Privacy Policy

Who we are

Spicy Date Night ("we", "us") operates the website and app at spicydatenight.com. This Privacy Policy explains what we collect, why, how long we keep it, and the rights you have. We are the data controller for the information described here. Contact us at privacy@spicydatenight.com.

Who can use the Service

The Service is for adults 18+ only. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it immediately.

What we collect

• Account data: email address and authentication tokens needed to sign you in.
• Profile data you choose to enter: stage name and emoji, preferences, limits, and spice level. None of this is required.
• Gameplay data: sessions, prompts rated, answers, memory cards you save, and submitted prompts (associated with your account so you can manage them).
• Payment data: billing is handled by Stripe; we receive only confirmation that a payment succeeded and the access window it unlocks. We do not store card details.
• Reports & feedback: when you submit a report or feedback, we store what you wrote so we can act on it.
• Technical data: minimal request logs (timestamp, coarse user-agent) used to operate and secure the Service.
• Device-local memory: session state (active players, current night, age-gate acknowledgement) lives in your browser's local storage and never leaves your device unless you choose to sync it.

Why we use it (legal bases)

• Provide the Service (contract): authentication, gameplay, saving your profile and progress.
• Keep it safe (legitimate interests): fraud prevention, abuse detection, security, moderation.
• Improve the Service (legitimate interests): aggregate, non-identifying counts of how features are used.
• Legal obligations: respond to lawful requests; report illegal content to authorities where required.
• Consent: where required (e.g. certain cookies), we ask first and you can withdraw at any time.

What we do NOT do

• We do not sell your personal information. Ever.
• We do not share your prompts, photos, memories, or chat with third parties for marketing.
• We do not run third-party advertising trackers.
• We do not require real names — use any stage name you like inside the app.
• We do not use your data to train third-party AI models.

Service providers (processors)

To run the Service we rely on a small number of vetted processors, each bound by data-processing terms:

• Supabase — database, authentication, storage.
• Stripe — payment processing (subject to Stripe's privacy policy).
• Cloudflare — hosting, CDN, basic security.
• AI gateway — generation of optional in-game prompts; inputs and outputs are not used to train third-party models.

Data may be processed in the United States and other jurisdictions. Where applicable we rely on Standard Contractual Clauses or equivalent safeguards.

Cookies & local storage

We use first-party cookies and browser storage strictly to keep you signed in, remember your active players and spice level, and store your age-gate acknowledgement. We do not use advertising cookies. You can clear this data at any time from your browser settings; clearing it will sign you out and reset the age gate.

Retention

• Account & profile: kept while your account exists; deleted on request.
• Gameplay records: kept up to 24 months, then deleted or aggregated.
• Payment confirmations: kept as required by tax and accounting law (typically up to 7 years).
• Reports & moderation logs: kept as needed to investigate and prevent repeat abuse.

Your rights

Depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA, similar US state laws) you may have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate data.
• Delete your account and associated data (see "Delete account" on your Profile screen, or email us).
• Receive a portable copy of your data.
• Object to or restrict certain processing, and withdraw consent where processing relies on consent.
• Lodge a complaint with your local data-protection authority.

To exercise any right, email privacy@spicydatenight.com. We will respond within 30 days.

Security

We use encryption in transit (HTTPS), row-level security on user data, scoped service credentials, and the principle of least privilege. No system is perfectly secure; if you believe an incident has occurred please contact us immediately.

Changes

We may update this Policy. Material changes will be flagged by updating the date above and, where appropriate, by an in-app notice. Continued use after an update means you accept the new version.

Contact

Privacy / data requests: privacy@spicydatenight.com
Safety / abuse: safety@spicydatenight.com
DMCA / copyright: dmca@spicydatenight.com
Anything else: hello@spicydatenight.com