privacy
last updated: 24 september 2026
who is responsible
the operator of this site, and the controller in the sense of the GDPR, is:
spicy somtam (creator)
c/o SourceArt · VM-00000455
Fritz-Thiele-Straße 3
28279 Bremen-Obervieland
Deutschland
[email protected]
the postal address is a legal service address run by an impressum service. mail sent there reaches me. the full legal notice is on the impressum page.
what this site collects
almost nothing. this page has no account system and no advertising pixels. there are two measurements, described below, and neither one identifies you.
visitor numbers
this site does not run any analytics script. the only measurement is the click counting described below.
click counting
when you click one of the buttons on the homepage, the page sends two things to this site's own server, which adds 1 to a counter: the name of that button, and a short label for where you came from. that is the whole message.
the button names are fixed and there are fourteen of them: the three onlyfans links (top, list, bottom), the three free-library links (top, list, bottom), telegram, justforfans, x, the four shop links in the "get your toys" row (qutoys, einseo, honey play box, jocktribe) and the temporary campaign banner at the top. once the campaign ends the banner is gone and thirteen remain. the "copy code" buttons in the "get your toys" row send nothing.
the source label is one of six fixed words: x, reddit, bsky, telegram, direct or other. it is worked out in your browser from the link you arrived through (for example ?src=x) or from the name of the site that sent you, and kept only in the page's memory while it is open. it is never saved in your browser. the full address you came from is never sent.
links that i post elsewhere for a campaign can point to thespicysomtam.com/go, which forwards you to onlyfans and adds 1 to a counter for the channel named in that link, like "x post" or "telegram". nothing else is recorded.
no IP address, no cookie, no device or browser identifier, no visitor profile and nothing that could be traced back to you is stored with any of this. the counters are just numbers per button per day and per button per source, like "free page: 42" or "free page from x: 7". they cannot tell us who pressed anything, and a click is not a purchase.
the page that reads those counters is private and needs a secret key. it is not reachable by the public.
how long: the counters are plain totals (button, day, source) with nothing that identifies you, and are kept as long as this site runs. the page memory holding the source label is gone as soon as you close the tab.
what is stored in your browser
one thing only: the "18+, enter" confirmation is saved in your own browser's local storage (a single entry, ss_age_ok) so you are not asked again on every visit. it never leaves your device and is not sent to us. clearing your browser data clears it. nothing else is saved in your browser and no cookies are set by this site.
hosting
this site is hosted on cloudflare pages. like any web host, cloudflare processes the network requests needed to deliver the page, which technically includes your IP address, under cloudflare's own privacy policy. we do not store, log or receive that data ourselves.
media on this page
the photos and video you see here are served from this domain, not embedded from anywhere else. no third party is contacted to play them, so watching them tells nobody but your own browser.
leaving this site
once you click through to onlyfans, telegram, justforfans, x or any other linked platform, that platform's own privacy policy applies. this site has no visibility into what you do there.
the four shop links in the "get your toys" row are affiliate links, marked as paid links on the page: the shop may record that you arrived through this page and pay a commission on what you buy. that tracking happens on the shop's side, under the shop's privacy policy, after you leave this site. this site is told nothing about you.
your rights
under the GDPR you can ask what personal data i hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format. in practice this site holds nothing that identifies you, so there is usually nothing to hand over, but you are welcome to ask by email. you also have the right to complain to a data protection authority. the one responsible for this site's address is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Bremen
Arndtstraße 1
27570 Bremerhaven
Deutschland
[email protected] · datenschutz.bremen.de
right to object (art. 21 GDPR): you can object at any time to the click counting described above. email me and i will stop counting for you, or simply block scripts for this site in your browser, then nothing is sent.
legal basis
delivering the page and counting anonymous clicks and visits rests on a legitimate interest in running and improving a promotional website (art. 6 (1) f GDPR). no consent is needed because no cookies are set, nothing is saved in your browser except the age confirmation you ask for, and no personal profile is built. cloudflare acts as a processor for hosting and analytics; its servers may be outside the EU and cloudflare relies on the EU standard contractual clauses and the EU-US data privacy framework for those transfers.