Privacy at Spice It Up

Last updated: 15 October 2026. This policy covers the Spice It Up web app at https://sinukodukas.ee/spiceitup/. Short version: we keep only what the game needs, never sell anything, and you can delete it all.

Who is responsible

Datebox UÜ, Estonia. Contact: dateboxxx@gmail.com

What we store

Why we store it

We do not sell your data, show ads, or use it for anything else.

How we use Google user data

When you choose "Continue with Google", Google shares with us only your basic profile: your Google account ID, your name and your email address (the openid, profile and email permissions). We do not get your password, contacts, files or anything else from your Google account.

We do not sell Google user data, do not use it for advertising, and do not share or transfer it to anyone, except where the law requires it. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Sharing to the inspiration library

Your cards are private. Nothing you write is shared unless you switch sharing on, and even then only the words of a card that came true, never your names or your partner. We read every shared card before other players can see it, and players can report an idea. You can switch sharing off at any time in Settings. Ideas you share may be used by other players in their own games and may be printed in future Spice It Up editions, credited to your username. If you delete your account, your shared ideas are deleted too.

Payments

Payments for the printed deck are processed by Stripe, under Stripe's privacy policy. Stripe tells us whether the payment succeeded and gives us the delivery details you entered; card numbers stay with Stripe.

Where it is kept

On this website's server in the EU. Sign-in is handled by Google, under Google's privacy policy.

How long we keep it

Your account is kept until you delete it. You can delete it at any time in Settings → Your account → Delete my account; this removes your Google ID, name, email and username from our server immediately. A game is kept until one of you deletes it in Settings. Games that nobody opens for two years may be deleted.

How we protect it

The site is served only over an encrypted connection (HTTPS). Game and account files are stored outside public access on the server, sign-in sessions are stored only as one-way hashes, and only the app owner can see player email addresses.

Your rights

You can see, correct, export or delete your data. Deleting your game in Settings removes it from the server for both players. To delete your account or ask anything, write to dateboxxx@gmail.com. You can also complain to the Estonian Data Protection Inspectorate (aki.ee).

Changes

If this policy changes, we update the date at the top of this page. Significant changes will also be shown in the app.

Age

Spice It Up is for adults. Both players confirm they are 18 or older.

← Back to Spice It Up