Privacy
This page describes what data arises when you read this site, who receives it and how long it is kept.
What we do not do
Apart from the analytics tools described below, nothing on these pages loads from third-party servers; the fonts sit on our own server. There is no advertising pixel from Google, Meta or anyone else, no reader comments and no account.
Visit counts without cookies
Our own server counts every page view: the address of the page, its language and type, the website you came from, the campaign tag of the link you followed (utm_source), your country, whether you use a phone or a computer, whether the request looks automated, and whether the page was found. A small script of ours adds how far a page was read, how long it was open, how fast it loaded, and clicks on our own navigation and on partner links. If a script on the page fails, it also reports the file and line, but not the error text. If your browser blocks a script under our security rules, it sends us a report. We keep only which rule blocked it, the server the script came from and the page it happened on (plus, as for every visit count, your country and device type), and discard the rest of the report, including the script's full address, when it arrives.
None of this sets a cookie, stores anything on your device or carries an identifier, your IP address or your browser string. The counts are kept in Cloudflare Workers Analytics Engine (Cloudflare, Inc.) for three months, and as daily totals after that. Legal basis: our legitimate interest in knowing which pages are read and where they fail (Art. 6(1)(f) GDPR).
Analytics that use cookies
If you are in the EU, the EEA, the UK or Switzerland, we ask first. With your consent we also use:
Google Analytics 4 (Google Ireland Ltd; Google LLC, USA; script from googletagmanager.com): page views, events, approximate location and device. Cookies _ga and _ga_*, up to two years; data kept for 14 months. Google signals and advertising features are off. Until you decide, and if you decline, Google receives only cookieless signals without an identifier (Google Consent Mode).
Microsoft Clarity (Microsoft Corporation, USA; script from clarity.ms): heatmaps and recordings of how pages are used, with text masked. Cookies _clck (one year), _clsk (one day) and Microsoft's own cookies (MUID, CLID). Without consent Clarity sets no cookie and sees single page views only.
Yandex Metrica (YANDEX LLC, Russia; script from mc.yandex.ru): visit statistics, including a click map, for the Yandex search console. Cookies _ym_uid and _ym_d (one year) and short-lived _ym_* cookies; session recording (Webvisor) is off. It loads only after consent. Russia has no adequacy decision under the GDPR, so this transfer rests on your consent (Art. 49(1)(a) GDPR).
Outside these regions the three tools run from the first page view, and you can switch them off at any time. Transfers to Google and Microsoft in the USA rely on the EU–US Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR; in Germany also § 25 TDDDG).
Your choice
Use "Privacy settings" at the foot of every page to accept or decline at any time; declining removes the cookies and stored identifiers these tools set on this site. Your choice is kept in your browser under sv_consent, and we ask again after 13 months. If your browser sends a Global Privacy Control signal, we treat it as a decline, including over an acceptance you gave before the signal, and ask again; an acceptance you give while the signal is on stands. You can also block these services in your browser, or use the providers' opt-outs: tools.google.com/dlpage/gaoptout and yandex.com/support/metrica/general/opt-out.html.
What arises on every request
Opening a page sends, as with any website, your IP address, the time, the requested address and your browser identifier. Cloudflare processes these to deliver the page and to block abuse; our own request logs are deleted after at most 14 days.
If you follow a partner link
We create a random identifier for that click and store it with your IP address, browser identifier and language, rough device type, city, region and continent as reported by Cloudflare, network number and name (ASN), data centre, connection details (HTTP and TLS version), the page of ours you came from, and whether the request looked automated. If you allowed analytics (or are outside the EU/EEA/UK/CH and did not switch it off), a script of ours also attaches a device hash computed from canvas, WebGL, audio and screen properties, time zone, languages, platform, browser identifier and hardware details; the hash is kept in your browser's session storage (sv_fp) until the tab is closed. The click is passed to our own tracking server so that a commission can be matched to it.
Purpose: matching commissions, detecting fraud and abuse, and settling disputes with partner programmes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR); for the device hash, your consent. Partner programmes can reverse or dispute a commission long after the click, so click records are kept without a fixed deletion date. You can ask us to delete yours at any time.
Your rights
You can ask for access, correction, erasure and restriction, object to processing based on legitimate interest, and withdraw your consent at any time (Arts. 15–21 GDPR). A message to hallo@sexvana.com is enough. You can also complain to a data protection authority. That address is received via Cloudflare Email Routing; no other unpublished address appears on this site.
How we earn
We link to services through affiliate programmes. If someone subscribes after clicking one of those links, we receive a commission. The price you pay does not change.
What that means for the copy is the point. Every figure on this site carries the source we read it from and the date. You can check them all without taking our word. We are not subscribed to any of the products described and we do not claim otherwise.