Draft for review. This document is a good-faith template, not legal advice. Have a qualified attorney (California / US adult-industry) review and adapt it before launch.

Privacy Policy

Last updated: 3 July 2026 · Draft v1

Morning Shadows ("we", "us"), operated by Aaron McPolin, respects your privacy. This policy explains what we collect, why, and your rights — with specific provisions for California residents under the CCPA/CPRA.

1. Information we collect

You give us: name, email, phone, socials, city, session/enquiry details, application info, and (for talent) age-verification and model-release records.
Automatically: privacy-first, cookieless analytics (aggregate page views, device type, referrer). We do not use tracking cookies without consent.
Payments: handled by our payment processor (Epoch) and HoneyBook; we do not store full card numbers.

2. How we use it

To respond to enquiries, deliver sessions, fulfil orders, and send email you opted into.
To operate, secure and improve the site.
To comply with legal obligations, including adult-content record-keeping (see our 2257 notice).

3. Sharing

We share data only with service providers who help us operate (e.g. email — EmailOctopus; payments — Epoch; fulfilment — Prodigi; booking — HoneyBook; hosting — Cloudflare), under contract. We do not sell your personal information.

4. Your California rights (CCPA/CPRA)

If you are a California resident you have the right to know, access, correct, delete, and limit use of your personal information, and to opt out of "sale" or "sharing" (we do neither). You will not be discriminated against for exercising these rights. To make a request, email [email protected]. We honour Global Privacy Control (GPC) signals.

Do Not Sell or Share My Personal Information

We do not sell or share personal information as defined by the CPRA. If this changes, we will provide a dedicated opt-out link here.

5. Data retention & security

We keep records only as long as needed for the purposes above or as required by law (including 2257 records). We use reasonable technical and organisational safeguards.

6. Children

This site is strictly for adults 18+ (21 where required). We do not knowingly collect data from minors.

7. International

We are US-based (Los Angeles, California). If you contact us from outside the US, your data may be processed in the US.

8. Contact

Questions or requests: [email protected].