Privacy Policy

This policy describes information handled by Spicy Wizard and its website owners and staff when you use the service. Spicy Wizard is for adults 18 and older, for entertainment, and to facilitate communication among individuals, organizations, vendors, and community members.

Pacts and other records are nonbinding communication aids, as explained in the Terms of Service. Their entertainment purpose does not make the personal information in them any less sensitive.

• Account and profile information: username, email address, password hash, account timestamps, and optional profile photo, biography, interests, and selected city/location details.
• Pacts and responses: titles, questions, templates, sharing relationships, draft and submitted answers, revisions, and any names, dates, signatures, body-map markings, notes, or other details you choose to enter. These may reveal intimate interests, boundaries, or health-related information.
• Communication and community activity: friendships, direct messages and GIF links, notifications and read status, community template publications, ratings, and reports.
• Organization activity: membership applications, vouches, acknowledgements, waiver-labelled records and signatures, event registrations and attendance, qualifications, administrative decisions, and restricted incident records. Where enabled, this also includes dues, renewal, and payment-status records.
• Technical information: session and security cookies, requests to the service, and operational or security records that may include IP addresses, browser/request details, timestamps, and errors.

Information is used to create and authenticate accounts, display profiles, save and share pacts, deliver messages and notifications, run community and organization features, and respond to user requests.

Owners, authorized staff, and service providers may also process information to maintain the website, investigate errors or abuse, enforce rules, protect users and the service, and meet applicable legal obligations. Information from another member or an organization may concern you even when you did not submit it yourself.

• Other users: profile details are visible to signed-in users through profile and directory features. Messages are available to conversation participants. Published community templates are available to the community.
• Pact participants: creators and authorized participants can access information according to the pact's sharing and response rules. Private response drafts are kept separate from submitted responses. Check the audience before submitting or sharing sensitive details.
• Organizations: authorized administrators and designated reviewers can access records according to their roles and the applicable answer audience. Restricted incidents and opt-in member directories have separate access rules. An organization may keep its own records and apply its own privacy practices.
• Website operations: owners, authorized staff, and hosting, storage, or other service providers may access information as needed to operate, support, or protect the service. Access-controlled content is not a promise of end-to-end encryption or absolute confidentiality.
• Legal and safety disclosures: information may be disclosed when required by applicable law or valid legal process, or where legally permitted to address fraud, abuse, security issues, or threats to safety.

The website uses cookies to maintain your sign-in session and protect requests against forgery. Blocking or clearing these cookies can sign you out or prevent account features from working.

If you use the GIF picker, your browser contacts KLIPY to search or browse GIFs and report selections. GIF providers and media hosts, including KLIPY, Tenor, or GIPHY when their media is displayed, receive technical request information such as your IP address. Search terms and selections may reveal your interests. Their own privacy policies apply to their services.

If you choose AI-assisted pact creation, the description you submit is sent to the AI service configured by the website operator to generate a draft. Avoid including identifying or sensitive details you do not want processed by that service.

When an organization enables an external payment or other integration, the relevant provider may process information needed for that feature under its own policies. Review those policies before using the feature or following an external link.

Account records and saved content remain in the service's storage until removed through an available feature or an applicable retention or administrative process. There is no single automatic deletion period for all information. Organization retention settings differ, and legal holds may delay deletion or anonymization.

Changing an answer, removing access, leaving an organization, or signing out does not necessarily erase submitted records, revision history, administrative records, or copies other recipients already saved. Backups and security or legal records may remain after active content is removed.

The service uses password hashing, session protections, and access controls. No website can guarantee complete security, permanent availability, or that an authorized recipient will never copy or disclose information. Share sensitive information with care.

You can edit optional profile details, replace or remove your profile photo, choose what to enter in pacts, and use available sharing controls. Organization member-directory listing is opt-in. Decline optional features or stop using the service if you are uncomfortable with the information they require.

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or limit certain processing. Direct privacy questions and requests to the website's owners or staff. For records maintained by an organization, also contact its administrators.

The website does not currently offer a single self-service tool to delete an entire account and every associated record. Requests may require identity verification and remain subject to applicable legal requirements and retention restrictions. Do not send passwords or unnecessary intimate details with a request.

People under 18 must not use the website or submit personal information. If you believe a minor has accessed the service or their information has been submitted, alert the website's owners or staff so the concern can be investigated and appropriate action taken.

This policy may change as features and data practices change. The date above identifies the current version. Any additional notice or consent required by applicable law still applies. Staff moderation discretion in the Terms of Service does not remove applicable privacy rights.