YOUR SECRETS DESERVE RESPECT
Privacy notice.
Draft notice for development and private testing. Before a public release, the business operator must supply legal identity, contact details, retention periods, and region-specific notices, and obtain appropriate review.
Information the platform handles
Party names and themes, host display names, anonymous participant masks, submitted question responses, optionally disclosed display names, host access tokens stored as hashes, timestamped basic engagement events, submitted abuse reports, and payment references. Raw payment card information is collected by payment providers, not by this website.
How we use it
To operate invitation links, display masked responses to authorized hosts, manage moderation, provide purchased story access, detect abuse, and operate the service. Anonymous to a host is not the same as untraceable to the infrastructure provider. The service may process request IP addresses transiently for security and rate limits, but stores only salted/hardened rate-limit identifiers in its rate-limit database.
Sharing and access
Approved messages appear to the party owner. A supplied display name is made confirmable only when the sender opts in and the host guesses it correctly. Other service providers may process hosting, database, security, AI generation when enabled, and payments. We do not sell the identity of anonymous participants.
Retention and deletion
Party invitations are configured to expire after 45 days; actual record deletion requires the scheduled cleanup procedure described in GUIDE.md. Payment and audit records may require longer legally justified retention. Public deployment requires a documented deletion schedule and an operational contact route.
Cookies and analytics
Essential secure host-session and administrator cookies provide access control. Basic first-party event counters do not require third-party tracking pixels. Any advertising, profiling, or third-party analytics must be separately evaluated and appropriately disclosed before being enabled.
Contact and user rights
Before live publication, replace this draft with the operator’s actual contact information, request process for deletion/access, and applicable legal disclosures. Do not launch advertising or collect sensitive personal data while this is incomplete.