Legal
Privacy
Last updated July 30, 2026
Private by default
Profiles are not globally searchable. People connect using a private friend code or an accepted direct game invitation. There is no public leaderboard, activity feed, or relationship page.
What is stored
We store profile details, credentials in securely hashed form, friend relationships, chat messages, game activity, and security logs needed to operate the service. Passwords are never stored in plaintext. Password recovery is not available in this MVP.
Feedback
You can send feedback anonymously or optionally include an email address so we can reply. Feedback is available only to the Spicy Games team and is retained for up to one year.
Who can see it
Chats and game history are limited to their participants. Blocking stops new messages, invitations, and presence sharing. Service providers such as Firebase, Cloudflare, and Vercel process data to host the application.
Quick Match
Quick Match is available only to signed-in people who confirm they are at least 18. A matched player sees your display name and game activity, but not your password, friend code, private settings, or account identifier. We store match participation, readiness, temporary game chat, friend requests, blocks, and safety reports. When a report is submitted, recent match messages may be copied into the report so it can be reviewed.
Operational diagnostics
Essential error reports may include the affected page, a short technical message, game type, response status, and browser type. They never include chat text, private answers, secret selections, friend codes, usernames, room tickets, invite tokens, or passwords.
Essential gameplay measurement
When a game starts, we record pseudonymous, server-generated identifiers to count unique players, starts, completions, abandonment, game duration, and invite conversion. This includes guests who play without an account. It does not store usernames, chat text, private answers, submitted words, friend codes, room tickets, or invite tokens. A guest is counted by browser identity, so clearing browser data or changing device may count as a new player.
Optional analytics
On public pages, you can choose whether to allow Google Analytics, Reddit Pixel, Vercel Web Analytics, and Vercel Speed Insights. These help us understand page visits, safe product-funnel events, advertising performance, and real-user performance. We do not send passwords, chat text, private answers, secret selections, friend codes, usernames, or invite tokens to analytics providers. You can decline optional analytics without affecting the game.