Features in plain language

Can Sosta do what you need — and is it legally sound?

The complete catalogue: what Sosta can do for establishments, talents and visitors — every answer explained briefly and, if you want, in depth, with the legal basis behind it.

01

Directory & visibility

Who appears where — and who decides? In short: the person herself.

Who decides whether a profile is publicly visible?

Always the talent herself. Visibility is configurable per surface — house website, showcase, directory — and revocable at any time. Revoked means: hidden immediately.

In depth + legal basis

Sosta treats visibility as a question of consent, not a default setting. A profile appears nowhere in public before the talent has released it for exactly that surface. Releases are controlled separately: if you want to appear on the house website but not in the directory, that is exactly what you set.

Every release is revocable — no notice period, no justification. Revocation takes effect immediately on the public surfaces, and the consent history remains visible to the talent.

Legal basis

  • Art. 7 GDPR — conditions for consent; para. 3: withdrawal at any time, as easy as giving consent.
  • Art. 9(2)(a) GDPR — explicit consent as the basis for special categories of data.

Transparency pillar

Can a house put a lady online without asking her?

No. Without the person's consent there is no publication — at Sosta this is enforced architecturally, not just promised. Nor can the house modify the talent's main profile.

In depth + legal basis

The profile belongs to the talent: she maintains content, photos and releases herself. The house presents itself and its rooms — never a person against her will. For the collaboration, the house sees the contract-partner view; it cannot change anything on the main profile there.

The reason is not just respect but data protection law: data concerning a person's sex life is a special category and requires the explicit consent of the person concerned — no third party can give it on her behalf.

Legal basis

  • Art. 9(1) and 9(2)(a) GDPR — prohibition of processing, lifted only by the data subject's own explicit consent.

How does an establishment get into the directory — even without an account?

The directory initially lists establishments as neutral entries with public business data — name, location, category. Owners can claim their entry, correct it or raise objections.

In depth + legal basis

Neutral entries contain only what is public anyway — no profiles, no personal data, no brokering. Once owners claim their house, they manage the entry themselves and can expand it into a full presence.

For corrections and objections there is an open reporting channel that works without an account. Reports are reviewed and answered.

Legal basis

  • Art. 6(1)(f) GDPR — legitimate interest as the basis for public business data.
  • Art. 16 DSA (Regulation (EU) 2022/2065) — easily accessible notice-and-action mechanism.

Claim your listingReport content

02

No brokering

Sosta is advertising and management software — not a broker. This separation is the foundation of the platform.

Does Sosta broker sexual services?

No. Sosta is an advertising and directory platform plus management software. Contact and appointment arrangements run directly between the parties — Sosta hosts forms and profiles, but concludes nothing and refers no one.

In depth + legal basis

The law defines prostitution brokering as the brokering of at least one other person for the provision of sexual services — anyone doing that commercially needs a licence of their own. In our assessment, Sosta brokers no one: we provide self-presentation (advertising is legal), a directory overview and management tools. Whom someone contacts is their own decision; what comes of it, the parties negotiate directly.

That is why there is deliberately no booking through Sosta, no matching and no recommendation of individual persons — the platform remains a neutral presentation layer.

Legal basis

  • § 2 para. 7 ProstSchG (German Prostitute Protection Act) — legal definition of prostitution brokering (brokering persons for the provision of sexual services).
  • § 2 para. 3 no. 4, § 12 para. 1 ProstSchG — licensing requirement for prostitution businesses including brokering; in our assessment, Sosta's software and advertising activity does not meet this definition.

Does Sosta take a cut of bookings or revenue?

No — never. Sosta is financed through flat subscriptions decoupled from income. There is no commission, no percentage share, no per-appointment fee. Exactly this structure keeps the operation clean for everyone involved.

In depth + legal basis

The criminal provision on pimping requires exploitation or a controlling determination of the place, time and extent of the work. Sosta is built to keep maximum distance from both: there is no payment flow between customer and platform, no revenue reporting, no commission-capable data model — and no structure through which anyone could direct anyone's work.

A flat software subscription — regardless of how much or how little someone works — means: no profiting from the individual deal. Houses and talents keep their economic independence entirely.

Legal basis

  • § 181a StGB (German Criminal Code) — pimping requires exploitation or controlling supervision/determination of how prostitution is carried out; Sosta's flat, income-decoupled subscriptions without any direction structure deliberately keep maximum distance from that.

Can you buy reach or a better ranking?

No. There is no purchasable ranking, no algorithmic matching and no “editor's pick”. Sorting signals such as freshness apply equally to everyone — and the trust level is categorically not for sale.

In depth + legal basis

A directory stays neutral only if its order is not for sale. Sosta sorts by neutral signals that are the same for everyone — for example whether a profile is actively maintained and reachable. No profile is pushed forward for money, none is algorithmically “recommended”.

The trust level grows exclusively from authenticity signals such as phone verification — never from a subscription. At Sosta, trust can be earned, but not bought.

03

Presence, tours & planner

Who decides when a talent is present?

The talent herself. In houses with a fixed weekly rota, the house can propose slots — but nothing is published until the talent has confirmed.

In depth + legal basis

Sosta knows both operating mentalities of the industry: houses with spontaneous presence, where everyone enters herself when she is there — and appointment-based houses with opening hours and a weekly rota. The confirmation principle applies there too: the house plans in consultation and makes proposals, the talent confirms, and only then does it become publicly visible.

There are no instructions through the platform. Sosta transports proposals and confirmations — it assigns nothing to anyone.

What do customers see of the presence?

Only the released presence: “here today”, weekly preview, planned periods. Private planning, raw data or internal calendars are never public.

In depth + legal basis

What appears publicly is a curated view: which talents are at a house today or in the coming days, provided the person in question has released it. The planning behind it — arrangements, requests, internal calendars — stays internal.

Visitors get a reliable answer to the only question they have (“who is here when?”), without anyone having to reveal more than they want.

How do tours work for travelling talents?

Travelling talents plan their stops city by city and show their future availability. Publicly it is always just the city or region — never a private accommodation, never an address without a house connection.

In depth + legal basis

The tour planner is a self-management tool: the talent enters her stops and controls what becomes visible. Visitors see “in Munich from the 12th” — nothing more. Whoever works independently in a city is shown with the city only; exact whereabouts remain private as a matter of principle.

That is a deliberate protective decision: reach yes, findability of the private accommodation no.

04

Shifts & rooms

Between house and talent, Sosta organises logistics — rooms, periods, arrangements. Nothing more.

What does Sosta organise between house and talent?

The workplace logistics: room requests, occupancy, periods, calendars — everything that otherwise drowns in Excel lists and WhatsApp threads. Terms are settled directly between house and talent.

In depth + legal basis

The relationship between house and talent is modelled at Sosta as a rental arrangement: the house offers rooms and infrastructure, the talent requests or confirms. Sosta keeps this process tidy — who has which room when, what was discussed, what is confirmed.

Sosta does not get involved in the business terms: no price-setting, no contract drafting, no insight into payments between the parties.

Does Sosta assign shifts or tasks to the ladies?

No. The application-and-confirmation principle applies: the talent requests or confirms a proposal, the house decides about its rooms. There are no automatic assignments or instructions.

In depth + legal basis

Sosta is deliberately built so that the platform directs no one's work: no auto-assign, no mandatory slots, no task distribution. Every agreement arises from two active decisions — one on each side.

This architecture protects both: the talent stays self-determined, and the house stays in the role of a neutral provider of rooms, without a direction structure even being able to arise.

Legal basis

  • § 181a StGB — the provision covers controlling supervision and determination of place, time or extent; Sosta's confirmation principle rules such a structure out technically.

Does Sosta replace contracts between house and talent?

No. Sosta is an overview and documentation tool. Rental or usage agreements are concluded directly between house and talent — Sosta only helps to keep track.

In depth + legal basis

What Sosta contributes: a clean, traceable history of the arrangements — requests, confirmations, periods. What Sosta does not do: generate contracts, set terms or stand between the two as a party.

05

Setcard & photos

Who owns the setcard and photos?

The talent. She maintains her profile herself, releases photos and can revoke any release. The house sees the contract-partner view — it cannot modify the main profile.

In depth + legal basis

The setcard is the property of the person it shows — like a CV. When a talent links up with a house, the house sees the information needed for the collaboration; control over content, photos and visibility stays with her. She can also dissolve the link itself at any time.

Legal basis

  • Art. 9(2)(a) GDPR — consent of the data subject, not of the house.

How does Sosta protect photos from misuse?

With photo protection that applies per image and is active by default: no easy grabbing, no hotlinking. The original is never shown publicly — only a protected copy.

In depth + legal basis

Originals stay in protected storage; what is delivered is a public copy with technical hurdles against mass download and third-party embedding. The protection also applies in the house's contract-partner view.

Photos are never stored in the database but separately in object storage in the EU — which also makes complete deletion reliable.

What may be shown publicly?

Publicly, Sosta stays at a suggestive level compatible with youth protection — explicit material is not publicly accessible. Only what the person herself has uploaded and confirmed is released.

In depth + legal basis

This content line is deliberately more conservative than what would be legally possible with closed user groups: no pornographic material on the open web — which keeps the platform unassailable and advertisable for everyone involved.

In addition: no scraped images, no third-party uploads, and every piece of content goes through a review before publication — including against the industry's statutory advertising limits. What is visible was set up and released by the person shown herself.

Legal basis

  • § 4 para. 2 JMStV (German State Treaty on the Protection of Minors in the Media) — pornography in telemedia only within closed user groups; publicly, Sosta deliberately stays below that.
  • § 5 JMStV — offers capable of impairing the development of children and adolescents require protective measures.
  • § 32 para. 3 ProstSchG — statutory advertising bans (among others, no advertising of unprotected or youth-impairing offers); Sosta's content review implements exactly these limits.
06

Verification & authenticity

How does Sosta make sure profiles are real?

Through authenticity signals instead of claims: phone verification via one-time code, a verified badge and a trust level that grows only from such signals. Fake profiles are structurally at a disadvantage.

In depth + legal basis

Every talent can confirm her phone number via SMS code — the badge shows visitors: here, a real person with a reachable number has verified her profile. Further signals feed into a trust level that grows exclusively from authenticity, never from payment.

It is also a question of fairness towards everyone advertising honestly: misleading profiles distort competition — real verification protects against that. And it obliges us too: the badge appears only after an actually passed check, because a promise of authenticity has to be true itself first.

Legal basis

  • § 5 UWG (German Act against Unfair Competition) — protection against misleading commercial practices; authenticity verification counters exactly this kind of deception.

Can verification, badges or trust be bought?

No. Trust signals are categorically not for sale — no subscription, no package and no surcharge changes anything about the badge or trust level. At Sosta, trust arises only from verifiable signals.

In depth + legal basis

This separation is strict: paid features concern tools and equipment, never credibility. A directory in which trust markers could be bought would be worthless to visitors — and unfair to everyone who earned their signals honestly.

What happens on suspected fakes or identity misuse?

Every page has a reporting channel that works without an account. Reports are reviewed, answered and, if confirmed, lead to removal — even if the person concerned has no Sosta account at all.

In depth + legal basis

Anyone who considers a profile, a photo or an entry unlawful or abusive reports it directly via the report link. The procedure follows the European platform rules: receipt is confirmed, the report is reviewed, the decision is communicated.

Especially important for victims of identity misuse: the takedown path requires no account. No one has to register in order to be removed from a platform they never wanted to be on.

Legal basis

  • Art. 16 DSA (Regulation (EU) 2022/2065) — notice-and-action mechanism for hosting services: easily accessible, also electronically, with confirmation of receipt and a reasoned decision.

Report content

07

Privacy & Art. 9

Profile data in this industry is the most sensitive thing a platform can manage. Sosta treats it that way.

Why does Sosta treat profile data as “special categories”?

Because that is what it is: data concerning a person's sex life is under the special protection of the GDPR. It may be processed only with explicit consent that can be withdrawn at any time — and that is exactly how Sosta is built.

In depth + legal basis

Setcard data can contain information about a person's sex life and health, and photos that could be used biometrically. For such data, processing is prohibited in principle, with narrow exceptions — the most important being the explicit consent of the person concerned.

That is why, for every consent, Sosta stores when it was given and what it refers to; the history is visible to the person, and withdrawal is possible at any time and as easy as giving consent.

Legal basis

  • Art. 9(1) GDPR — prohibition of processing special categories (including sex life, health, biometric data).
  • Art. 9(2)(a) GDPR — exception for explicit consent.
  • Art. 7(3) GDPR — withdrawal at any time.

What really happens on deletion?

A true hard delete: profile data from the database, photos from storage, the audit log is anonymised — and backups rotate out in under 30 days. At Sosta, gone means gone.

In depth + legal basis

Many platforms “delete” by hiding. Sosta deletes: every reference to the person is removed from all systems, including the separate photo storage. The audit log keeps only the anonymised fact that an action took place — with no way back to the person.

So that backup copies cannot undermine the right to be forgotten either, backups are designed for short rotation: after 30 days at the latest, a deleted record is gone there too. Only where the law requires retention — for example invoice data — exactly that is kept; setcard content is not affected.

Legal basis

  • Art. 17(1)(b) GDPR — obligation to erase, in particular after consent is withdrawn; exceptions only as provided in para. 3 (e.g. legal obligations).
  • Art. 7(3) GDPR — withdrawing consent is the direct lever: at any time, as easy as giving it.

Transparency pillar

Is removal possible without an account?

Yes. Anyone who appears on Sosta through no action of their own — for example through identity misuse — can demand removal via the open reporting channel, with no registration at all. The case is reviewed and answered.

In depth + legal basis

The reporting channel is reachable from every page and requires no account. If the objection is confirmed, the content is removed; the reporting person receives a reasoned response. This combines the data subject's rights under data protection law with the platform notice procedure.

Legal basis

  • Art. 17 GDPR — right to erasure.
  • Art. 21 GDPR — right to object to processing based on legitimate interest (e.g. neutral directory entries).
  • Art. 16 DSA — notice-and-action mechanism; it is open to “any individual or entity”, a user account is not a prerequisite.

Report content

Where is the data stored — and who can access it?

Database, photo storage and backups are located in the EU. All service providers are disclosed, and authorities receive data exclusively on a written legal basis — nothing without an order.

In depth + legal basis

The core infrastructure is hosted in Europe, photos are stored separately from the database, backups are encrypted. The complete list of subprocessors — including the few services with a US connection and their safeguards via standard contractual clauses — is publicly available.

For authority requests, the line is clear: disclosure only on a written legal basis. Requests without an order are not served.

SubprocessorsTransparency pillar

08

Youth protection & 18+

How does Sosta keep minors away from the content?

In two ways: an 18+ confirmation stands before the directory content, and publicly Sosta stays strictly at a suggestive, non-explicit level. Pornographic material simply does not exist in the open area.

In depth + legal basis

German youth media protection distinguishes between impermissible offers — pornography does not belong on the open web at all, only in closed user groups — and development-impairing offers, from which children and adolescents must be protected. Sosta acts on both levels: there is no explicit material publicly (which removes the closed-user-group requirement), and the age confirmation before the directory content is the protective measure for everything that could impair adolescents.

Legal basis

  • § 4 para. 2 JMStV — pornography in telemedia only in closed user groups; Sosta's public content stays below this threshold.
  • § 5 JMStV — duty to take protective measures for development-impairing offers (access hurdles, age labelling or broadcast-time limits); the 18+ hurdle before the directory is Sosta's measure here.

Are all advertising persons of legal age?

Being of legal age is a requirement for every talent profile. Authenticity signals such as phone verification and the platform's review processes additionally secure this.

In depth + legal basis

A profile can only be created by someone who confirms legal age; the platform's verification and review mechanisms — from the phone code to the content review before publication — make circumvention unattractive. Reports of doubtful cases are reviewed with priority.

Where exactly does Sosta's content line run?

“Suggestive yes, explicit no” — publicly, Sosta shows aesthetic, suggestive presentation, but no pornographic depiction. This line deliberately sits below what would be legally possible with access systems.

In depth + legal basis

The line is a product decision with a double benefit: visitors get a curated, reputable directory instead of sensory overload — and everyone involved stays on the safe side of youth media protection, without having to operate closed user groups.

09

Contact & communication

How does contact between customer and talent work?

Directly — via the channels the talent releases herself: for example WhatsApp, Telegram or phone, each channel individually opt-in. Alternatively via the house. There is no Sosta chat in between, and Sosta does not see the contact.

In depth + legal basis

Every talent decides for herself which contact channels appear publicly on her profile — and whether any do at all. If she releases no channels of her own, requests run via the house. Sosta displays the buttons, nothing more: no reading along, no logging, no brokering.

Communication stays where it belongs — between the parties — and the platform remains a neutral presentation layer.

Is there a chat between house and talent?

Yes — for organisation: room arrangements, dates, arrival. It is deliberately “accountable-private”: both sides know what applies and who can read along. It is not a customer channel.

In depth + legal basis

The roster chat replaces the scattered WhatsApp threads between house team and talents with a traceable channel in the right place — directly at the collaboration. The ground rules are transparently labelled, nothing happens covertly.

Customers have no access to this channel; customer communication runs exclusively via the channels the talent has released, or via the house.

Does a talent have to show her real phone number?

No. For public contacts there is the protective-number option, and Sosta automatically removes contact details from free text. No one has to disclose her private number to be reachable.

In depth + legal basis

Phone verification serves authenticity — the verified number does not become public through it. What appears on the profile is the talent's choice: a protective number, a messenger channel or no direct contact at all.

In addition, Sosta automatically filters free text for phone numbers, email addresses and social handles — so the platform cannot become a circumvention or stalking channel.

10

Pricing & billing

What does Sosta cost — and how is it billed?

Houses pay a flat monthly subscription by package size; talents can start for free. Billing runs via prepaid credit by invoice and bank transfer — no credit card required. All amounts are on the pricing page.

In depth + legal basis

The pricing model is deliberately simple and decoupled from income: a fixed amount per month, regardless of occupancy or revenue. No commission, no per-booking fee, no percentages — that is not just fair, it is part of the legal architecture.

Payment is by invoice via bank transfer into a prepaid balance, from which the monthly amounts are deducted. No Stripe, no credit-card requirement, no subscription trap with a payment provider.

Legal basis

  • § 181a StGB — the flat-subscription structure without any revenue share deliberately keeps its distance from any “profiting from the individual deal”.

Pricing & packages

What is free for talents?

Your own profile, self-management and control over visibility and consents — the core is and stays free. Talent+ adds optional extras around profile and planning.

In depth + legal basis

The platform's basic rights never depend on money: whoever wants to be visible can be visible; whoever wants to disappear, disappears. Authenticity signals and trust are explicitly not for sale either.

Talent+ is an optional subscription for everyone who wants to get more out of profile and planning — details and terms are transparently on the pricing page.

For TalentsPricing & packages

Are there hidden costs or subscription traps?

No. Prepaid means: only what exists as credit can be deducted — debt cannot arise. Before expiry there are reminders, afterwards a soft landing instead of a lock-out shock.

In depth + legal basis

When a balance runs low, Sosta lets you know in good time. If it is not topped up, the package ends in an orderly way: with a transition period, clear communication and no data loss. Falling back to the free tier is possible at any time — your data remains the property of its owners.

11

Hosted site & custom domain

Does my house get its own website?

Yes — a fully-fledged house website hosted by Sosta with professional design themes, on request under your own domain. Setcards and presence update automatically from the management.

In depth + legal basis

The core benefit: no more WordPress hassle. No plugin zoo, no update anxiety, no web designer for every change. What you maintain in the manager — talents, rooms, times, texts — automatically appears up to date on your website.

If you want to keep your existing domain, you simply connect it to your Sosta site; step-by-step guides for the common providers are in the help section.

For EstablishmentsConnect your own domain

Who owns the website content?

You — the texts, photos and structure of your house remain your property, exportable and without lock-in. Talent content on your site stays under the control of the respective talent.

In depth + legal basis

Sosta separates cleanly: the theme is presentation, the content is property. You can export your house content and take it with you. Your talents' setcards appear on your website only with their release — and disappear from it when a release ends.

Who is legally responsible for the house website?

The house itself — as its own provider with its own imprint and its own legal texts. Sosta is the technical host and gives the site the structure in which the mandatory information has its fixed place.

In depth + legal basis

Every house website carries the house's imprint and privacy policy — just as the law requires of every business-like online offer. Sosta ensures that the mandatory pages are structurally always present and reachable; responsibility for the content lies with the house as operator of its offer. For the Sosta platform itself, our own imprint applies alongside — both obligations exist cleanly side by side.

Legal basis

  • § 5 DDG (Germany's Digital Services Act) — imprint obligation (“general information duties”) of the respective service provider.
12

Where Sosta deliberately draws the line

Some things Sosta deliberately does not build — not out of inability, but as protective architecture. Full transparency on this: data flow, who-may-do-what matrix and subprocessors on the transparency pillar.

Why is there no booking through Sosta?

Because concluding bookings through the platform would make Sosta a broker — and that is exactly what Sosta is not. Appointment arrangements run directly between the parties; Sosta only shows who is reachable where.

In depth + legal basis

The line is one of principle: as soon as a platform concludes bookings, processes payments or allocates appointments, it stands between the parties. Sosta stays in front of that — as a presentation and management layer. That protects the independence of the talents, the neutrality of the houses and the legal clarity of the whole.

Why are there no public reviews?

To protect the people on the platform: no review battles, no public shaming. Feedback exists only anonymised and house-internal — never as a public pillory.

In depth + legal basis

Public customer reviews about persons would, in this industry, be an instrument of exposure — with real consequences for real people. Sosta deliberately forgoes them, even though other platforms offer them. What does exist: anonymised feedback that stays house-internal, with minimum thresholds so that no individual case can be attributed.

Why does Sosta recommend no one?

Because recommending would be steering. No matching, no “profile of the day”, no paid pushing — visitors search and filter themselves, the directory stays neutral.

In depth + legal basis

An algorithm that matches persons as “suitable” or promotes individual profiles would turn the platform from a neutral directory into an active actor. Sosta provides search, filters and up-to-date information — the decisions are made by people.

All red lines on the transparency pillar

Sosta Glass

And how does Sosta live up to all this?

The transparency pillar shows the data flow, the who-may-do-what matrix and all subprocessors — for talents, establishments and customers.

To the transparency pillar
Features & Legal Certainty — Sosta