The full policy is still being written. iFantasyX is in development and the company behind it is being registered, so the complete policy publishes before anyone can create an account. One section is already final and published in full below: how we handle reports about people who are not members.
The company responsible, its registered address, and its data protection registration number.
Account details, what you submit to verify, and what each app records as you use it.
What happens to an ID document, how long it is held, and what is kept once the check is done.
The lawful basis for each kind of data, including the safety reports on Blacklist.
Retention for each type, and what happens to your data when you close your account.
The suppliers involved in running the apps, and the fact that we do not sell data to anyone.
Servers inside the EU, and what happens if that ever changes.
Access, correction, deletion, objection, and how to complain to a regulator.
Blacklist works by letting verified professionals report and check clients. That means we hold personal information about people who are not our members and who have not given us their consent.
We are telling you this plainly because you may be one of them.
When a member files a report we hold the identifier they used to search, which is a phone number, a username, or an email address, along with what they told us happened, the categories they selected, an approximate area, and the date.
We do not hold names, addresses, photographs, or identity documents of reported people.
Entirely from our members. We do not buy data, we do not scrape other websites, and we do not receive information from anyone who is not a verified member of this platform.
Our lawful basis is legitimate interest. The interest is the physical safety of people doing dangerous work alone, who have limited access to police protection and are frequently disbelieved when they seek it.
We have weighed that against the rights of the people reported. We consider the interest justified because the information is limited to what a professional needs to make a safety decision, it is only visible to verified professionals, and it is never public.
Every report is read by a person before it appears to anyone.
We keep reports for as long as the person may still pose a risk to our members. We do not delete a report simply because time has passed.
A verified member can share a warning card about a number outside iFantasy, for example to a group chat.
We are telling you this because it is the one way information we hold can reach people who are not our members.
The number, how many reports it has, the categories those reports fall into, and the cities they came from. Nothing else.
Never a name, yours or theirs. Never the text of a report. Never a date, a photograph, or anything identifying the person who filed it.
Every card carries a reference code. That code means nothing to anyone who sees it. It lets us trace the card back to the member who shared it, and only we can do that.
A card can only be made about a number with at least three separate reports.
Below three, no card exists. Cities are only shown when there are five or more reports.
Both of those rules exist for the same reason. A card about a single report could tell the person who it came from. Three separate people cannot be narrowed down to one.
The same legitimate interest that lets us hold the reports at all. People in this industry already warn each other privately. A card carries less than a private message would, it cannot name anyone, and it comes from a source that can be checked.
Once a card leaves the app it is a picture on someone else's phone. We cannot recall it, we cannot see where it goes, and it does not update if the report behind it is later withdrawn.
We know this. It is why a card carries so little.
Write to data@ifantasyx.com with the reference code on the card.
We will tell you what we hold, and we will consider any request to remove it. We will not always agree, because a report may protect someone from harm. Where we refuse we will tell you why, and you can complain to the Information Commissioner's Office.
If a card has been altered before it reached you, the reference code will show us what it originally said.
If you believe you have been reported, you have rights under UK data protection law. You can ask what we hold about you, ask us to correct it if it is wrong, ask us to erase it, ask us to restrict how we use it, and object to us holding it at all.
Write to data@ifantasyx.com and we will respond within one month.
We will consider every request seriously. We will not always agree to erase a report, because doing so may put someone at risk of harm. Where we refuse, we will tell you why and tell you how to complain.
You can complain to the Information Commissioner's Office at any time.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone 0303 123 1113. ico.org.uk
The remaining sections publish before launch on 8 November 2026, and no account can be created before the full policy is live. If you have a question about data in the meantime, email support@ifantasyx.com.
Verify once and every app comes with it.
iFantasyX is a closed network for verified adults working in the adult industry.
It is not a pornography site and contains no explicit material.
By entering you agree to our Terms of use and Privacy policy.
We remember your choice on this device only.