PRIVACY
Privacy Policy / Politica de confidențialitate
Effective and last updated: August 11, 2026
GPT LLM ORAGLE Ltd. Liability Co. is the data controller and operates Never Dare Drink. Controller/business address: 30 N Gould St, Sheridan, Wyoming 82801-6317, United States. This policy covers the local free mobile edition, its optional Soul mates control channel, and the public dare-submission website. Privacy contact: [email protected].
Data not requested
No account, contact list, precise location, advertising identifier, microphone, camera, SMS, phone state, health data, payment data, or full date of birth is required. There are no ads, purchases, analytics SDKs, or cross-app tracking SDKs.
Local mobile data
Age/legal acceptance, language, settings, Consent Wild approval, game history, and recoverable sessions stay in private app storage on the device. Settings → Delete all local data removes these items. Uninstalling also removes application storage subject to the operating system's normal behavior. Gameplay remains on one phone, has no online multiplayer, and continues when the control service is unavailable.
Soul mates live control
When the API is reachable during a game, the app registers an opaque per-game control identity and temporarily sends the visible player names, numbers, local player identifiers and selected sex, locale, current round, Pair mode status, and delivery/completion state of superadmin-scheduled dares. This lets authenticated superadmins assign players to each other and prepare future dares. Private preferences, reconnect credentials, individual Drink/forfeit choices, and advertising identifiers are not sent. The control token is stored server-side only as a one-way digest. The control channel fails open: loss of connectivity does not interrupt local gameplay.
Public dare submissions
If you choose to use the website form, we process the dare text, selected language, optional submitter name, confirmation that you are an adult and accept the rules, submission time, and ordinary security metadata needed to receive and protect the form. We use the content only for moderation and editorial review. Submitting does not create an account, and a submission is not automatically added to the game.
Purposes and legal bases
We process public submissions to provide the form you request and for our legitimate interests in reviewing original community ideas and preventing abuse. Security metadata is processed for service integrity and abuse prevention. Support information is processed to answer your request. Records required by law are processed to meet legal obligations. Data is not sold, used for advertising, or used for cross-app tracking.
Network and security metadata
Website and API requests pass through Cloudflare before reaching our Contabo-hosted server. These providers may process IP address, approximate region inferred from IP, user-agent/browser information, requested host and path, method, timestamps, response status, and security status to deliver and protect the service. Under the current Cloudflare Free plan, sampled Security Analytics request data is available for up to 7 days and Security Events for up to 24 hours. Application and Caddy access logging is disabled. We do not use Cloudflare Web Analytics/RUM, advertising trackers, or an in-app analytics SDK.
Retention
- Live-game rosters, pair assignments, and scheduled-dare control records are permanently deleted within 24 hours after the phone's final heartbeat.
- Public dare submissions are kept while pending review and, once reviewed, for the editorial record until deletion is requested or they are no longer needed.
- Cloudflare Free-plan sampled Security Analytics request data: up to 7 days; Security Events: up to 24 hours.
- Application and Caddy access logging is disabled. Host security and mail-service journal records are size-capped and deleted after at most 30 days.
- Privileged administration audit records are kept for up to 365 days.
Processors and security
Production traffic uses HTTPS. Cloudflare, Inc. supplies DNS, reverse-proxy, content-delivery, aggregate edge traffic analytics, and edge-security services. The service, PostgreSQL, and support mailbox are self-managed on infrastructure supplied by Contabo GmbH, with this release hosted in France. Apple and Google separately process store/download data under their own notices. We use access controls, encrypted transport, private database networking, bounded retention, and recovery backups. No internet service can promise absolute security. Current deployment details: Cloudflare, Inc. provides DNS, reverse proxy, CDN, aggregate edge traffic analytics, and edge security on the operator's behalf; the application, PostgreSQL, Redis, and support mailbox are self-managed on Contabo GmbH infrastructure hosted in France; no advertising tracker or client-side third-party analytics/RUM SDK is used.
International access and transfers
The primary application and mailbox infrastructure is in France, within the EEA. Cloudflare edge processing may occur on its global network. The controller's business address is in the United States, so a support or rights request may involve access from the United States. Where transfer rules apply, we rely on an applicable adequacy decision, Standard Contractual Clauses with supplementary safeguards, or another lawful mechanism.
Your rights and deletion
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or a copy of your personal data, and may object to processing based on legitimate interests. See Delete data. For a public submission, include its text, approximate submission time, and optional name so we can locate it. We will respond within the legally required period. You may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or the authority where you live or work.
Policy changes
We may update this notice when the service, processors, or law changes. The last-updated date will change and material changes will be highlighted when required.
Română
GPT LLM ORAGLE Ltd. Liability Co. este operatorul de date. Jocul rămâne local și funcționează fără internet. Când API-ul este disponibil, controlul Soul mates trimite temporar numele vizibile, numărul, identificatorul local și sexul jucătorilor, limba, runda și starea modului perechi, astfel încât numai superadministratorul să poată atribui perechi și provocări viitoare. Preferințele private și alegerile Drink/consecință nu sunt trimise. Datele locale se șterg din Setări. Pentru acces, rectificare sau ștergere, contactează [email protected].