Back to hub

Privacy Policy

Last updated July 2026

Who we are

Spicy Date Night ("we", "us") operates the website and app at spicydatenight.com. This Privacy Policy explains what we collect, why, how long we keep it, and the rights you have. We are the data controller for the information described here. Contact us at privacy@spicydatenight.com.

Who can use the Service

The Service is for adults 18+ only. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it immediately.

What we collect

  • Account & authentication data: your email address, the sign-in method you used (email or Google), authentication tokens/session cookies, and account timestamps. Managed by our authentication provider.
  • Age & consent record: the date and time you confirmed you are 18+ and accepted these policies, plus the version you accepted — kept as proof of the adults-only gate.
  • Profile & player data you choose to enter: stage name and emoji, gender, body type and body-confidence, relationship dynamic/duration, love language, couple nickname, interests, intimate descriptors, spice level, hard limits, and an optional avatar image. All optional beyond stage name, gender, and spice level, and used only to filter and personalise prompts.
  • Gameplay data: game sessions, rooms you host or join (including the room code and player list), prompts shown and used, answers and scores, prompt interactions (skip/like/duration), leaderboard entries, and saved memory cards.
  • User-submitted content: prompts, dares, and captions you submit, with your chosen author name, moderation status, and upvote count. Submissions are stored for human review and are not shown to other players until a moderator approves them.
  • Payment & purchase data: card details are collected and stored solely by Stripe — we never see or store them. We keep a purchase record: checkout session and payment-intent identifiers, Stripe customer id, the email used at checkout, amount and currency, plan purchased, live/test environment, and the access-expiry window it unlocked.
  • Referral data: your referral code, and — when an invite converts — a record linking referrer, referred user, the purchase, and bonus hours credited.
  • Email logs & delivery data: for every message we send (sign-in links, receipts, pass-expiry and win-back emails) we log the template, recipient email, provider message id, delivery status, and any error, plus unsubscribe tokens and a suppression list of addresses that bounced or opted out. We use these to debug delivery and to honour opt-outs.
  • Reports & feedback: what you wrote in a report or feedback form, the game it relates to, any rating, and the account that sent it, so we can moderate and follow up.
  • Product analytics: first-party, account-linked events — pages/screens viewed and time on screen, funnel events (viewed the pay page, started checkout, completed purchase, pass expired), and error reports. Used in aggregate to fix drop-off and bugs; we do not sell it or use third-party ad trackers.
  • Technical data: minimal request and error logs generated by our hosting and database providers (timestamp, coarse user-agent, IP address as processed for security and abuse prevention).
  • Device-local storage: session state — active players, current night, spice selection, age-gate acknowledgement, and referral code from an invite link — stored in your browser and not transmitted except where needed to run the features above.

Why we use it (legal bases)

  • Provide the Service (contract): authentication, gameplay, saving your profile and progress.
  • Keep it safe (legitimate interests): fraud prevention, abuse detection, security, moderation.
  • Improve the Service (legitimate interests): aggregate, non-identifying counts of how features are used.
  • Legal obligations: respond to lawful requests; report illegal content to authorities where required.
  • Consent: where required (e.g. certain cookies), we ask first and you can withdraw at any time.

What we do NOT do

  • We do not sell your personal information. Ever.
  • We do not share your prompts, photos, memories, or chat with third parties for marketing.
  • We do not run third-party advertising trackers.
  • We do not require real names — use any stage name you like inside the app.
  • We do not use your data to train third-party AI models.

Service providers (processors)

To run the Service we rely on a small number of vetted processors, each bound by data-processing terms:

  • Lovable Cloud — hosted database, authentication, file storage, and transactional email delivery.
  • Stripe — payment processing (subject to Stripe's privacy policy).
  • Cloudflare — hosting, CDN, basic security.
  • AI gateway — generation of optional in-game prompts; inputs and outputs are not used to train third-party models.

Data may be processed in the United States and other jurisdictions. Where applicable we rely on Standard Contractual Clauses or equivalent safeguards.

Cookies & local storage

We use first-party cookies and browser storage strictly to keep you signed in, remember your active players and spice level, and store your age-gate acknowledgement. We do not use advertising cookies. You can clear this data at any time from your browser settings; clearing it will sign you out and reset the age gate.

Retention

  • Account & profile: kept while your account exists; deleted on request.
  • Gameplay records: kept up to 24 months, then deleted or aggregated.
  • Payment confirmations: kept as required by tax and accounting law (typically up to 7 years).
  • Reports & moderation logs: kept as needed to investigate and prevent repeat abuse.
  • Email delivery logs, unsubscribe tokens, and suppression entries: kept up to 24 months so we can debug delivery and honour opt-outs.
  • Analytics & funnel events: kept up to 24 months, then deleted or aggregated.
  • Age/consent confirmation timestamp: kept while your account exists as proof of the 18+ gate.

Your rights

Depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA, similar US state laws) you may have the right to:

  • Access the personal information we hold about you.
  • Correct or update inaccurate data.
  • Delete your account and associated data (see "Delete account" on your Profile screen, or email us).
  • Receive a portable copy of your data.
  • Object to or restrict certain processing, and withdraw consent where processing relies on consent.
  • Lodge a complaint with your local data-protection authority.

To exercise any right, email privacy@spicydatenight.com. We will respond within 30 days.

Security

We use encryption in transit (HTTPS), row-level security on user data, scoped service credentials, and the principle of least privilege. No system is perfectly secure; if you believe an incident has occurred please contact us immediately.

Changes

We may update this Policy. Material changes will be flagged by updating the date above and, where appropriate, by an in-app notice. Continued use after an update means you accept the new version.

Contact

Privacy / data requests: privacy@spicydatenight.com
Safety / abuse: safety@spicydatenight.com
DMCA / copyright: dmca@spicydatenight.com
Anything else: support@spicydatenight.com