18 U.S.C. § 2257 Records-Keeping Compliance Statement

[[PLACEHOLDER — REPLACE WITH LAWYER-REVIEWED TEXT]] This statement is a draft prepared for review and is not legal advice. It must be reviewed, adapted, and approved by qualified legal counsel before publication. The operator of my-own-dolls.com is established in Germany / the European Union and is therefore primarily governed by EU and German law. Title 18, United States Code, Section 2257 and 2257A and their implementing regulations (28 C.F.R. Part 75) are provisions of United States federal law and do not directly bind an operator established solely in the EU.

Notwithstanding the above, the operator voluntarily maintains records-keeping, age-verification, and consent documentation modeled on the standards set out in 18 U.S.C. § 2257. This is done because such standards are required or expected by international payment card networks (including Visa and Mastercard adult-content rules), reflect industry best practice, and support the operator's parallel obligations under EU and German law, including the GDPR, the German Youth Media Protection State Treaty (JMStV) governing closed user groups and age verification, and the EU Digital Services Act (DSA). Nothing in this statement is an admission that U.S. law applies to the operator.

[[PLACEHOLDER — REPLACE WITH LAWYER-REVIEWED TEXT: confirm whether a formal 2257 compliance posture, a 'voluntary best-practice' posture, or an explicit jurisdictional disclaimer is the appropriate framing for this operator.]]

All persons depicted in any photographic content offered through my-own-dolls.com were verified to be at least eighteen (18) years of age at the time the relevant content was created or produced. No content depicting any minor, and no content that sexualizes, appears to depict, or could reasonably be mistaken as depicting a minor, is permitted on the platform under any circumstances. The operator maintains a strict zero-tolerance policy toward child sexual abuse material (CSAM).

Prior to participation in any production, each performer is required to provide a valid, government-issued photographic identification document establishing legal name and date of birth (for example, a passport, national identity card, or driver's license, as applicable). Identity and age are verified against that document, and a record of the verification is retained as described below.

Where content is produced or supplied by third parties or contributors, equivalent age-verification and documentation requirements are imposed by contract before such content may be published, and the operator retains or requires retention of the corresponding records. [[PLACEHOLDER: describe whether content is produced in-house, by contracted performers, by verified third-party studios/contributors, or a combination.]]

For each performer appearing in content on the platform, the operator maintains records modeled on 18 U.S.C. § 2257 standards and on payment-network requirements. These records may include: a copy of the government-issued photo identification used to verify age and identity; the performer's legal name and any professional, stage, or screen names or aliases used; the date of birth and confirmation of age at the time of production; and a record cross-referencing the performer to the specific content in which they appear.

The operator additionally maintains documented, informed, written consent from each performer covering the creation, publication, and commercial distribution of the content, including consent to the specific acts depicted and to the platform's intended uses. Records relating to age verification and consent are retained for the period required by applicable law and payment-network rules, and in any event for [[PLACEHOLDER: retention period, e.g. the duration content remains available plus a defined number of years]].

Records containing personal data are processed and secured in accordance with the GDPR and the operator's Privacy Policy. Access is restricted to authorized personnel on a need-to-know basis. Identity documents and consent records are not part of the publicly available content and are disclosed only to authorized inspectors, payment-network auditors, or competent authorities to the extent legally required and permitted. [[PLACEHOLDER: DPO contact / reference to Privacy Policy URL.]]

The records described in this statement are maintained by the designated Custodian of Records. Requests or inquiries from authorized parties regarding such records should be directed to the Custodian at the address below.

Custodian of Records: [[PLACEHOLDER: Custodian full name / title]], [[PLACEHOLDER: company legal name]], [[PLACEHOLDER: full street address, city, postal code, Germany]]. Contact: [[PLACEHOLDER: records-keeping contact email]].

[[PLACEHOLDER — REPLACE WITH LAWYER-REVIEWED TEXT: confirm whether a U.S.-style Custodian of Records designation is appropriate for an EU operator, or whether this should be reframed as a records-keeping point of contact, and confirm what address/contact details may lawfully be published.]]

The operator will respond to lawful records-inspection requests from competent authorities and to audit requests from payment card networks or their acquirers in accordance with applicable law and contractual obligations. The publication of this statement does not constitute a waiver of any jurisdictional defense, nor consent to the application of foreign law beyond what is legally required.

If any content is reported, suspected, or found to involve a minor or non-consensual material, the operator will remove it expeditiously and will report it to the competent authorities and reporting bodies as required, including the German Federal Criminal Police Office (BKA) and INHOPE-affiliated hotlines, and will cooperate with law-enforcement investigations. The platform also operates non-consensual intimate imagery (NCII) removal procedures consistent with the U.S. TAKE IT DOWN Act framework and EU/German law, alongside its DSA notice-and-action and DMCA takedown mechanisms.

[[PLACEHOLDER: link to Content Removal / NCII policy, DSA notice mechanism, and DMCA agent details.]] [[PLACEHOLDER — REPLACE WITH LAWYER-REVIEWED TEXT: align reporting obligations and named authorities with counsel's guidance.]]

Questions regarding this statement may be directed to [[PLACEHOLDER: compliance contact email]]. General company and imprint information, including the operator's legal name, registered address, and USt-IdNr / VAT identification number, is set out in the site Imprint (Impressum) pursuant to applicable German disclosure requirements.

Operator: [[PLACEHOLDER: company legal name]], [[PLACEHOLDER: registered address, Germany]], USt-IdNr / VAT: [[PLACEHOLDER: VAT identification number]].

This statement may be updated from time to time to reflect changes in law, payment-network requirements, or operational practice. This draft was last revised on [[PLACEHOLDER: DATE]] and is effective as of [[PLACEHOLDER: EFFECTIVE DATE]] once finalized and approved by counsel.