Privacy at Spice It Up
Last updated: 15 October 2026. This policy covers the Spice It Up web app at https://sinukodukas.ee/spiceitup/. Short version: we keep only what the game needs, never sell anything, and you can delete it all.
Who is responsible
Datebox UÜ, Estonia. Contact: dateboxxx@gmail.com
What we store
- Your account, if you sign in with Google: your Google account ID, name and email address. Your email is never shown to other players.
- Your username: the name you choose. It is the only name other players see, for example on leaderboards.
- Your game: the cards you write, the house rules you agree on, and what happens in the game (hidden, found, fulfilled). A card's wish is shown to your partner only after they unlock that card.
- Orders, if you buy the printed deck: your name, email, phone number and delivery address, the order and its price. We keep them as long as the accounting law requires (7 years in Estonia). Payment is handled by Stripe; we never see your card details.
- Shared ideas, only if you switch sharing on: the words of a card that came true, published under your username after we review it. Phone numbers, email addresses and links are removed first.
- Inspiration use: when a game uses an idea from the inspiration library, we count it for the leaderboards. The count records the idea and an anonymous game code, never what else is in your game.
Why we store it
- To run the game between you and your partner.
- To let you sign in on another phone and keep your game.
- To contact you if you win a monthly reward, and to help if you lose access to your account.
We do not sell your data, show ads, or use it for anything else.
How we use Google user data
When you choose "Continue with Google", Google shares with us only your basic profile: your Google account ID, your name and your email address (the openid, profile and email permissions). We do not get your password, contacts, files or anything else from your Google account.
- We use your Google account ID to recognise you when you sign in again, on any device.
- We use your email address only to contact you about your account, for example if you win a monthly reward, and to help you recover access.
- Your name from Google is kept with your account and is not shown to other players. Other players only see the username you choose.
We do not sell Google user data, do not use it for advertising, and do not share or transfer it to anyone, except where the law requires it. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Sharing to the inspiration library
Your cards are private. Nothing you write is shared unless you switch sharing on, and even then only the words of a card that came true, never your names or your partner. We read every shared card before other players can see it, and players can report an idea. You can switch sharing off at any time in Settings. Ideas you share may be used by other players in their own games and may be printed in future Spice It Up editions, credited to your username. If you delete your account, your shared ideas are deleted too.
Payments
Payments for the printed deck are processed by Stripe, under Stripe's privacy policy. Stripe tells us whether the payment succeeded and gives us the delivery details you entered; card numbers stay with Stripe.
Where it is kept
On this website's server in the EU. Sign-in is handled by Google, under Google's privacy policy.
How long we keep it
Your account is kept until you delete it. You can delete it at any time in Settings → Your account → Delete my account; this removes your Google ID, name, email and username from our server immediately. A game is kept until one of you deletes it in Settings. Games that nobody opens for two years may be deleted.
How we protect it
The site is served only over an encrypted connection (HTTPS). Game and account files are stored outside public access on the server, sign-in sessions are stored only as one-way hashes, and only the app owner can see player email addresses.
Your rights
You can see, correct, export or delete your data. Deleting your game in Settings removes it from the server for both players. To delete your account or ask anything, write to dateboxxx@gmail.com. You can also complain to the Estonian Data Protection Inspectorate (aki.ee).
Changes
If this policy changes, we update the date at the top of this page. Significant changes will also be shown in the app.
Age
Spice It Up is for adults. Both players confirm they are 18 or older.