Privacy Policy

Draft requiring attorney review before public launch. Version 2026-10-23.1.

Information we use

We store account email, username, display name, password hash, age self-attestation, policy acceptance/version timestamps, session and security-token records. Passwords use salted scrypt; opaque session/action tokens are stored hashed with expiry. We also store linked couple identities, invitations, blocks, preferences, game participants/turns, captions, private messages, notifications, profile images and outfit/game photos or videos. Upload acknowledgments and cryptographic fingerprints support safety actions. Reports include contact details, references, statements, decisions and audit metadata. Rate limits use hashed identifiers derived from account/contact or request network information.

Visibility and access

Your email is not a player identifier and is not shown to other players. Authorized account administrators may access it for account management. Usernames and chosen display names are visible to permitted members, not automatically published to the internet. Discover starts hidden and requires opt-in; couple publication requires both partners. Games and game media use their original participant snapshots, including both members of a team. Outfit sharing follows owner consent and game participation. Personal hiding affects your view only; it does not erase the other participant's copy or access.

There is no general administrator browse of private games, media or conversations. Authorized staff can review exact reported evidence through scoped, audited access. Technical operators necessarily administer infrastructure; lawful requests may require controlled access or preservation. We do not promise that recipient copies or screenshots can be recalled.

Storage and protection

Local development uses private filesystem storage, PostgreSQL and Mailpit. The prepared production configuration uses AWS Lightsail/PostgreSQL, private S3 media and encrypted database backups, and Amazon SES transactional email in Oregon. Those production integrations still require deployment and acceptance testing; this policy does not claim they are live. Zoho handles the configured support/admin mailbox service where applicable. Authorized service providers process information needed for these purposes. Media has no permanent public URL; application authorization is checked on reads. Access controls, hashing, TLS where configured and encryption reduce risk but do not guarantee security.

Retention, deletion and preservation

Free game media normally has 30-day retention and Premium game media 90 days, based on the uploading side's entitlement at submission. Queued video originals have separate bounded cleanup. Outfit/profile pictures do not inherit game retention and remain until replaced, removed or otherwise revoked. Users can delete their own uploads and hide/restore media in their own view. Authorized moderation can revoke access independently of uploader ownership within staff permissions. Storage failures remain pending and are retried; access revocation can precede physical deletion. Backups, storage versions and recipient copies have separate retention. A documented legal hold may delay physical deletion while player access stays revoked.

Account removal currently anonymizes the account while preserving identifiers/history and required audit links; it is not a complete erasure or export workflow. Contact support@turntease.com for closure, access, correction, erasure or other privacy-right requests. We must assess applicable rights, identity, lawful retention and provider/backup limitations. Do not include passwords or intimate media in support requests.

Communications and choices

Verification, password recovery, setup and invitation messages use transactional email; delivery may require retries. In-app notifications follow existing preferences. Email sending does not verify an account automatically. The app uses a necessary session cookie; no advertising/analytics service is added by this release. You control profile visibility, supported messaging/invitation preferences and blocks. Reports are private to authorized handling staff; internal references provide no public case lookup.

Contact and changes

Follow the Content Removal Policy and email support@turntease.com for safety concerns. Contact support@turntease.com for privacy matters. Operator identity/address, international transfers, applicable jurisdiction-specific disclosures, retention schedules and rights procedures require approval before public launch. Updated policies require new recorded acceptance for applicable features.