Privacy Policy
Last Updated: July 19, 2026
1. Who We Are
OnlineTruthOrDare.com ("we", "us", "our") is a clean browser-based party icebreaker and conversation-card game operated as an individual venture based in India. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and what rights you have over it.
If you have any questions, contact us at rnehra824@gmail.com.
2. What Data We Collect
We collect only what is necessary to operate the Service:
Account Data (Optional)
Creating an account is entirely optional. If you choose to sign in, we collect your email address via Supabase Auth (our authentication provider). This email is used to identify your account and link your Pro subscription. We do not collect your name, phone number, or any other personal details during sign-up. You may sign in using Google OAuth or a magic link sent to your email address. If you use Google OAuth, Google shares only your email address with us — no other profile data.
Player Names (Local / Multiplayer)
Names you enter for game sessions. For local games, these are stored only in your browser's local storage and never sent to our servers. For online multiplayer rooms, player names are temporarily stored in our database for the duration of the room session and are automatically deleted when the room is closed or abandoned.
Feedback Messages
If you submit feedback through the in-app form, we collect the message text and your email address (optional). This is used solely to improve the Service and to respond to you. We do not use feedback submissions for marketing.
Payment & Billing Data
If you purchase a Pro plan, payment is processed by the payment processor identified during checkout. We do not receive, store, or have access to your credit card number, bank details, or full billing address. The provider may share with us a transaction ID, your email address, and subscription status — solely for the purpose of granting or revoking Pro access. The provider's own privacy policy will govern how they handle your payment data.
Usage Data
We may collect anonymised, aggregated data about which game modes are used most frequently (for example, "Friends mode was played 200 times today"). This data cannot be used to identify you and is used only to improve game content and performance.
Browser Local Storage
We use your browser's local storage (not traditional cookies) to remember your player name, game preferences, and dark/light mode setting between visits. This data never leaves your device unless you participate in a multiplayer room.
3. How We Use Your Data
We use the data we collect for the following purposes only:
- To operate the game — syncing multiplayer rooms in real time, serving game cards, tracking turn order.
- To manage Pro purchases — verifying Pro access based on information received from the payment provider.
- To respond to feedback — replying to support requests or feedback submissions you send us.
- To improve the Service — using anonymised usage data to understand which features are most valuable.
We do not sell your personal data to any third party. We do not use your data for advertising profiling, behavioural tracking, or any purpose beyond what is listed above.
4. Third-Party Services We Use
To operate the Service, we rely on the following third-party processors. Each operates under its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Dodo Payments | Payment processing, recurring billing & one-time purchases | Email, transaction ID, purchase or subscription status |
| Supabase | Authentication, database & real-time multiplayer sync | Account email, temporary player names, room state |
| Vercel | Website hosting & delivery | Standard web server logs (IP, browser type) |
We have reviewed each provider's data handling practices and use them only because they are necessary to deliver the Service. No provider is authorised to use your data for their own marketing purposes.
5. Data Retention
- Account data (email) — retained for as long as your account is active. You may request deletion at any time and we will remove your account within 30 days.
- Multiplayer room data — deleted automatically when a room is closed or when all players leave.
- Feedback submissions — retained for up to 12 months, then permanently deleted.
- Purchase and subscription records — retained as required by the payment provider and applicable tax law.
- Local storage data — stored in your browser indefinitely until you clear your browser data or request deletion.
6. Cookies and Local Storage
We do not use third-party tracking cookies or advertising cookies. We use browser local storage (a standard web technology) to persist game preferences such as:
- Your player name, so you do not need to re-enter it each visit.
- Your preferred game mode and display settings.
- Your current deck progress, so a refresh does not reset your game.
You can clear all locally stored data at any time through your browser's settings (Settings → Privacy → Clear Site Data).
7. Children's Privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at rnehra824@gmail.com and we will promptly delete such information.
OnlineTruthOrDare.com is a clean social party game. We do not provide an adult mode, sexual content, nudity, or age-restricted entertainment.
8. Your Rights
You have the right to:
- Access — request a copy of any personal data we hold about you.
- Correction — request that we correct inaccurate data.
- Deletion — request that we delete your personal data. We will comply within 30 days, except where retention is required by law (e.g., billing records).
- Objection — object to the processing of your data for any purpose we have listed.
To exercise any of these rights, email rnehra824@gmail.com. We will respond within 30 days. We may ask you to verify your identity before processing the request.
9. Data Security
We take reasonable technical and organisational measures to protect your data. All data transmitted between your browser and our servers is encrypted via HTTPS/TLS. Multiplayer room data stored in Supabase is protected by row-level security policies. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. International Transfers
Our third-party providers, including our payment provider, Supabase, and Vercel, may store or process data in countries outside India, including the United States and European Union. We rely on these providers' own compliance frameworks for international data transfers. By using the Service, you consent to your data being processed in these jurisdictions.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the current version. Material changes will be communicated to active subscribers via the email address associated with their account where possible.
12. Contact
For any privacy-related questions, requests, or concerns:
You may also review our Terms of Service.