Privacy policy

truthordaregame.net is an online Truth or Dare game operated from India and played worldwide. For everything in this policy, the contact is [email protected] — it is read by the person who runs the site.

Some features described here — accounts, Premium, and advertising — are rolling out in stages. This policy covers each of them from the day it goes live, so nothing changes silently later.

• Playing as a guest needs no personal details at all. The player name you type is stored in your own browser and shared only with the room you join.
• Creating an account asks for an email address, a password (stored only in securely hashed form — we cannot read it), and a player name. You can also add a profile photo; that is entirely optional.
• Buying Premium adds billing details, which are handled by our payment processor — card numbers never touch our servers. We keep records of your plan and payments, as billing and tax law requires.
• Writing to us gives us your email address and whatever your message contains. We use it to reply, nothing else.

Like every website, our servers record standard technical data when you load a page: your IP address, browser and device type, and the time of the request. When you register, we also record the IP address the account was created from. This helps us keep the service secure, prevent abuse and spam accounts, and understand roughly where players are.

We use analytics to see how the site is used in aggregate — which pages are visited, which decks are popular, where players drop off. Analytics tells us "many players opened the Couples deck tonight", never "here is what someone answered": your answers are never sent to us or to anyone else. One exception, and you switch it on yourself: if you ask for cards in your language, the printed text of each card on the table — never your name, your answers or your messages — is sent to OpenRouter, which runs the model that translates it, and the translation is kept so the same card is not sent twice. Two providers do the analytics work: Google Analytics 4, which records page views and a small set of game events (a deck picked, a game started, a truth or a dare chosen), and Cloudflare Web Analytics, which is cookieless and measures page speed. If you are in the EEA, the UK or Switzerland, analytics and advertising cookies are switched off for you outright rather than asked for — Google Analytics then measures your visit without storing anything on your device.

To protect the service, we may also check account details against publicly available information — for example to verify that an account is genuine or to investigate abuse. We do not build advertising profiles from it.

The game only deals cards. Your answers to truth questions, what happens during dares, and anything your group says out loud stays in your room, between your players. We do not record, store or transmit any of it. Online rooms are temporary by design: they exist while people are playing and are deleted when everyone leaves.

The one exception is the room chat in an online room, which has to pass through our server to reach the other players. The last 50 messages of a room are held with the room so that anyone who refreshes or reconnects does not lose the thread, and disappear with it.

Chat messages are also stored temporarily on our server, per room, so we can monitor misuse and abuse of the service — harassment, threats, spam, and attempts to use a room for anything other than the game. Each stored message carries the player name it was sent under, the room code, the time, the truth or dare card that was on the table at that moment and whose turn it was, and, if you were signed in, a link to your account. They travel over an encrypted connection and are held securely on our own server. They are deleted automatically after 30 days, sooner if your account is deleted (the account link goes with it), and are only ever looked at to investigate a report or a pattern of abuse. We never hand them to advertisers or use them for anything else.

This part matters, so it gets its own section. When you join or create a game, the other players in that room can see your player name and, if you have added one, your profile photo. That is what a profile photo is for — it appears on your seat in every game you play or join, exactly like sitting down at a real table.

Anything you type into the room chat is shown to everyone in that room, with your name and photo against it, including anyone who joins or reconnects while the room is still alive.

Pick a name and photo you are comfortable showing to the people you play with. You can change or remove both at any time in your profile settings, and rooms are only ever joinable by people who have the invite link or code.

truthordaregame.net is free to play and will be supported by ads. When advertising goes live, ads will be served by third-party advertising partners, and those partners may use cookies or device identifiers to show and measure ads — including, where you have consented, personalised ones. We will keep ads away from the middle of your game, and we will never give advertisers your answers, your rooms, or your messages.

Where the law gives you a choice — such as consent banners in the EEA and UK, or opt-outs under California law — you will get that choice, and saying no will not block you from playing. Premium subscribers see no ads at all.

The game keeps small pieces of data in your browser's local storage so it works smoothly: your player name, which deck you picked, which cards you have already seen, and a random player ID that lets you rejoin a room if your connection drops. This data stays on your device unless a feature needs it (your name is sent to a room when you join one), and clearing your browser data removes it. One of those features: so that a new online room does not deal you the cards your last one did, our server remembers which cards your browser has been dealt for 12 hours. That list is filed under a scrambled form of the random player ID — not your name, your account or your IP address — and holds card text only.

Accounts use a session cookie to keep you signed in. Outside the EEA, the UK and Switzerland, Google Analytics sets its own cookies to tell repeat visits from new ones; inside them it is switched to a cookieless mode, so it stores nothing on your device. Advertising, when it goes live, may set its own cookies as described above.

We use the information above to run the game and your account; to show your name and photo to players in your rooms; to process Premium payments; to understand and improve the site through analytics; to fund the site through advertising; to keep the service secure and free of abuse; and to answer your messages. We use it for nothing else, and we send no marketing email unless you have asked for it.

We share data only with the services that keep the site running: hosting, analytics, advertising and payment providers, each receiving only what their job needs. We may disclose information if the law genuinely requires it, or as part of a transfer if the site is ever sold — in which case this policy still applies to your data.

We do not sell your personal information for money. Where personalised advertising counts as "selling" or "sharing" under laws like the California Consumer Privacy Act, you can opt out — write to us, or use the choices shown with the ads.

Server logs are kept briefly for security and then routinely deleted. Rooms are deleted when the game ends; the list of cards your browser has already been dealt (section 7) goes after 12 hours; the room chat copy we keep for abuse monitoring (section 4) is deleted after 30 days. Account data is kept while your account exists. Payment records are kept as long as billing and tax law requires, even after an account is deleted.

You can delete your account at any time — from your profile settings, or by emailing us from the account's address. Deletion removes your email, name, photo and game history from our systems; only records the law requires us to keep (such as invoices) survive it. There is no retention trick and no "are you really sure" maze: ask, and it is done.

This site is strictly for players aged 18 and over. We do not knowingly collect data from anyone under 18 — if you believe a minor has created an account, write to us and we will delete it immediately. Our game includes adult-leaning content, explicit dares, and optional drinking game features, which makes it unsuitable for children.

Wherever you play from, you can ask us what data we hold about you, ask for it to be corrected or deleted, and object to how it is used. Under the GDPR (EEA and UK) this includes access, rectification, erasure, restriction, portability and objection, plus the right to complain to your data-protection authority. Under India's Digital Personal Data Protection Act you have equivalent rights of access, correction, erasure and grievance redressal. Under the CCPA (California) you may know, delete, correct, and opt out of "sale" or "sharing" — and we will never treat you differently for exercising any of these.

For any of it, one email is enough: [email protected]. We answer within a month, usually much faster.

All traffic to the site is encrypted, passwords are stored only as secure hashes, and access to server data is limited to the person who runs the site. No online service can promise perfect security, but we hold as little as possible on purpose — the less we store, the less there is to lose. Because players and providers span countries, your data may be processed outside your own; where transfer rules apply, we rely on recognised safeguards such as standard contractual clauses.

When this policy changes, the effective date at the top changes with it — no silent edits. If a change is significant, such as advertising going live, we will say so on the site before it takes effect.