Privacy Policy

This Privacy Policy explains what personal data GIGAXXX processes when you visit gigaxxx.com or contact us, why we process it, and the rights you have. Our approach is simple: we collect as little as possible, and most of what the site remembers stays on your own device.

1. Who we are

The controller of your personal data is the operator of GIGAXXX (“GIGAXXX”, “we”, “us”), as set out in our Legal notice. For any privacy question or request, use our contact form and choose “Privacy”. Where the law requires us to appoint a representative or a data protection officer, we will publish their contact details in our Legal notice.

This policy covers the website gigaxxx.com (the “Service”) and the messages you send us through its forms. It does not cover other organizations’ websites that we link to. Our Cookie & Storage Policy gives more detail about what is stored in your browser.

2. What we collect today

2.1 Server logs

Like most websites, our web server keeps standard access and error logs. Each entry contains:

• your IP address;
• the date and time of the request;
• the requested URL;
• the HTTP status and the number of bytes sent;
• the referrer, meaning the page that linked to ours, if your browser shares it; and
• your browser’s user agent, which describes your browser and device type.

We use these logs only for security, abuse prevention and troubleshooting. They are rotated daily and automatically deleted after about 5 days. Because a requested URL can be the address of a video page, the logs can show which pages were requested from an IP address during that short period. We do not use them to build profiles, measure audiences or target advertising.

2.2 Cloudflare

Cloudflare is our content delivery network (CDN) and security provider. It sits in front of the site and processes every request, including your IP address and request data, to deliver the site and protect it against attacks. When it needs to tell humans from bots, Cloudflare may set strictly necessary security cookies such as __cf_bm or cf_clearance.

2.3 Data saved in your browser

Watch later, Favorites, recently viewed videos, recent searches, video resume, your like or dislike on each video and your player preferences all work without an account. They are saved in your browser’s localStorage, under keys that start with giga..

We keep no copy of this data. To show your lists and your recently viewed videos, your browser asks our server for the titles and thumbnails of the videos they contain; to show “Recommended for you” on the home page, it sends us the codes of the last 8 videos you opened, and we return videos that go well with them. These requests contain only video codes, their contents are not logged and nothing is stored: we answer and forget them. The data is not kept after you close a private or incognito window. Recently viewed videos and recent searches are saved only while the “History on this device” switch is on. Our Cookie & Storage Policy lists every key, its purpose and how long it is kept.

When you start playing a video, or like or dislike it, only an anonymous count is added to that video’s public view, like or dislike counter. The count is not linked to you.

2.4 Anonymous video statistics

To show first the videos that visitors actually enjoy, and to check that the site keeps getting better, your browser sends us anonymous statistics about the videos on the pages you view:

• which video cards appeared on your screen for at least one second, where they were (for example, the fifth video of a category page) and which ones you opened;
• on a video page: that the page was shown, whether the video was played, for how many seconds, whether it was watched to the end, and whether you added it to Watch later or Favorites;
• while “History on this device” is on, which video you watched after another one during the same visit, so that we can suggest videos that go well together;
• your type of device (phone, tablet or computer), the type of page, and whether the page started a new visit, so that we can measure how many pages and videos an average visit includes.

These statistics contain no cookie, no identifier and no account. They are added to everyone else’s as soon as they arrive: we keep only totals per video and per type of page, never anything per visitor, and we cannot link them to you. Your IP address is used only to limit abuse, in memory and as a salted hash that is never stored; our server logs record the request like any other page request, but not its contents. Automated programs are ignored. You can switch these statistics off at any time with “Video statistics” in Cookie settings, at the bottom of every page; your choice is saved in your browser.

2.5 Messages you send us

GIGAXXX has two forms, and each sends your message directly to our team:

• The contact form on our Contact page: the topic you choose, your name if you give it, your email address (required, so that we can reply), your message, any links you add and, for a copyright notice, the details the DMCA requires.
• The report form that opens from the Report button under each video: the video concerned, the reason you choose, any details you add and, only if you want an answer, your email address.

We use this information only to handle your request and to prevent abuse of our forms. Your IP address is not stored with your message in clear: we keep only a salted hash of it, to limit abuse such as repeated automated submissions.

Both forms are protected against spam robots by Cloudflare Turnstile. When you use a form, Turnstile runs a short check in your browser: Cloudflare processes technical information about your browser and connection, including your IP address, to tell a person from an automated program, under its Turnstile Privacy Addendum. Most visitors see nothing; sometimes Cloudflare asks you to tick a box. We receive only the result of the check, never the information used to make it.

Some messages contain sensitive information, for example a request to remove intimate images of yourself or a report about another person. Please share only what we need to handle your request, and never send intimate images.

3. What we do not collect

• No accounts. There is no sign-up or log-in, so we hold no usernames, passwords or profiles.
• No analytics tools or profiles. We use no analytics software or service, and we never build a profile of you: the video statistics described in section 2.4 are anonymous totals per video.
• No advertising cookies or trackers. No ads are displayed, and no third-party trackers run on the Service.
• No third-party scripts, fonts or embeds, with one exception: Cloudflare Turnstile, which loads only when you use one of our two forms (see section 2.5).
• No payment data. Watching is free, and there is nothing to buy.
• No identity documents from visitors. You do not need to prove your identity to watch.
• No sale of personal data. We do not sell or rent your personal data, use it for targeted advertising or profiling, or make automated decisions about you that have legal or similarly significant effects.

4. Why we use data and our legal bases

The table below lists our purposes and, for visitors in the European Economic Area (EEA) and the United Kingdom, the legal bases we rely on under the GDPR and the UK GDPR.

Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (see section 8).

If a message you send reveals sensitive information, such as details about your sex life or sexual orientation, we use it only to handle your request, and only as data protection law permits, for example with your explicit consent or where it is necessary to establish, exercise or defend legal claims.

The browser storage used by our features is classed as essential in our Cookie & storage settings: it only provides features you choose to use, and we keep no copy of its contents. You can still turn history off or delete everything at any time.

5. How long we keep data

We keep specific information longer only where the law requires it or where it is needed to establish, exercise or defend legal claims, for example reports about child safety or when evidence must be preserved in connection with a report of illegal content or a valid preservation request from an authority.

6. Who receives your data

We do not sell or rent your personal data. We share it only with:

• Cloudflare, our CDN and security provider, which processes every request to deliver and protect the site, and runs the Turnstile anti-spam check on our forms;
• our hosting provider, which operates the dedicated server that runs the site and stores our server logs and the messages sent through our forms;
• authorities and law enforcement, when the law requires it or when it is necessary to protect someone’s life or safety; for example, apparent child sexual abuse material is reported to the National Center for Missing & Exploited Children (NCMEC) and other competent authorities as required (see section 13);
• people involved in a copyright notice, where the law requires it; for example, a copyright counter-notice is passed on to the person who sent the original notice;
• professional advisers, such as lawyers, when we need advice or need to establish, exercise or defend legal claims; and
• a successor organization, if the operation of GIGAXXX is transferred, which must continue to protect your data as described in this policy.

Our service providers process data only to provide their services to us, and we require them to protect it.

7. International transfers

Cloudflare runs a global network, so your requests may be processed outside your country, including in countries whose data protection laws differ from yours. Our other service providers may also process data outside your country. When personal data from the EEA, the UK or Switzerland is transferred to a country that is not recognized as providing adequate protection, we rely on appropriate safeguards, such as the standard contractual clauses approved by the European Commission and their UK and Swiss equivalents. You can ask us for more information through our contact form.

8. Your rights

8.1 EEA, UK and similar laws

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• object to our use of your data based on legitimate interests;
• receive the data you provided to us in a portable format;
• withdraw your consent at any time, where we rely on consent, without affecting earlier processing; and
• lodge a complaint with a supervisory authority (see section 12).

8.2 US state privacy laws

If you live in a US state with a consumer privacy law, such as California, you may have the right to know what personal information we collect, use and disclose, to access, delete and correct it, and to obtain a portable copy. We will not discriminate against you for exercising these rights. You may use an authorized agent; we may ask the agent for proof of their authority and ask you to confirm your identity.

We collect the following categories of personal information, directly from you or from your browser: identifiers, such as IP addresses and email addresses; internet activity information, such as the requested URLs, referrers and user agents in our server logs; and the content of messages you send us through our forms, which may include sensitive information you choose to share. We use them for the purposes in section 4 and disclose them only as described in section 6.

We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising or profiling, or use sensitive personal information for purposes that give you a right to limit its use. As a result, there is currently nothing to opt out of, including through an opt-out preference signal such as Global Privacy Control. If this changes, we will update this policy first and explain how to opt out.

If we decline your request, we will explain why. You can appeal by replying to our decision, and if we deny your appeal, you can contact your state attorney general.

8.3 How to make a request

Use our contact form, choose “Privacy” and tell us what you would like us to do. To help us find the data concerned, include the email address you used in a form or, for server logs, your IP address and the approximate date and time of your visit.

We can only act on data we hold and can link to you. Because server logs are deleted after about 5 days, and we keep no copy of the data saved in your browser, we often have little or nothing to return. We may ask for information to confirm your identity, but only what is needed. Requests are free, unless the law allows a fee for requests that are manifestly unfounded or excessive. We reply as quickly as possible and within the time limits set by the law that applies to you.

8.4 Delete the data on your device yourself

We never receive the data saved in your browser, so you control it. You can:

• turn history off with the “History on this device” switch (menu → Preferences, and in the search panel): recently viewed videos and recent searches are removed and no longer saved;
• clear your history with the Clear buttons for recently viewed videos on the home page and for recent searches in the search box;
• manage your lists on the Saved page, which has tabs for Watch later, Favorites and History;
• clear everything by deleting the site data for gigaxxx.com in your browser settings, as explained in our Cookie & Storage Policy; and
• use a private or incognito window, which keeps nothing after you close it.

9. Children

GIGAXXX is for adults only: you must be 18 or the age of majority where you live, whichever is higher. We do not knowingly collect personal data from minors. If we learn that a minor has contacted us, we delete their personal data promptly, except for any information we must keep to protect them or to meet a legal obligation.

Parents and guardians can block the site with parental-control software, because every page carries the RTA label; our Parental controls page explains how. If you are under 18 and intimate images of you are being shared, Take It Down can help.

10. Security

We protect the Service with Cloudflare’s security services, keep server logs for only about 5 days, limit access to the data we hold to the people who need it, and design features so that your lists and settings stay on your device. No system is completely secure, but we work to protect your data and will handle any personal data breach as the law requires.

11. Future features and changes to this policy

We will update this policy before we launch any feature that changes how we process personal data, including analytics or advertising. Analytics and advertising will stay off until you agree where the law requires consent, and our Cookie & Storage Policy will be updated first.

Where the law requires age assurance, we will use a compliant, privacy-preserving method, so that GIGAXXX never sees or stores your identity documents. We will describe it here before it starts.

When we change this policy, we publish the new version on this page and update the “last updated” date. If a change is significant, we will also highlight it on the Service.

12. Complaints

If you have a concern about how we handle your data, please contact us first through our contact form, and we will do our best to resolve it. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, where you work or where you believe an infringement took place. In the EU, this is usually your national data protection authority; in the UK, it is the Information Commissioner’s Office.

13. Requests from authorities

We hold very little data: there are no accounts, no analytics tools and no profiles, video statistics are anonymous totals, server logs are deleted after about 5 days, and messages sent through our forms are kept as described in section 5.

• Who can ask. Law enforcement, courts, regulators and parties with valid legal process. We do not respond to informal requests for user data from private parties.
• How to ask. Use our contact form and choose “Law enforcement / legal”. Write from an official address and state the legal basis, the exact data you need, and the URLs, IP addresses and times concerned.
• What we disclose. Only what valid, binding legal process requires, or what the law allows in an emergency.
• Emergencies. If a life is at imminent risk, say so at the start of your message: we act as fast as the law allows.
• Preservation. Ask us early to preserve specific data while you obtain legal process: server logs expire after about 5 days.
• User notice. Where the law allows, we tell people before disclosing their data, unless someone’s safety or the protection of a child prevents it.

Apparent child sexual abuse material is removed, reported to NCMEC and other competent authorities as required, and preserved as the law requires.

14. Contact

For privacy questions and requests, use our contact form. For anything else, see our Contact page.