Privacy policy

Last updated: 24 October 2026

This policy explains what information is processed when you use Hotmaal (the "website"), why, and the choices you have. Hotmaal is a free video website for adults. It has no user accounts, no registration, no comments and no payments, and you do not need to give us any personal details to watch or download videos.

1. Information processed when you visit

  • Technical request data. When your browser loads a page, video or image, our hosting servers, our media servers and our network and security provider (Cloudflare) receive standard technical data: your IP address, browser and device type, the address requested, the referring page and the time. This is needed to deliver the website, keep it secure, prevent abuse and fix errors. It may be recorded in server logs that are kept for a limited period.
  • Analytics. We use Google Analytics 4 to understand how the website is used, for example which pages and videos are popular and which devices visitors use. Google Analytics collects information such as pages viewed, time spent, device and browser type, and approximate location (country or city) derived from your IP address. Google Analytics 4 does not log or store IP addresses. We use this information only in aggregate to improve the website.
  • Fonts. The website's typeface is loaded from Google Fonts, so your browser connects to Google's servers to download it.
  • View and download counts. We count how many times each video is viewed or downloaded. These are simple totals and are not linked to you.

2. Cookies and storage on your device

We keep the number of cookies to a minimum.

  • hm_age_ok (cookie and local storage): remembers that you confirmed you are 18 or older, so the notice does not appear on every page. Lasts up to one year.
  • hotmaal_csrf_cookie (cookie): a security cookie that protects the website against cross-site request forgery. Expires after two hours.
  • _ga and _ga_<ID> (cookies set by Google Analytics): distinguish visits and visitors for statistics. Last up to two years.
  • Cloudflare security cookies (for example __cf_bm): may be set by Cloudflare to tell people from automated traffic. Strictly necessary for security.
  • Video player settings (local storage only): your volume, mute and quality choice, and the point where you stopped each video (kept for up to 30 days and 100 videos) so you can resume. This information stays in your browser and is not sent to us.

You can delete or block cookies and site data in your browser settings. The website still works without them, but you will see the age notice again and the player will not remember your settings. You can also stop Google Analytics by installing Google's opt-out browser add-on.

3. When you email us

If you contact us (for example about a problem, advertising or a removal request), we receive your email address and whatever you write. We use it only to answer and handle your request, and keep it only as long as needed for that, or longer where required to document a legal request such as a copyright notice.

4. Why we process information

  • To deliver the website and its videos to you.
  • To keep the website secure, prevent abuse and fix problems.
  • To understand, in aggregate, how the website is used and improve it.
  • To answer messages and handle copyright and content removal requests.

Where data protection laws such as the GDPR apply, we rely on our legitimate interests in running a secure and working website and in understanding its use, and on the need to answer your requests and meet our legal obligations.

5. Who receives information

We do not sell personal information, and we do not share it for advertising. Information is processed on our behalf by the service providers needed to run the website: our hosting and media server providers, Cloudflare (network and security) and Google (Analytics and Fonts). These providers handle data under their own privacy policies, including Google's privacy policy and Cloudflare's privacy policy. We may also disclose information when required by law or to protect the rights and safety of others.

These providers may process data in countries other than yours. Where the law requires it, such transfers are covered by the safeguards the providers offer, such as standard contractual clauses.

6. How long information is kept

  • Server and security logs: for a limited period needed for security and troubleshooting.
  • Google Analytics: for the retention period set in our analytics account, at most 14 months for detailed data; after that only aggregated reports remain.
  • Emails: as long as needed to handle your request, as described above.
  • Data in your browser: until it expires or you delete it.

7. Security

The website is served only over encrypted HTTPS connections, and video links are signed and expire after a limited time. No method of transmission or storage is completely secure, but we take reasonable measures to protect the information we process.

8. Adults only

This website is only for adults aged 18 or over, or the age of majority where they live if that is higher. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a minor has contacted us, please let us know and we will delete the information.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete personal information about you, to object to or restrict its use, and to complain to your data protection authority. Because we do not have user accounts, we usually hold very little information that can identify you; the main exception is email you send us. To make a request, email [email protected]. We will answer within the time required by law, normally within one month.

10. Changes to this policy

We may update this policy, for example if we add new features or services such as advertising. The date at the top shows when it last changed. Please check this page from time to time.

11. Contact

Questions about privacy: [email protected].