We respect your privacy.

We collect only what we need to run the service:

• Account data. Your email address and a hashed password (or OAuth token) when you sign up. We never store plain-text passwords.
• Profile data. Any display name, avatar or preferences you choose to set.
• Room & crew data. When you host or join a room we store the invite code, who joined, and the answers and scores submitted during play, so the room can be scored and resumed.
• Payment data. Billing runs entirely through Stripe. We store a Stripe customer ID and a purchase history — never your card number, CVV or full card details.
• Usage & AI logs. We log which AI features you use and approximate token counts, to track cost and prevent abuse. These logs are tied to your account ID, are not shared externally, and are never used to build advertising profiles.
• Technical data. Standard server logs — IP address, browser type, pages visited, timestamps — retained for security and debugging.

We do not collect sensitive categories of personal data: health, financial account numbers, biometrics or government ID numbers.

We use your information only to:

• Create and secure your account.
• Deliver the features you ask for — movie nights, quests, live rooms, printables.
• Run a live room across every device in it, and keep scores in sync.
• Process purchases and keep your credit balance correct.
• Send transactional email: receipts, password resets, room invitations, account notices. We do not send marketing email without your explicit consent.
• Monitor AI usage cost so we can enforce credit limits and prevent financial abuse.
• Detect fraud, abuse and security threats.
• Comply with legal obligations.

ReelQuest uses OpenAI’s API to generate night plans, challenge rounds and quest narrative. When you trigger an AI feature:

• Your inputs are sent to OpenAI for processing. OpenAI’s API usage policies apply — review them at openai.com/policies.
• We do not intentionally send personally identifying information — your name or email — in AI prompts. Only the choices you made and the film you picked.
• We log prompt metadata (token counts, feature type, cost estimates) internally for cost tracking. Those logs are never sold or shared for advertising.
• AI output is a suggestion, not professional advice. A human decides what actually runs in the room.

Every movie night and quest carries a content rating so a host knows what the room is getting before it starts. Ratings describe the challenge and prompt content we ship — not the film itself, which carries its own certification from its distributor.

• Text a player submits into a live room is screened by an automated moderation pass before other players see it.
• Hosts can end a room at any time, and any player can leave a room at any time. Doing so stops further content reaching that device.
• Report anything that gets through via our contact form. We review reports and remove content that breaks the rules.

All payment processing is handled by Stripe, Inc., a PCI-DSS compliant processor. Payment information goes directly to Stripe — we never see or store your full card details. We receive and store a Stripe customer ID, purchase status and invoice history. For how Stripe handles your data see stripe.com/privacy.

We do not sell, rent or trade your personal data to third parties for advertising or any other commercial purpose.

We share data only with the sub-processors needed to run the service:

• Supabase — database hosting, authentication and storage.
• Stripe — payment processing.
• OpenAI — AI content generation.
• Ably — real-time messaging that keeps a live room in sync.
• Vercel — hosting and delivery of the web application.
• Resend / Twilio — transactional email and optional SMS.
• Sentry — error monitoring and crash reporting.

We may disclose information where required by law or court order, or to protect the safety of users or the public. In a business transfer — merger, acquisition or asset sale — your data may transfer to the successor entity, and you will be told.

You have the following rights over your personal data:

• Access. Request a copy of what we hold about you.
• Correction. Ask us to fix anything inaccurate or incomplete.
• Deletion. Ask us to delete your account and its personal data. We action deletion requests within 30 days, subject to legal retention obligations.
• Portability. Request an export in a common machine-readable format.
• Withdraw consent. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, send a request through our contact form with the subject “Data Request”, or write to privacy@reelquest.invalid once our launch domain is live. We respond within 30 days.

We use cookies and similar browser storage for:

• Session authentication. A secure, HTTP-only session cookie keeps you signed in.
• Room state. Local storage remembers the room you are in, so a refresh mid-night does not drop you out of it.
• Analytics. Vercel Analytics collects anonymous, aggregate page-view data. No cross-site tracking, no fingerprinting.

We use no third-party advertising cookies and no cross-site tracking pixels. You can disable cookies in your browser, but that signs you out and disables anything that needs an account.

You must be 18 or older to create a ReelQuest account, because an account can hold a payment method and a credit balance. Younger players are welcome in a room hosted by an adult account holder — joining a room with an invite code does not require an account of your own.

We do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, tell us through our contact form and we will remove it promptly.

We take reasonable technical and organisational measures to protect your data: HTTPS in transit, row-level security policies in the database, and access controls limiting who can read production data. No system is perfectly secure and we cannot guarantee absolute security.

We keep account data while your account is active and for a reasonable period afterwards, to meet legal obligations and resolve disputes. AI usage logs are kept up to 12 months. Server logs are kept up to 90 days. Finished room transcripts are kept up to 12 months so a crew can look back at a night.

We may revise this policy as the product changes. On a material change we update the “Last updated” stamp at the top of this page and, where required, tell you by email. Continuing to use ReelQuest after a revision is posted means you accept it.

Questions, requests or concerns about this policy go through our contact form, or to privacy@reelquest.invalid once our launch domain is live. We aim to answer every privacy inquiry within 30 days.