This policy explains what blglflix.com collects, what it does not collect, who else sees it, where it is held, how long it is kept, and how to have it removed. It is written to be read, not to be skimmed past.
1. Who is responsible
BL & GL Flix is an independent reference archive for Boys’ Love and Girls’ Love drama, film and their source works. It is written and operated by one individual publisher based in Türkiye, who publishes under the name Renkaze. There is no company, no editorial team and no support desk behind it, and the word “we” below is only a convenience.
That person is the data controller for everything described here, and is reachable at info@blglflix.com. That is the single address for every data protection request.
2. What is collected, category by category
2.1 Server logs
The web server records a line for each request: the requesting IP address, the date and time, the page requested, the HTTP status, the browser and operating system string, and the referring page where the browser sends one. This happens for every visitor and is needed to run and secure the site.
2.2 Cookie and preference storage
A small number of values are stored in the browser to remember a choice made on the site, such as which Mood Board posts a reader has liked. These sit on the reader’s own device. The full list is on the Cookie Policy.
2.3 View counters
Each title page, profile and article counts how many times it has been viewed. The counter stores a number against the page. It does not store who viewed it.
2.4 Votes and ratings
Readers can rate a title. What is stored is the score and a marker in the reader’s own browser so that the same person is not counted twice on the same device. The stored rating is not linked to a name, an email address or an account.
2.5 Mood Board posts
The community wall stores the message text and an optional nickname the poster chooses. A real name or an email address is not required and is not requested. A one-way hashed form of the IP address is stored alongside the post, used only to rate-limit spam and abuse. The original IP address is not stored with the post and cannot be recovered from the hash.
2.6 Comments
Where comments are open, a comment stores the text, the name or nickname given, the email address given, the time, and the IP address, which is how WordPress and its spam filtering work. The email address is not published and is not used to send anything other than a reply about that comment.
2.7 Incoming email
An email sent to the address on this site delivers the sender’s address, the message and whatever the sender chose to include. It is read by one person.
2.8 Analytics
Google Analytics 4 is active on this site and sets its own cookies to measure how many people visit, which pages they read, and roughly where in the world they are. It reports in aggregate. Visits by logged-in site administrators are excluded from measurement.
3. What is not collected
- No reader account, login or password, other than for the site’s own administrator.
- No payment details of any kind. Nothing is sold here.
- No newsletter list and no marketing email list.
- No uploads from the public. There is no facility for a visitor to upload an image or a file.
- No precise location, no device fingerprinting and no cross-site advertising profile built by this site.
- No special category data: nothing about health, religion, political opinion, sexual orientation or ethnicity is asked for, inferred or stored, from readers or about the people the archive covers.
- No personal data is bought from, or sold to, anybody.
4. Why it is used
- To serve, run, secure and repair the site;
- To display community posts and moderate them;
- To prevent spam, abuse and attack;
- To understand in aggregate which pages are useful;
- To answer messages.
Where consent is the basis for processing, it is asked for and can be withdrawn. Where it is not, the basis is the legitimate interest in running a working, secure website, and that interest is limited by everything in section 3.
5. Advertising and consent
No advertising is served on this site at present and no advertising cookie is set. The intention is to display advertising through Google AdSense in future, at which point Google and its partners would use cookies to select and measure advertisements based on a reader’s prior visits to this and other sites.
Before any advertising is enabled, a Google-certified Consent Management Platform will be put in place, so that consent is requested before an advertising cookie is set for readers in the European Economic Area, the United Kingdom and Switzerland. This section will be rewritten on the day that changes. The commercial side of this is set out in full on the Advertising and Affiliate Disclosure.
More on how Google handles data is at How Google uses information from sites that use its services.
6. Who else receives data
- The hosting provider (Hostinger), which operates the servers and therefore necessarily processes requests and logs.
- Google, through Analytics and Site Kit, for the measurement described in section 2.8, and through AdSense if and when advertising begins.
- The email provider that carries mail sent to the address on this site.
That is the whole list. No data is shared with advertisers, data brokers, studios, agencies or anybody who asks about a reader. It would be disclosed to a public authority only where the law requires it.
7. Where it is held
The site is hosted by Hostinger on the server named server1568, which is in Massachusetts, in the United States. Hostinger holds the site’s backups in Boston, in the United States. Everything described in section 2 that reaches this site rather than staying on the reader’s own device, which is the server logs, the cookie values sent with each request, the view counters, the votes, Mood Board posts, comments and mail sent to the address on this site, is processed there.
The operator of this site is in Türkiye and the servers are in the United States, so personal data collected here leaves the country it was collected in and is held under United States law. For a reader in the European Union, the United Kingdom or anywhere else with rules on sending personal data abroad, that is an international transfer, and it is written here plainly rather than left to be worked out. No transfer mechanism, adequacy decision or set of standard contractual clauses is claimed for it, because none has been verified for this site. A reader who is not prepared to have their data handled that way should not use the site, and section 9 explains how to have what is already held deleted.
Google processes analytics data on its own infrastructure, which spans several countries including the United States, under its own terms.
8. How long it is kept
- Mood Board posts: deleted automatically after 7 days.
- Server logs: kept only as long as needed to run and secure the site, and rotated by the host.
- Comments: kept while the page exists, and deleted on request.
- View counts and ratings: kept as aggregate numbers with no personal data attached.
- Email: kept as long as needed to deal with the matter, and deleted on request.
- Analytics: retained according to the setting held in the Google Analytics property.
9. Reader rights
Depending on where a reader lives, rights may exist under the EU and UK GDPR, Türkiye’s KVKK (Law No. 6698), or Californian law. These typically include the right to know what is held, to get a copy, to have it corrected, to have it deleted, to restrict or object to its use, and to withdraw consent at any time.
One address handles all of them: info@blglflix.com. No form, no account and no particular wording is needed. A request is answered within two business days, and acted on as quickly as the request allows. Personal information is never sold. A reader who is not satisfied with the answer may complain to their local supervisory authority.
10. Children
This site is not directed at children under 13, or under the higher minimum age where local law sets one, and it does not knowingly collect personal information from them. If a child has posted something here, write to the address above and it will be removed.
A related rule applies to the people the archive writes about rather than to readers. For any subject who appears to be a minor, birth dates, physical measurements, schools, places of residence and personal social accounts are omitted entirely, whatever other sites publish.
11. Security
The site is served over HTTPS with HSTS, administrative access is limited to one account, software is kept updated, and abuse controls sit in front of community posting. No method of transmission or storage over the internet is completely secure, and nothing here should be read as a promise that it is.
12. Changes to this policy
This policy is updated when what the site does changes, and the date at the top changes with it. One change in particular will be written here on the day it happens: the introduction of advertising with its consent mechanism.
