Last updated: July 25, 2026
This policy explains what bustova.com collects, why, who receives it, and what you can do about it. It is written to be read, not to be skimmed past.
Summary
We do not ask for your name, your email address or any account. There is no registration form and no newsletter on this site. What we do collect is limited to what is needed to run the site, to comply with age-verification obligations, and — only if you agree — to display advertising and measure our audience.
Our own visit counter works without any cookie and never stores your IP address. Advertising and Google Analytics are loaded only after you have accepted them, and you can change your mind at any time on our cookie preferences page.
1. Who is responsible
The site bustova.com is responsible for the processing described here. You can reach us at [email protected] for any question about your data or about this policy.
2. What we collect, and why
2.1 Technical connection data
Like any website, our server and our security provider record technical data when you connect: IP address, date and time, page requested, browser type. This is necessary to deliver the pages, to keep the site available and to defend it against attacks and automated abuse. These logs are handled by our hosting provider and by Cloudflare under their own retention rules.
2.2 Our own audience measurement — no cookie, no IP stored
We count visits ourselves, directly on our server. This measurement records the page type viewed, the country supplied by Cloudflare, the referring domain (the site you came from, not the full address) and whether you are on mobile or desktop.
It stores no cookie and no IP address. Visitors are distinguished through an irreversible fingerprint whose secret key is renewed every day, which makes the fingerprint unusable after 24 hours and prevents any tracking over time. Nothing is sent to a third party. This data is kept for 13 months.
Because this measurement is strictly limited to our own audience, is not shared and cannot be traced back to a person, it runs whether or not you accept cookies.
2.3 Age verification
This site is reserved for adults. Access is subject to an age check, which is a legal obligation in several countries. Depending on the configuration in force, this check is performed by an external provider (AgeVerif), whose script runs in your browser and processes the data needed to establish that you are of legal age. That provider acts under its own privacy policy.
Once the check has passed, a cookie (av_ok) records the result for
30 days so that you are not asked again on every page. We do not receive or store
any identity document.
2.4 Video ratings
If you rate a video, we store the aggregated counts (likes and dislikes) for that video. Your individual rating is remembered in your browser's local storage only, so that the same video is not rated twice from the same device. It is never sent to us in a way that could be linked back to you.
2.5 Searches
We record that a search took place, so we know how much the search feature is used. We do not store the words you searched for.
2.6 What we never collect
No account, no name, no email address, no postal address, no payment data. We operate no contact form and no mailing list. If you write to us by email, we keep your message only for as long as needed to answer it.
3. Cookies and similar technologies
Nothing that requires your consent is loaded before you have made a choice. Advertising and audience-measurement code is not hidden, and not loaded and then removed — it is simply absent from the page until you accept it.
3.1 Always active
These are strictly necessary to operate the site or to meet a legal obligation. They are not covered by your choice and cannot be refused, because without them the site cannot work. None of them is used for advertising, and none is shared with a third party.
| Name | Set by | Duration | Purpose |
|---|---|---|---|
vcms_sid |
This site | Session (deleted when you close your browser) | Maintains your session and protects forms against cross-site request forgery. |
av_ok |
This site | 30 days | Records that the age check has been passed. |
vcms_consent |
This site | 6 months | Stores your cookie choice. It records a refusal just as much as an acceptance — without it, the banner would reappear on every page. |
cf_clearance |
Cloudflare | Up to 1 year | Security and protection against automated abuse. |
Your browser may also keep a small local entry (voted_<id>)
after you rate a video. It stays on your device and is never transmitted.
3.2 Advertising — requires your consent
We display ads and offers from affiliate partners. Their code sets cookies on their own domains and may be used to recognise you from one site to another. These cookies are set by the partners themselves, not by us: their names, content and lifetime are governed by the partners' own policies, and we do not receive their content.
| Recipient | Domains | When |
|---|---|---|
| CrakRevenue — advertising network | crxcra.com, imglnkx.com |
When the page loads, if you accepted advertising. |
| CrakRevenue — click tracking | t.ajrkmx1.com, t.affmodels.com |
Only if you click an ad. These domains record the click and set the partner's affiliate cookie. |
| Streamate — live cam feed | Delivered through the CrakRevenue widget | When the page loads, if you accepted advertising. |
If you refuse advertising, none of this code is inserted into the page and none of these domains is contacted.
3.3 Audience measurement — requires your consent
In addition to our own counter, we use Google Analytics for more detailed statistics: pages viewed, session length, approximate country, device type.
| Name | Set by | Duration | Purpose |
|---|---|---|---|
_ga |
Google (googletagmanager.com) |
13 months | Distinguishes one visitor from another. |
_ga_<ID> |
Google (googletagmanager.com) |
13 months | Maintains the session state for our property. |
This data is not anonymous: it relies on a persistent identifier stored on your device. It is aggregated in our reports, but Google processes it as personal data. See Google's Privacy Policy for details.
Independently of your choice here, you may install the Google Analytics Opt-out Browser Add-on, which blocks Google Analytics on every site you visit.
3.4 Changing or withdrawing your choice
Withdrawing must be as simple as accepting. You can change your choice at any time on our cookie preferences page, also reachable through the « Cookie settings » link in the footer of every page. Refusing everything takes one click, exactly like accepting everything.
One limitation you should know about. Withdrawing your consent prevents any new cookie from being set, but it does not erase cookies a third party has already placed on your device. No website is technically able to delete cookies belonging to another domain. To remove those, use your browser's settings, which also let you block third-party cookies entirely.
Your choice is kept for six months, after which you are asked again. You are also asked again if we add or remove a purpose, because consent given for one set of purposes does not cover a new one.
4. Who receives your data
We do not sell your data. It is shared only with the providers below, each for a specific purpose:
- Our hosting provider — stores the site and its database, and keeps technical server logs.
- Cloudflare — delivers and protects the site; sets the
cf_clearancesecurity cookie and supplies the visitor's country. - AgeVerif — performs the age check, where that method is in use.
- Google (Analytics) — only if you accepted audience measurement.
- CrakRevenue and its partners, including Streamate — only if you accepted advertising.
Some of these providers are established outside the European Economic Area, or process data there. In that case the transfer relies on the mechanisms those providers put in place, such as the European Commission's standard contractual clauses or an adequacy decision. Their own policies describe these arrangements.
5. Legal bases
- Legitimate interest — operating and securing the site, and measuring our own audience through a cookieless method that cannot identify anyone.
- Legal obligation — verifying that visitors are of legal age, and keeping proof of the cookie choices collected.
- Consent — advertising and Google Analytics. These run only after you have accepted them, and you may withdraw at any time.
6. How long we keep data
| Data | Retention |
|---|---|
| Our own audience statistics (pseudonymised, no IP) | 13 months |
| Record of cookie choices (proof of consent) | 36 months |
| Age-check cookie | 30 days |
| Cookie-choice cookie | 6 months |
| Technical server logs | As set by our hosting provider and Cloudflare |
| Google Analytics data | 13 months, under Google's rules |
7. Your rights
Depending on where you live, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. You may also lodge a complaint with your data protection authority — in France, the CNIL.
An honest limitation. We hold almost nothing that can be linked to you. Our audience measurement uses a fingerprint that becomes unusable after 24 hours, and our record of cookie choices is pseudonymised the same way. In most cases we are therefore genuinely unable to find "your" data, and we will not ask you for identity documents in order to create a link that does not exist. Where a request concerns data held by one of the providers listed in section 4, we will point you to them.
To exercise your rights, write to [email protected].
8. Security
The site is served over HTTPS. Cookies we set are restricted to this site
(SameSite=Lax), marked Secure, and those that no script
needs to read are marked HttpOnly. Access to the administration area
is protected and separate from the public site. Cloudflare filters automated
abuse.
9. Minors
This site is strictly reserved for adults and is not directed at minors. We do not knowingly collect data relating to a minor. Access is subject to the age check described in section 2.3. If you believe a minor has accessed this site, contact us at [email protected].
10. Changes to this policy
We may update this policy, in particular if we add or remove a partner. The date at the top of this page always reflects the last change. If the change affects the purposes you consented to, the cookie banner is shown again automatically, so that your choice always matches what actually runs on the site.
11. Contact
For any question about this policy or about your data: [email protected].