Privacy

Your first name, and if you sign in with Google or email, your email address and a provider ID. The groups you’re in, the dares you create, accept, judge or bet on, the points you spend and win, and any proof you post (video, photo, link, note). Your chosen face (a generated cartoon, or a photo you upload; photos are stored at an unguessable address, resized to 320 px and stripped of camera data before upload). Which devices are signed in. A hashed version of your IP address for rate limiting (we never store the address itself). A score of how often you complete dares in each category, used only to set the opening chance of your next dare.

No payment details (there’s nothing to pay). No location. No contacts. No ads, and no selling of data to anyone.

To run the game: show dares to your group, settle results, keep points right, and stop abuse. To fix bugs and see how the app is used (PostHog and Sentry; names, dare text and anything you type are masked before they leave your device, and links with private tokens are stripped).

To send you an email when a friend accepts, posts proof, checks in, or a dare settles, if you’ve linked an email. Every email has a one-tap link to stop them, and you can turn them off on your account page.

People in your group see your name, your face, your sides, your bets, the proof you post and what you write in the group chat (you can delete your own messages; the group host can remove any). A public receipt shows the dare, the result and the names of who was on each side; your video only appears if you turn that on. Anyone with a group’s invite link can see the group name, first names on each side of its current dare and how many people are in it. Nothing else is public by default.

Proof videos are deleted after 30 days. Sign-in links expire in minutes. Your account data stays until you delete your account; then your name, email and sign-ins are erased after a 30-day grace period and bets you were in are kept under “Deleted user”.

Download everything we hold about you from the account page (JSON). Change your name there. Delete your account there. If you’re in the EU, UK, California or Canada you may have further rights under GDPR, CCPA, PIPEDA or Quebec’s Law 25; email us and we’ll answer within 30 days.

Data is stored with Supabase (Postgres, US East) and Vercel (hosting and private file storage, US). Email sign-in links are sent through Resend.

medportgeneral@gmail.com