Leave discreetly EscEsc HOOKUPS VIP €1

Privacy

What leakparty. knows about you, why, and for how long. The short version: the bare minimum, nothing more.

Last updated: September 30, 2026

This translation is provided for convenience only. In the event of any discrepancy, the French version prevails.

The essentials

  • No targeted advertising, no advertising trackers, no third-party analytics tools.
  • We do not sell or rent any data.
  • You can watch the site without an account. With an account, we keep only what is needed to make it work.
  • You can delete your account yourself, at any time, from your settings.

Without an account

When you watch a video, we record:

  • a view, counted once per day per visitor. To avoid duplicates, we compute a fingerprint of your IP address and browser that is scrambled and irreversible, and deleted after 48 hours;
  • your country, determined by Cloudflare, for the “popular in your country” videos (counted in aggregate, never linked to you).

Your IP address is also used, for the duration of a request, to limit abuse (too many login attempts, for example).

With an account

  • Identity: username, email and password, which is encrypted (argon2id: we cannot read it).
  • Sign-in with Discord: your Discord ID, your verified email and your profile picture. We read neither your messages nor your servers.
  • Sessions: to keep you signed in, along with the browser and IP address used to sign in (useful for spotting a suspicious sign-in).
  • Activity: your likes, the creators you follow and your messages in discussions.

Only what is strictly necessary for the site to work, and no advertising cookies:

  • session cookie: keeps you signed in (30 days with “Stay signed in”, otherwise until you close your browser);
  • Discord sign-in cookie: protects the sign-in against forgery and is deleted right afterwards;
  • local storage: your age confirmation (30 days), the state of the sidebar, and whether you have already seen the loading screen.

As these items are strictly necessary, they do not require consent.

Hosting and service providers

  • Server: the site, the API and the database run on our own server.
  • Cloudflare: content delivery network, protection against attacks and video storage (R2). Cloudflare sees requests passing through in order to route them.
  • Discord: only if you choose to sign in with Discord.

Retention periods

  • View fingerprints: 48 hours.
  • Sessions: until they expire or you sign out.
  • Account and activity: for as long as your account exists. When it is deleted, everything is erased: account, sessions, likes, follows and messages.

Your rights

You can view and correct your information in your settings, delete your account yourself (Settings → Delete my account), and request a copy of your data or any other information from the Contact page. If you believe your rights are not being respected, you may lodge a complaint with the data protection authority of your country (in France, the CNIL).

Security

End-to-end encrypted connection (HTTPS), encrypted passwords, session tokens stored as hashes, rate limiting of login attempts, and signed, time-limited video playback links.

leakparty.

Warming up the videos…0%