without losing browsing access. Necessary delivery, security and fault diagnosis rely on our legitimate interests in operating a reliable service, balanced against your rights. We process correspondence to answer requests, address complaints and meet applicable legal obligations; where relevant, we also rely on legitimate interests in resolving disputes and protecting rights. We do not use optional analytics after refusal as a substitute means of identifying visitors.

Cookies and browser storage

If you choose to test age verification, the flow uses a necessary, host-only, Secure and HttpOnly state cookie for up to ten minutes to protect the verification request; it is cleared when the callback completes. Successful test verification may issue a similarly protected proof cookie lasting at most one hour, shortened to the verification provider's earlier expiry. These cookies are separate from optional analytics and do not contain a provider user ID, email, identity document or biometric information. They do not currently restrict or authorize access to UAT content.

With analytics consent, a first-party visitor cookie lasts up to one year and is renewed on visits. It is Secure, HttpOnly and SameSite=Lax. Server-side visitor state expires after 30 days of inactivity. Sessions end after 30 minutes of inactivity and have a maximum duration of 24 hours. Session and retry/deduplication markers expire logically within 24 hours; physical database cleanup may take longer. Browser storage also remembers consent and browsing preferences until changed, cleared or the relevant browser session ends.

Retention

Our normal processing policy is a 30-minute processing cycle, with a target of processing events and removing their browser/session associations within 60 minutes of server acceptance. After successful processing, the raw event is deleted together with its identifiers; identifier-free thumbnail, gallery, sponsor and advertising counts may be retained indefinitely.

If processing is delayed or fails, unprocessed events are preserved for recovery, but their browser and session associations have a maximum retention of 144 hours (six days) from acceptance, not from processing or a retry. A separate privacy cleanup job runs every five minutes and starts removing those associations at 143 hours, leaving a one-hour recovery margin. The unprocessed content/action information remains available to recover counts without those associations. Cleanup failures and missed cleanup runs trigger operational alerts.

The current UAT service is collection-only: scheduled aggregation is not yet operating, so the normal 60-minute processing target is not yet in operation. The independent six-day association-removal backstop still applies. This event-association limit is separate from the session/retry and returning-visitor state periods described above. We review necessity, investigate failures and handle applicable erasure requests; the recovery window is not a general permission to retain identifiers for six days after successful processing.

We keep correspondence for as long as necessary to resolve the request and meet applicable legal, recordkeeping or dispute requirements, reviewing it for deletion when those purposes end.

Changing your choice and requesting deletion

Use Analytics settings to decline or withdraw analytics consent. Withdrawal stops further collection and clears the analytics identity, but does not automatically erase events already stored. To request erasure or exercise other rights, contact legal@ubersv.com. Contact us before clearing your browser identity if you want help locating browser-linked records; do not send identity documents unless we agree a necessary, secure verification method.

Providers and international processing

Choosing the optional verification test sends you to AgeVerif, which receives connection information and processes information for the verification methods you select under its own notices. Our backend checks the result, age threshold, assurance and expiry. We do not retain its access token, stable verification identifier or full response, and do not receive or store identity documents or biometric material through this callback.

We use Amazon Web Services for hosting, database storage, content delivery and operational monitoring. Application databases are in Stockholm, Sweden; worldwide CDN delivery and provider operations may process connection information outside the UK or EEA. Applicable transfer requirements must be satisfied for personal information. Contact legal@ubersv.com for information about relevant providers, locations and transfer safeguards. We may disclose information when lawfully required or necessary to establish, exercise or defend legal claims.

External providers receive connection information when you follow their links and may apply their own cookies and tracking. We do not control those practices. We do not sell our browser-linked analytics records.

Your rights and complaints

Depending on applicable law and our grounds for processing, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent without affecting the lawfulness of prior processing. We may need proportionate information to verify and locate a request. We normally respond within one month, subject to lawful extensions and exceptions.

You can complain to the UK Information Commissioner's Office or, where applicable, your local supervisory authority. Contacting us first is helpful but not a condition of that right.

Children, decisions and updates

The service is intended only for adults. If you believe a child has supplied personal information, contact us. We do not make solely automated decisions producing legal or similarly significant effects about visitors. We update this notice when our practices change; the revision date is shown above.