← Back

Privacy Policy & Edge Data Practices

All Access Data & GhostAnchor · Global Privacy Policy

Effective Date: September 8, 2026

Compliance Frameworks: US (CCPA / CPRA), European Union (GDPR - Regulation 2016/679), United Kingdom (UK GDPR / Data Protection Act 2018), Switzerland (FADP), and international privacy standards.

1. Fundamental Principle: Minimalist Edge Telemetry

All Access Data and GhostAnchor are engineered around a privacy-preserving, zero-bloat edge architecture. We do not track users across the web, we do not deploy invasive third-party ad pixels, and we do not maintain persistent surveillance databases.

2. Data Categories & Collection Disclosures

2.1. Ephemeral Routing Telemetry: When an Unlocker resolves an allaccessdata.com/r/:slug link:

  • IP Addresses: Processed ephemerally at Cloudflare edge points of presence (PoPs) strictly for DDoS mitigation, rate-limiting, and regional edge cache optimization. IP addresses are not persistently logged in cleartext application databases.
  • User-Agent String: Parsed in worker memory to distinguish browsers from automated clients and protect the service.
  • Cookies: The Platform issues single-purpose, root-scoped, encrypted HttpOnly authentication cookies (ga_auth_:slug) exclusively to verify payment unlock state at the edge without cross-site tracking.

2.2. Creator Account Data: To share paid links, creators provide an email address and password. We store a normalized email index and a salted password verifier in private Cloudflare KV, plus an opaque account identifier for link ownership. Whop OAuth is requested only when a creator chooses to connect a payout or withdraw earnings; public links never expose the creator email, password verifier, or destination URL.

2.3. Payment Telemetry: Financial credentials are submitted directly to the enabled hosted payment processor. BLCKSWMNGBRD LLC does not ingest or store full card numbers or banking secrets. When payments are enabled, we retain only the transaction references required to reconcile access, refunds, and disputes.

2.4. Destination Content: Destination URLs are encrypted via AES-GCM 256-bit encryption in persistent storage. The Company does not review or guarantee files, private parameters, access tokens, or other content located at external destinations.

3. Roles: Controller vs. Processor

BLCKSWMNGBRD LLC as Data Controller: The Company acts as a Data Controller with respect to creator account data (email and account identifier), optional Whop payout identity, and platform transactional payment logs.

Sharer as Independent Data Controller: The Sharer acts as an independent, standalone Data Controller for any personal data collected, requested, or processed once a user is redirected to their Destination URI (e.g., email capture on a Notion page, Calendly booking form details, or Discord member lists). The Company bears zero responsibility for privacy compliance at third-party destinations.

4. Third-Party Subprocessors

We share telemetry with trusted third-party infrastructure partners solely to deliver edge routing and payment rails:

  • Cloudflare, Inc. (USA / Global Edge): Edge network routing, SSL termination, KV storage, and DDoS defense.
  • Whop, Inc. (USA): Optional creator payout connection and hosted payment processing where enabled.

5. International Data Transfers

The Platform executes on globally distributed edge nodes. Information collected through your use of the Platform may be transferred to, stored, and processed in the United States and any other country where Cloudflare or an enabled service provider maintains servers. For users located in the EEA, UK, or Switzerland, transfers are executed under standard contractual clauses (SCCs) or adequacy decisions.

6. User Rights (GDPR & CCPA/CPRA)

Subject to local statutory exemptions, users hold the following rights regarding their personal data:

  • Right of Access & Portability: You may request details regarding your Creator profile and associated slugs.
  • Right to Erasure (Deletion): You may delete any created GhostAnchor link at any time via the Creator Dashboard, which triggers atomic deletion of the record and cryptographic keys from Cloudflare KV.
  • Right to Rectification: You may correct account metadata via your connected Whop account.
  • Do Not Sell My Personal Information: We do not sell, rent, or trade personal data or browsing behavior to third-party data brokers or advertisers.

To exercise any of these rights, contact privacy@allaccessdata.com.

7. Changes to These Instruments

BLCKSWMNGBRD LLC reserves the right to amend or update these Terms of Service and Privacy Policy at its sole discretion. Any changes will be posted with an updated "Effective Date". Continued use of the Platform after the posting of revised instruments constitutes unconditional acceptance of the updated terms.