Privacy Policy

This is a template set of the privacy policy. This will not be the final policy.

This policy explains what the site collects, why, and who else sees it.

The short version: we collect what is needed to run a roleplay site and nothing else. There are no analytics, no advertising, and no trackers. We do not sell anything about you, and we do not use your content to train machine learning models.

Who is responsible

<!-- Fill in: the person or company operating the site, and a contact address. -->

[Controller name] operates this site and decides how your data is handled. Contact: [contact email].

What is collected

When you register: your display name, email address, password (stored hashed, never in readable form), and date of birth. Date of birth is collected to confirm you are 18 or over, which is a legal requirement for an adult site. Only your age eligibility is used; the date itself is not shown to anyone but you and staff.

When you use the site: the characters you create, your profiles, roleplay ads, room messages, direct messages, friendships, blocks, favourites, saved searches, and your settings.

Automatically: the time you were last active, which is what drives the online/away/offline indicator. Your IP address is processed to rate-limit sign-ups and log-ins and to keep the site available, and appears in server logs.

If you buy something: a record of what you bought, the amount, and identifiers from Stripe. Card details never reach this site — Stripe collects and holds those.

Images: the site stores the link to an image, never the image itself.

Why, and on what basis

If you are in the UK or EU, the lawful bases are:

What	Why	Basis
Account, characters, messages	To provide the site you signed up for	Contract
Date of birth	To confirm you are 18+	Legal obligation
Rate limiting, captcha, moderation records	To keep the site secure and usable	Legitimate interests
Purchase records	To take payment and handle refunds	Contract, and legal obligation for tax records
Service emails	Password resets, account notices	Contract

Who else sees your data

• Other members see what you post: characters, messages, ads, and presence. Direct messages are visible to the person you send them to. Your account name and email are never shown to other members: characters are pseudonymous by design, and only you and staff can see who plays a character.
• Staff can see account details, content, and moderation records where needed to run the site. Admin actions are logged.
• Stripe processes payments. Their privacy policy governs what they hold.
• Cloudflare provides the sign-up captcha, when enabled. It sees your IP address and browser when the registration page loads.
• Discord receives a staff notification when you request a refund, containing your display name, account number, and the amount. Your email address is not sent.
• Image hosts you link to see the IP address of everyone who views your images. That is a consequence of linking rather than hosting, and it is why links are restricted to an allowed list.
• Bunny Fonts serves the site's typeface. It is used specifically because it does not log or track visitors.
• Our email provider handles outgoing mail such as password resets.

We do not sell your data, share it for advertising, or hand it to anyone else except where the law requires it.

Cookies and local storage

• A session cookie, so you stay logged in. Strictly necessary; the site cannot work without it.
• Local storage in your browser remembers your light/dark preference and your chat window layout. This never leaves your device.

There are no analytics cookies and no advertising cookies, which is why there is no cookie banner.

How long things are kept

• Your account and content stay until you delete them.
• Rooms are removed automatically after sitting empty for a grace period, unless made permanent.
• Roleplay ads stop being listed after 30 days without activity.
• Moderation records (reports, suspensions, appeals, admin audit log) are kept after the fact, because their purpose is a history.
• Purchase records are kept as long as tax and accounting law requires.
• Performance samples used by staff to watch response times are kept for 15 minutes and contain no personal data.

Deleting your account

You can delete your account at any time from your profile settings. This removes your characters and their images, your direct messages, friendships, room memberships, and saved searches.

Two honest limits:

1. Messages you sent to other people remain visible to them. A conversation belongs to both sides, and we cannot unsend something someone has already read.
2. Some records survive deletion where we are required to keep them, such as purchase records for tax, and moderation records where an account was removed for serious breaches.

Your rights

If you are in the UK or EU you have the right to access your data, correct it, delete it, restrict or object to processing, and receive a portable copy. The site has a data export feature in your profile settings for the last of those.

To exercise any of these, contact us at the address above. You also have the right to complain to your data protection regulator — in the UK, the Information Commissioner's Office.

Security

Passwords are hashed. The site is served over HTTPS. Access to the database and server is limited to the operator.

This is a small, independently run site rather than a company with a security team. We take it seriously, but no service can promise perfect security, and you should not post anything here that would seriously harm you if it leaked.

Children

This site is for adults. We do not knowingly hold data about anyone under 18. If you believe a minor has an account, report it immediately and it will be removed.

Changes

Material changes to this policy will be announced on the site before they take effect. The date below shows when it was last revised.