Legal

Privacy Policy

Effective date: October 9, 2026 Last updated: October 9, 2026 Operator: DSW Marketing LLC

This Privacy Policy explains how DSW Marketing LLC ("we," "us," or "our"), operator of SHE UNDRESSES at sheundresses.com, collects, uses, shares, and protects personal information, and the choices and rights you have. DSW Marketing LLC is the business (or "controller") responsible for your personal information. This policy is part of our Terms of Service.

1. Information we collect

Information you give us:

  • Account information: email address, display name, password (stored only as a salted hash), and account settings.
  • Support and reports: anything you send us by email or through our forms, including the Failed Transaction form (account email, asset, transaction ID or explorer link, pay-to address, invoice ID, approximate time and time zone, a description, and any screenshot you upload), takedown requests, DMCA notices, and complaints.
  • Gift details: the recipient information you enter when you buy a gift unlock.
  • Takedown comparison photo (optional): if you submit a takedown request at sheundresses.com/takedown, you may choose to upload a photo of yourself so we can compare it with the reported content. It is never required to submit or process a request. It is stored privately with restricted access, used only to verify the likeness claim, never used to generate content or to train or prompt any AI system, and deleted thirty (30) days after the request is resolved.

Payment and wallet information:

  • Invoice records: invoice ID, the set and shots purchased, price in U.S. dollars, the cryptocurrency and network, the crypto amount, the pay-to address generated for your invoice, status, and timestamps.
  • Blockchain data: the transaction hash, the sending wallet address, the amount, and confirmation details. When you pay with a connected wallet such as Phantom or Solflare, we receive your public wallet address and the signed transaction you approve. We never receive or store private keys, seed phrases, or card numbers.
  • Processor data: payment status notices from NOWPayments that confirm whether an invoice was paid.

Blockchain transactions are permanently public. Anyone can see a wallet address and its transactions on a public ledger. We cannot change or delete information recorded on a blockchain.

Information collected automatically:

  • Device and connection data: IP address, approximate location derived from IP (country and state or region), browser type, operating system, referring page, and timestamps.
  • Usage data: pages and sets viewed, shots unlocked, checkout steps, and errors, recorded in our first-party logs.
  • Cookies and local storage, as described in the Cookies section below.

Inferences: your purchase history may reveal information about your sexual interests, which some laws treat as sensitive personal information. We use it only to provide the Site and as described in this policy.

We do not collect government ID, selfies, biometric data, or precise geolocation from buyers.

2. How we use information

  • Provide the Site: create and secure your account, process and match payments, deliver unlocks to your vault, and deliver gifts.
  • Support: answer questions, investigate failed or short payments, and review refund requests.
  • Safety and compliance: enforce age and location restrictions, prevent fraud and abuse, enforce our Terms and Content Policy, respond to takedown, DMCA, and legal requests, and meet tax, accounting, and recordkeeping duties.
  • Improve the Site: measure what works, fix errors, and set prices, using our own aggregated analytics.
  • Communications: send service and security emails (for example, password resets and replies to your reports). We do not send marketing email without your consent.

For people in the European Economic Area, the United Kingdom, or Switzerland, our legal bases are: performance of our contract with you; our legitimate interests in running a secure, lawful, and profitable site; compliance with legal obligations; and your consent where we ask for it.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only:

  • To service providers that process it for us under contract: Cloudflare (hosting, content delivery, security, email routing, and media storage), Neon (database), NOWPayments (crypto invoicing and payment confirmation), AgentMail (transactional email), and blockchain infrastructure providers that relay wallet transactions.
  • When required by law, subpoena, court order, or other valid legal process, or to protect the rights, property, or safety of DSW Marketing LLC, our users, or the public, including reports to the National Center for Missing & Exploited Children or law enforcement.
  • In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to this policy.
  • With your direction or consent.

4. Cookies and similar technologies

Cookies are small files a website stores in your browser. Local storage is similar browser storage. SHE UNDRESSES uses only the following:

  • Strictly necessary: a session cookie set by our sign-in system that keeps you logged in and protects against cross-site request forgery. The Site cannot work without it.
  • Strictly necessary: a local-storage flag that remembers you passed the 18+ age gate, so it does not reappear on every page.
  • Functional: short-lived local-storage entries (about 45 minutes) that let a Solana wallet payment resume after you return from the Phantom or Solflare app, and remember that you accepted the checkout terms for that payment.
  • Security: our hosting and network provider, Cloudflare, may set cookies used to detect bots and abuse.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics trackers. Site analytics (pages viewed, unlocks, conversion) are recorded in our own first-party server logs and database. Because we do not use cookies to sell or share personal information or for targeted advertising, there is nothing to opt out of; we also honor Global Privacy Control signals as an opt-out request. You can delete cookies and local storage in your browser settings at any time. If you do, you will be signed out and see the age gate again.

5. How long we keep information

  • Account information: while your account is open, and up to 30 days after you ask us to close it, unless we must keep it longer for a reason below.
  • Invoice, payment, and refund records: seven (7) years, for tax, accounting, and anti-fraud purposes.
  • Failed Transaction reports and support messages: three (3) years.
  • Takedown, DMCA, complaint, and legal records: seven (7) years, or longer while a matter is open.
  • Optional takedown comparison photos: deleted thirty (30) days after the request is resolved.
  • Server and security logs: up to 90 days, unless needed to investigate an incident.
  • Content production and compliance records: kept as described in our AI-Generated Content Disclosure & Content Policy and our 18 U.S.C. § 2257 statement.

6. Security

We use encryption in transit (HTTPS), hashed passwords, access controls limited to staff who need them, and private, access-controlled media storage. No system is perfectly secure; please use a strong, unique password and protect your email account.

7. Your privacy rights

Depending on where you live, including California (CCPA as amended by the CPRA), Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with consumer privacy laws, you may have the right to:

  • Know and access the personal information we hold about you, including the categories and sources, the purposes, and the categories of recipients;
  • Correct inaccurate personal information;
  • Delete personal information, subject to legal exceptions;
  • Receive a portable copy of your personal information;
  • Opt out of the sale or sharing of personal information, targeted advertising, and profiling (we do none of these);
  • Limit the use of sensitive personal information (we use it only as permitted to provide the services you request); and
  • Not be discriminated against for exercising any of these rights.

How to exercise your rights: email legal@sheundresses.com with the subject "Privacy Request," from the email address on your account if you have one. We will verify your identity by confirming control of that email address, and may ask for more information if needed. You may use an authorized agent, who must provide your signed permission; we may still verify your identity directly with you. We respond within 45 days, and may extend that once by another 45 days where permitted, with notice.

Appeals: if we decline your request, you may appeal by replying with the subject "Privacy Appeal." We will respond within the time required by your state's law. If you are not satisfied, you may contact your state attorney general.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

Categories disclosed for a business purpose in the past 12 months (California notice): identifiers (email, IP address, wallet address); commercial information (purchase and invoice records); internet activity (usage and log data); approximate geolocation; and inferences from purchase history. Each was disclosed only to the service providers listed in Section 3.

8. EEA, UK, and Swiss residents

You have the rights to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. You may lodge a complaint with your local data-protection supervisory authority. Your information is processed in the United States and other countries where our providers operate. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

9. Children

You must be 18 or older (or the age of majority where you live, if higher) to enter. We do not knowingly collect personal information from anyone under 18. If we learn that a minor has created an account or sent us information, we will close the account and delete the information, except where we must keep it to report or prevent harm. If you believe a minor has used the Site, email legal@sheundresses.com right away.

10. Changes

We may update this policy. We will post the update on this page with a new "Last updated" date. If a change materially affects how we use personal information already collected, we will notify you by email or a notice on the Site.

11. Contact

Privacy requests and questions: legal@sheundresses.com General support: contact@sheundresses.com

By mail: DSW Enterprises Attn: Legal P.O. Box 4826 Spokane, WA 99220 United States

All legal documents