Compliance & security

18 U.S.C. § 2257: model age records

The US law 18 U.S.C. § 2257 and the 28 CFR Part 75 regulations require producers of sexually explicit content, live webcam streams included, to confirm that every performer is 18 or older and to keep records of it:

• the performer's legal name and date of birth, checked against a photo ID, and a copy of that ID;
• every other name the performer uses — site nicknames included — cross-referenced to the records;
• for live streams, material that identifies the performer on camera and links her to her records;
• records are kept for 7 years from creation or last change, and for 5 more years after the business stops;
• the site displays a 2257 Compliance Statement with the name and street address of the custodian of records.

How Krona.Chat complies with § 2257

• built-in model verification: a selfie with ID, a passport or ID scan, legal name, date of birth, country and consent to the processing of personal and biometric data — see the model dashboard;
• verification records are tied to the model's account and nickname, and automatic stream snapshots link the model on camera to her documents;
• the moderator gets an instant Telegram notification about every document upload and approves or rejects the application; a model can't go live without approval;
• everyone who appears on camera must verify their own account — the site terms set the rules and penalties;
• the operator's site publishes a 2257 Compliance Statement page with the custodian of records' details.

Visa and Mastercard rules

Card networks set their own requirements for adult merchants: since 2021 Mastercard has required age and identity checks for everyone on camera, stream moderation and complaints resolved within 7 business days, and Visa places adult content under its VIRP programme. Without this a payment processor won't take the site on. More on the requirements and annual fees on the accepting payments on a cam site page.

Moderation, complaints and DMCA

• moderators check who is in each room and whether streams follow the site rules;
• the site has a page for complaints and content removal requests, including DMCA (17 U.S.C. § 512); requests go straight to the people responsible via Telegram or email and are handled manually;
• the complaints mechanism also covers the EU Digital Services Act requirement to accept notices of illegal content.

Visitor age verification and geo-blocking

More and more countries require age checks not only for models but for viewers too: in the US, state age-verification laws for adult sites were upheld by the Supreme Court (Free Speech Coalition v. Paxton, June 2025), and in the UK the Online Safety Act has required "highly effective age assurance" since 25 July 2025.

• visitor age verification can be added as a built-in feature or through an external provider such as Yoti;
• geo-blocking: the operator closes the site to specific countries, and a model hides her profile in selected countries, regions or cities.

Personal data and GDPR

• all customer, model and partner data belongs to the operator;
• with the Enterprise option the platform runs on your own servers — the data never leaves your infrastructure;
• models' consent to the processing of personal and biometric data is recorded during verification.

Infrastructure security

• all traffic is encrypted, and WebRTC video streams are only ever transmitted encrypted;
• access to admin panels is role-based;
• the sites' web traffic runs through Cloudflare.