privacy
last updated: 11 november 2026
who is responsible
the operator of this site, and the controller in the sense of the GDPR, is:
spicy somtam (creator)
c/o SourceArt · VM-00000455
Fritz-Thiele-Straße
3
28279 Bremen-Obervieland
Deutschland
[email protected]
the postal address is a legal service address run by an impressum service. mail sent there reaches me. the full legal notice is on the impressum page.
what this site collects
this page has no account system or payment form. it uses cloudflare web analytics and first-party aggregate click counters, described below.
visitor numbers
the hosted site loads the cloudflare web analytics javascript beacon to measure page views and page performance. the beacon sends measurements to cloudflare. this is separate from the age acknowledgment and the click counters below. see cloudflare’s web analytics documentation and privacy policy for information about its processing.
click counting
the custom click-counter parameters contain only the button label and a normalized source label. the counter code does not store the full referring URL. normal HTTP request metadata is processed separately by the hosting infrastructure.
the current homepage counts the onlyfans, onlyfans free, telegram, x, qutoys, einseo, honey play box, jocktribe and justforfans directory links. older counter labels may remain in historical totals. the "copy code" buttons in the "affiliate links" row send nothing.
the source label is one of six fixed words: x, reddit, bsky, telegram, direct or other. it is worked out in your browser from the link you arrived through (for example ?src=x) or from the name of the site that sent you, and kept only in the page's memory while it is open. it is never saved in your browser.
links that i post elsewhere for a campaign can point to thespicysomtam.com/go, which forwards you to onlyfans and adds 1 to a counter for the channel named in that link, like "x post" or "telegram".
the first-party counter code stores no IP address, cookie, device or browser identifier, or visitor profile with these counts. the counters are just numbers per button per day and per button per source, like "free page: 42" or "free page from x: 7". they cannot tell us who pressed anything, and a click is not a purchase.
the page that reads those counters is private and needs a secret key. it is not reachable by the public.
the counter code does not automatically expire aggregate totals. the page memory holding the source label is gone as soon as you close the tab.
what is stored in your browser
one thing only: the age acknowledgment is saved in your own browser's local storage (a single entry, ss_age_ok) so you are not asked again on every visit. it never leaves your device and is not sent to us. clearing your browser data clears it. the first-party page code saves no other browser entries and sets no cookies.
hosting
this site is hosted on cloudflare pages. like any web host, cloudflare processes the network requests needed to deliver the page, which technically includes your IP address, under cloudflare's own privacy policy.
the first-party counter code stores aggregate counts without IP addresses or visitor identifiers. cloudflare processes network requests to host the site.
media on this page
the portrait and fonts are served from this domain. no external media or social feed is embedded. cloudflare analytics runs separately as described above.
leaving this site
linked platforms process your activity under their own privacy notices. the subscription link selected by this page can include a platform attribution code based on the normalized source of your visit. the website's own click counter records a click, not a purchase.
the four shop links in the "affiliate links" row are affiliate links, marked as paid links on the page: the shop may record that you arrived through this page or used my code, and pay me a commission on what you buy. that tracking happens on the shop's side, under the shop's privacy policy. this site only counts the click anonymously, as described above, and is told nothing about what you do after you leave.
your rights
under the GDPR you can ask what personal data i hold about you, have it corrected or deleted, restrict or object to its processing, and receive a copy in a portable format. you are welcome to ask about processing by email.
you have the right to lodge a complaint with a competent data protection supervisory authority. contact details for the bremen authority are available on its official website.
bremen authority’s official website
right to object (art. 21 GDPR): you can contact me to object to processing. the aggregate click counters do not provide a per-person exclusion mechanism. blocking this site’s scripts in your browser prevents the homepage script from sending click counts; direct visits to /go are counted by the server.
legal basis
delivering the page and counting anonymous clicks and visits rests on a legitimate interest in running and improving a promotional website (art. 6 (1) f GDPR). cloudflare acts as a processor for hosting and analytics; its servers may be outside the EU and cloudflare relies on the EU standard contractual clauses and the EU-US data privacy framework for those transfers.