Privacy policy

Foreplay+ is run by Foreplay Game BV, Zeilstraat 30, 2060 Antwerpen, Belgium (BE0790242271). We decide what happens to your data, which makes us responsible for it under the GDPR (its controller). Questions about your data go to info@foreplaygame.com.

You sign in with your email address. We use it to send your sign-in links and, when it matters, to tell you about your account or a change to our terms or this policy. No newsletters.

• Your account holds your email address, when you joined and last signed in, and which version of the terms you accepted.
• It also has a random id, which we use instead of your email address wherever we can: with RevenueCat, in analytics and in card reports.
• We store sign-in links and sessions only as hashes, which can't be turned back into a working link. A link works for 15 minutes; a session ends when you sign out or after 90 days without a visit.

Your players, with their names, avatars, body types and preferences; your custom tasks and bucket list; your answers and votes in games like Steamy Survey; the cards you've played or blocked; and your settings and saved games. They're kept in your browser and, while you're signed in, in your account, so they follow you to every device.

Some of this says something about your sex life, which makes it sensitive data under the GDPR, and we treat it that way. You decide what to add. We store it only to run Foreplay+ for you, and we don't read it unless you ask us to or the law requires it. It never goes into analytics or advertising, and we don't share it with anyone except the companies that host it for us. You can change or delete it at any time.

Stripe sells you a plan as merchant of record, and RevenueCat manages it for us. When you buy, you give your email address and payment details to their checkout, and Stripe handles them under its own privacy policy. We never see your card details. RevenueCat tells us whether your account has a plan, which one, when you bought it and when it renews or ends. Our pricing page gets its prices from RevenueCat too, under a shared id rather than yours.

• When you report a card, we get the card, your reason and any comment, with your account's random id and whether you have a plan, so we can look into it.
• The Feedback button opens ProductPing, the tool we collect feedback with. It only loads when you open it, and gets what you send through it.
• When you email us, we get your message and your email address. Support emails started from Foreplay+ include your account's email address and random id so we can find your account; you see them before you send.

To see how Foreplay+ is used and what to improve, we count visits and a few events:

• PostHog, on its servers in the EU, gets the pages you open and a handful of events: starting a game (which game, the level and how many players), and seeing the paywall or buying a plan. While you're signed in, they carry your account's random id and whether you have a plan, so we count you once across devices. Never your email address, your players, your preferences or what's on the cards.
• Rybbit counts page views: the page, the site you came from, and your browser, device and language.

Both see your IP address, which tells them roughly where you are. Neither uses cookies or stores anything on your device. We don't record your screen, and keyword pages are counted without the keyword.

Like every website, our servers see your IP address and browser details with each request. We use them to keep Foreplay+ working and safe, for example to limit how often the sign-in form sends emails. We keep them in logs for a short time and never store them with your account.

We use two cookies, both to keep you signed in:

• fpg_session: your session, for up to 90 days.
• fpg_access: a signed note of your account's status and plan, so pages open without checking with our servers every time. Also up to 90 days.

Your browser's local storage keeps your games, players and settings, so games never wait on the network, and remembers whether you've closed the install banner. The checkout and the Feedback panel can store things of their own, but only when you open them: Stripe uses cookies in the checkout to prevent fraud. There are no advertising or tracking cookies.

The GDPR asks us to name a legal basis for each use:

• Our contract with you, the terms: your account, signing in, syncing what you add, and your plan.
• Your explicit consent: the sensitive data you add. You can withdraw it at any time by deleting that data or your account.
• Our legitimate interests: keeping Foreplay+ safe and free of abuse, analytics to improve it, and handling card reports, feedback and support. You can object to these.
• The law, when it requires us to keep or hand over data.

We never sell your data or share it for advertising. These services handle it for us, only to do their job:

• Vercel, which hosts this site;
• the companies that host our servers and send our emails;
• RevenueCat, which manages plans;
• PostHog and Rybbit, for analytics;
• ProductPing, for the feedback you send.

Stripe handles your payment as merchant of record and is responsible for that data itself. We also share data when the law requires it, or when someone's safety depends on it.

Some of these companies are based outside the EU, mostly in the US. When your data goes there, it's protected by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

• Your account and everything synced to it: until you delete your account.
• Sign-in links: deleted a day after they expire. Sessions: deleted once they end.
• Card reports, analytics and logs: only as long as they help with the uses above.
• Support emails: as long as we need them to help you.
• Payment records: Stripe and RevenueCat keep them as long as tax and accounting law requires.

You can delete your account at any time on the Account page. That deletes it and everything synced to it from our servers straight away, ends your sessions and clears this browser's copy. It doesn't cancel a plan you're paying for: cancel that first under Manage plan.

You can ask us for a copy of your data, to correct it or delete it, to limit what we do with it, or to send it to you or someone else in a common format. You can object to what we do in our legitimate interests, like analytics, and withdraw your consent at any time. Email info@foreplaygame.com from the address on your account, and we'll answer within a month.

If you think we got something wrong, please tell us first. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or to the one where you live.

Everything travels over an encrypted connection, and sign-in links and sessions are stored only as hashes. No system is perfectly safe, though: if something goes wrong that puts your data at risk, we'll tell you.

Foreplay+ is for adults. We don't knowingly collect data from anyone under 18, and if we learn that an account belongs to someone under 18, we delete it.

When we change this policy, we update the date at the top. If a change matters to you, we'll tell you before it applies.

Foreplay Game BV, Zeilstraat 30, 2060 Antwerpen, Belgium · info@foreplaygame.com