Privacy Policy
DIY FemDom · diyfemdom.com Effective 2026-08-09 · Last updated 2026-08-09
This site is operated by Nikki Kit ("we", "us"). This policy explains what we collect, why, and what you can ask us to do about it. It describes what this site genuinely does, not what a template says a website usually does.
The short version. This site sets no cookies and has no sign-up form, no account and no comments. There is nothing here for you to fill in. There is no advertising network, no retargeting pixel, no Google Analytics, no data broker, and no profiling. We use our own self-hosted analytics that cannot identify you. We collect no personal information from you on this site at all, and we have never sold or shared personal information.
1. Who is responsible
Nikki Kit is the data controller for this site.
Contact for anything in this policy, including all privacy requests: legal@nikkikit.com
2. What we collect
2.1 If you only read the site. Nothing that identifies you
We use Umami, an open-source analytics tool we host ourselves at umami.nikkikit.com. It
is not a third-party analytics service and your visit is not shared with an analytics company.
Umami records: page visited, referring page, approximate country, device type, browser, screen size, and clicks on outbound links. It records these as aggregate counts.
Umami does not store your IP address. It converts your IP and browser details into a one-way hash that changes daily and cannot be reversed to identify you or followed across days or sites.
2.2 There is nothing on this site to fill in
This site has no sign-up form, no contact form, no account, no login, no comments and no uploads. We verified this against the site's own source, not by assuming it.
So there is no name, no email address and no message for us to hold. If you want our emails, you join the list on one of our other sites, and that site's privacy policy covers it.
2.3 What we never collect on this site
No payment card details, no bank details, no government ID, no date of birth, no precise location, no biometric data, no health data, no account passwords.
No purchase happens on this site. Every transaction runs on a third-party platform under that platform's own account, terms and privacy policy. We never see your card number.
2.4 What you send us voluntarily
If you email us, we hold that message and your address for as long as needed to deal with it and to keep a record of having dealt with it.
3. Cookies and browser storage
This site sets no cookies. None. No consent banner is needed and none is shown, because there is nothing to consent to.
Our analytics does use a small amount of local storage in your browser. A preference flag and a small cache. It holds no personal information and no identifier that follows you between sites. Clearing your browser data removes it. We disclose it because "no cookies" and "nothing stored" are different claims, and only the first one is true.
4. Third parties that see anything
This is the complete list. If something is not named here, it does not receive anything about you.
4.1 Third-party resources: none
This site loads no resources from any third party. No fonts, no scripts, no images, no embeds. Every request your browser makes when reading this site goes to a server we control.
4.2 Our own infrastructure
Our analytics and websites run on servers and a content-delivery network we control or rent directly. Those providers process data on our instructions and cannot use it for their own purposes.
4.3 Links that leave this site
This site links to platforms where our work is published or sold, including social networks, content platforms and gift services. Once you follow a link, you are on their site under their privacy policy, not this one. We can see that a link was clicked; we cannot see what you do after.
We encourage you to read the privacy policy of any platform before creating an account there.
4.4 What never happens
We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not disclose it to data brokers, advertisers or list-rental services. We do not build profiles of you. There is no "sale" or "sharing" under the CCPA/CPRA to opt out of, because none occurs.
We will disclose information only where legally compelled by valid process, or where necessary to protect someone's safety or our legal rights. And we will tell you unless prohibited from doing so.
5. Why we are allowed to do this (UK/EU visitors)
| What | Legal basis (UK GDPR / GDPR Art. 6) |
|---|---|
| Self-hosted, non-identifying analytics | Legitimate interests (Art. 6(1)(f)): understanding which pages are useful, at the lowest privacy cost available |
| Replying to your email | Legitimate interests / steps before a contract |
| Keeping records of consent and requests | Legal obligation (Art. 6(1)(c)) |
We do not rely on consent for analytics because no cookies are set and no personal data is processed by it.
Our services are directed to and operated from the United States. If you contact us or subscribe from outside the US, your information is transferred to and stored in the US. Where required, we rely on the UK/EU Standard Contractual Clauses or your explicit consent.
6. How long we keep things
| Data | Retained |
|---|---|
| Analytics (aggregate, non-identifying) | Rolling, for trend comparison; contains nothing that identifies you |
| Emails you send us | As long as needed to handle it, then archived or deleted |
| Consent and privacy-request records | As long as needed to prove compliance |
7. Your rights, and how to use them
Whoever you are and wherever you live, you may ask us to:
- Tell you what we hold about you
- Give you a copy of it
- Correct anything wrong
- Delete it
- Stop, unsubscribe, or object to processing
- Not be discriminated against for asking
How: email legal@nikkikit.com. Say what you want. You do not have to give a reason, quote a statute, or use special wording. We respond within 30 days (extendable to 45 under the CCPA where permitted, and we will tell you if we need it).
We may need to confirm you control the email address in question, so that someone else cannot obtain or delete your data by asking. That check will never require government ID.
If you are in the UK or EU, you may also complain to your data-protection authority, in the
UK, the Information Commissioner's Office (ico.org.uk). We would rather you told us first.
If you are in California, you have the rights above under the CCPA/CPRA, including the right to know what is collected, to delete, to correct, and to opt out of sale or sharing. We do not sell or share personal information, and we have not in the preceding 12 months. We honour Global Privacy Control signals. We do not offer financial incentives for personal information.
8. Security
The sites are served over HTTPS. Analytics and mailing-list systems run on servers we control, with access limited to us. The mailing-list database is not exposed to the public internet.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach affects your personal information, we will notify you and the relevant authority as required by law.
9. This site is for adults
This site is intended for adults aged 18 or over (21 where that is the local age of majority). It is not directed to children and we do not knowingly collect information from anyone under 18. If we learn we have, we delete it. See our Age Restriction statement.
10. Automated decisions
None. Nothing about you is decided by an algorithm here. We do not profile you, score you, or use your data to train machine-learning systems.
11. Changes
If we change this policy we update the date at the top. Material changes. A new category of data, a new third party, a new purpose, will be announced on the site and, if we hold your address, by email. We will not quietly broaden what we collect.
12. Contact
legal@nikkikit.com, privacy questions, requests, complaints, or to tell us something here is inaccurate.