You can play without an account, and a game on one phone stays on that phone. In online rooms, your player name goes through our server, chat is kept for 30 days in case someone reports abuse. We never ask for your real name, phone number, contacts or location. We never sell your data.
1.Who we are
This policy covers truthordaregame.net, an online Truth or Dare game run from India. When it says "we" or "us", it means the site.
We decide how the data described here is used, which makes us its controller under data protection law, and its Data Fiduciary under India's Digital Personal Data Protection Act, 2023. Questions and requests go to [email protected].
Premium and advertising are not live yet. This policy will cover them from the day they launch.
2.What we collect
- If you play as a guest, we only have the player name and emoji avatar you pick. Both stay in your browser. They reach our server only when you join an online room.
- If you create an account, we store your email address, player name and avatar, and your password as a secure hash that nobody can read. If you sign in with Google, we get your Google account ID, email address and name instead of a password. Your account also keeps a game history: the deck, the number of players, how many cards were played, the names the other players used at the table, and the time of each game. If you ask us to tell you when Premium launches, we keep that you asked until you change your mind or it launches.
- If you write to us, we keep your message. The same goes for the note you can leave when you delete your account.
- Every visit sends us, and our network provider Cloudflare, your IP address, browser, device type and the pages you open. We use this to run the site and protect it, including short-lived limits on how often one connection can try to sign in, create a room or translate cards. The sign-up and sign-in forms use Google reCAPTCHA, which also receives your IP address and browser details.
- Analytics come from Google Analytics 4, Statsy and Cloudflare Web Analytics. They count page visits and a few game events, such as which deck was picked. They never see your answers, your messages or your email address. In the EEA, the UK and Switzerland, analytics cookies stay off and Statsy does not load.
- If you turn on translation, the text of the card on the table goes to OpenRouter to be translated. Nothing else goes with it, and the translation is kept for 90 days so the next player who needs it gets it straight away.
We never ask for your real name, phone number, address, contacts, location or any ID. You cannot upload photos. The site never uses your camera or microphone.
3.Rooms and chat
Whatever you say out loud or do for a dare at the table stays there. We never record it.
In an online room, the other players see your player name and avatar, and everything you type in the chat. Anyone with the room link or code can join. Other players can also take screenshots or repeat what you share, so send links only to people you want at the table.
Chat. Room chat goes through our server. The last 50 messages stay with the room, so a player who drops and comes back can still read them, and they go when the room closes. We also keep a copy of chat for 30 days to deal with abuse. Each copy has the player name, room code, time, the card on the table, whose turn it was and, for signed-in players, a link to the account. We read these copies only to look into a report or a pattern of abuse, or when the law asks us to.
4.How we use your data
We use your data to:
- run the game and your account, because that is the service you asked for;
- keep the site safe and stop abuse, which is our legitimate interest and sometimes a legal duty;
- see what works and improve the site, which is our legitimate interest, or needs your consent where the law says so;
- send the emails described in section 5;
- take Premium payments once Premium launches, as part of our contract and as tax law requires;
- reply to you, and follow the law.
We do not sell your data. We do not build advertising profiles. We do not make automated decisions about you that have legal effects.
5.Emails
An account gets the emails it needs: one to confirm your address, a welcome, password resets and, once Premium launches, receipts and renewal reminders.
After you confirm your address, we may also send a few emails about the game. Each one has an unsubscribe link, and one click is enough.
8.How long we keep it
- A room and its last 50 messages: until the room closes.
- The chat copy kept for abuse reports: 30 days.
- The list of cards you have been dealt: 7 days.
- Your account and game history: until you delete your account.
- Server logs and sign-in limits: a short time, then deleted on a rolling basis.
- Payment records: as long as tax law says.
We keep a record longer only when the law requires it, or when we need it for an abuse case or a legal claim.
9.Deleting your account
You can delete your account any time from your profile settings. You can also email us from the address on the account.
Deleting it removes your email address, player name, avatar, password, Google link, game history and sign-ins. We keep only what the law makes us keep, such as invoices. Chat copies kept for abuse reports stay until their 30 days are over, with nothing linking them to you. The player name you used at a table stays in the game history of the other signed-in players who sat with you.
10.Age limits
The site is for players aged 13 and over. If you are under 18, you need a parent's or guardian's permission to create an account, and the 18+ decks are not for you.
If you think a child under 13 has an account, or someone under 18 has one without permission, write to us and we will delete it.
11.Your rights and complaints
You can ask to see your data, get a copy, correct it or delete it. You can object to how we use it and take back any consent you gave. The GDPR, UK GDPR, India's DPDP Act and California's CCPA give you these rights and some more. Under the DPDP Act, you can also name someone to use your rights for you.
Email [email protected] to use any of them. We may ask you to write from your account's email address so we know it is you. We reply within 30 days.
For a complaint, including a grievance under India's IT Act, 2000, write to the same address with "Grievance" in the subject. It goes to our Grievance Officer. We confirm within 24 hours and resolve it within 15 days. You can also complain to your data protection authority, or in India, to the Data Protection Board of India.
12.Security and changes
All traffic to the site is encrypted. Passwords and sign-in tokens are stored only in scrambled form, and only the people who run the site can reach the data. No website is completely secure, so we cannot promise your data will never be accessed without permission. If a breach affects you, we will tell you as the law requires.
Our providers have servers in several countries, so your data may be handled outside the country you live in. Where the law asks for safeguards, we use them.
When this policy changes, the date at the top changes too. We announce big changes on the site before they happen. If you keep using the site after a change, the new policy applies.
