Privacy policy

• No analytics, advertising or social-media trackers, and no third-party scripts.
• No accounts, sign-ups, comments or newsletter on this site.
• Your 18+ confirmation is saved in your browser’s local storage, on your device only.
• We receive personal data only when you email us.
• Our server keeps error logs, not access logs: ordinary visits aren’t recorded.
• Links to Candy take you to Candy, where Candy’s own privacy and cookie policies apply.

The controller of the personal data described here is Candy AI Shorts Video, the operator of candyaishortsvideo.com. You can reach us about anything in this policy at contact@candyaishortsvideo.com.

Emails you send us

If you write to us, we receive your email address, your message and anything you attach. We use them only to answer you, to handle the correction or takedown you asked for, and to keep a record of what we changed. The legal basis under the GDPR is our legitimate interest in answering messages and keeping the site accurate (Article 6(1)(f)). We never add you to a mailing list.

Error logs

When something goes wrong, for example a request that fails or a server error, our web server writes an entry to an error log. An entry can include your IP address, the time and the address that was requested. We use these logs only to find and fix problems and to keep the site secure (legitimate interest, Article 6(1)(f)), and they are deleted automatically within about two months. The server keeps no access logs, so ordinary page views aren’t recorded at all.

The preview login (maintenance mode only)

Before launch and during maintenance, the site can sit behind a preview password. People who sign in to the preview get one strictly necessary cookie, csv_access, which keeps the preview unlocked for up to 30 days. To stop password guessing, the login counts failed attempts per IP address in the server’s memory for 15 minutes; that count is never written to disk. While the site is public, the preview login is switched off and nobody receives the cookie.

When you confirm you’re 18 or older, your browser saves that answer in its local storage under the key casv-age-ok, so the question isn’t asked again on your next visit. It isn’t a cookie, it’s never sent to us or to anyone else, and it contains nothing but the answer. To remove it, clear this site’s data in your browser settings.

• No accounts, profiles or sign-ups, and no payment details: we don’t sell anything.
• No analytics tools (such as Google Analytics) and no advertising, retargeting or social-media pixels.
• No fingerprinting or cross-site tracking of any kind.
• No third-party embeds: fonts, images and scripts are served from our own server, so loading a page doesn’t contact font services, video platforms or ad networks.

That’s the complete list. There are no analytics or advertising cookies, so there’s nothing to opt out of.

Links to Candy go through an address on our site that starts with /go/, which redirects you to Candy with our referral code (see how our affiliate links work). We don’t log that click. From then on you’re on Candy’s website, run by EverAI Ltd., and Candy’s own privacy and cookie policies apply, including the cookies Candy and its affiliate platform use to credit the referral to us.

Your browser tells Candy that you came from our domain, not which page. The referral code identifies this site, not you. Candy’s referral program reports the sign-ups and purchases credited to our code so that we can be paid; what that report contains is set by Candy’s program, and we use it only to check our commissions. Your Candy account, chats, content and payments are between you and Candy, and we can’t see them.

• Emails: as long as we need them to answer you and to keep a record of corrections and takedowns. Ask us and we’ll delete yours.
• Error logs: deleted automatically within about two months.
• Failed preview logins: 15 minutes, in memory only.
• Preview cookie: up to 30 days, on the preview visitor’s device.
• Age-gate answer: on your device, until you clear it.

Two kinds of service providers process data for us, only so the site and its mailbox work: our hosting provider, whose server in the United States runs the site and holds the error logs, and our email provider, which delivers and stores the messages you send us. Because the server is in the United States, technical data from your visit is processed there, whichever country you visit from.

We don’t sell or share personal information, and we don’t use it for advertising or profiling.

Wherever you live, you can ask us what personal data we hold about you and ask us to correct or delete it. In practice that is usually just the emails you sent us.

• EU, EEA and UK (GDPR and UK GDPR): you can access, correct and erase your data, restrict or object to its processing, and ask for a portable copy. You can also complain to your local data protection authority.
• California and other US states with privacy laws (such as the CCPA/CPRA): you can ask to know, delete and correct the personal information we hold, and you won’t be treated differently for doing so. We don’t sell or share personal information as those laws define it, and we don’t use sensitive personal information.

To use any of these rights, email contact@candyaishortsvideo.com. We may ask you to confirm that the request comes from the address we have on file, and we answer within the time the law sets (one month under the GDPR, 45 days under the CCPA).

This site is for adults (18+, or the age of majority where you live). We don’t knowingly collect personal data from minors. If you believe a minor has emailed us, tell us and we’ll delete the message.

If we change how the site handles data, we’ll update this page and the date at the top first. If we ever add something that collects more (analytics, for example), this policy will say so before it goes live. This version was last updated on September 28, 2026.

Candy AI Shorts Video, contact@candyaishortsvideo.com. Security is part of the same promise: the site is served over HTTPS, server access is limited to the people who run it, and we keep only the data described above. For everything else, see how to reach us and our terms of use.