Spicy Journey

Privacy Policy

Last updated: 21 September 2026

Spicy Journey ("we," "us") operates the website at spicyjourney.fun, a private card-drawing experience for consenting adults. This policy explains what we collect, why, and your choices. The service is intended only for people aged 18 or older.

What we collect

Anonymous usage analytics. When a page loads we record a "beacon": a random per-device identifier stored in your browser (not linked to your name or email), the referring website (if any), an approximate location (country, region, city) that Cloudflare derives from your network connection, your browser's user-agent, the name of your network provider, and your browser's time zone and language setting (used to tell real visitors from bots). We do not store your IP address or a precise location. We also count feature use (for example, that a journey was started with a given theme, a teaser link was sent, or a Match round was finished), without recording card contents or your answers.
Bot protection. When you submit a custom idea or use the admin area, Cloudflare Turnstile runs to distinguish humans from bots.
Your library. Your favorites, hidden ideas, ideas you've marked as tried, Match answers, custom ideas, and saved journeys are stored in your browser (localStorage). If you purchase an access code, this library is also stored on our servers, keyed to your code, so it can sync across your devices. It is not linked to your identity beyond the code. For paid devices we also keep a list of the devices using your code (a random device ID plus a general type like "iPhone app," and when each last synced) so you can see which devices are paired, and we log the date and approximate region (e.g., state) each time the full deck is delivered, keyed to a one-way hash of your code rather than the code itself.
Teaser links. When you send a teaser, the card reference and your note are placed in the link itself (after the "#"), which browsers do not send to our servers. We don't see the note or who you sent it to.
Submitted ideas. Ideas you choose to submit "for review" are sent to us so we can consider them for the shared deck.
Purchases. Payments are processed by a third-party payment provider. We do not receive or store your card number. We may receive your email address and an order reference to issue and support your access code.
Email you send us (e.g., to [email protected]) so we can respond.

How we use it

To run the service, remember your preferences, and sync your library across devices (paid users).
To understand aggregate usage (how many people visit, roughly where from, which sources) and improve the product.
To protect the service from spam, abuse, and automated attacks.
To issue access codes, provide support, and process refunds.

Cookies and local storage

We use your browser's localStorage to hold your preferences and library, and a bot-protection cookie set by Cloudflare Turnstile.

Who we share it with

We do not sell your personal information. We rely on service providers to operate the site: Cloudflare (hosting, edge network, analytics geolocation, bot protection, and email routing) and, for purchases, a third-party payment processor. Each processes data only to provide their service. We may disclose information if required by law.

Data retention

Anonymous analytics beacons are retained only as long as useful for aggregate reporting and may be periodically cleared. Your on-device data stays until you clear it. Server-stored library data for paid users is retained while your access code is active; email us to have it deleted.

Your choices and rights

Clear your local data by clearing your browser's site data for this site.
Depending on where you live (e.g., the EEA/UK or California), you may have rights to access or delete data we hold about you. Because our data is largely anonymous, we may need your access code or other details to locate it. Email [email protected].

Children

This site is for adults 18 and older. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has used the site, contact us and we will address it.

International visitors

The site runs on Cloudflare's global network, so data may be processed in various countries. By using the site you understand your information may be handled outside your home country.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions? Email [email protected].