Privacy Policy

Effective 10 October 2026. Heat Check is a pass-the-phone party game for adults: flirty party games for couples, 18+. This policy explains what we collect, why, and what you can do about it.

The short version

• You can play without an account. Guests' names, scores and settings stay on their own phone.
• If you sign in, we store your email address, your plan, your preferences, light stats and your purchase records.
• Payments are handled by Razorpay. We never see or store your card, UPI or bank details.
• No ads, no selling or renting of data, no tracking cookies.
• You can export or delete your account data from your profile at any time.

1. Playing as a guest

Without an account, Heat Check saves player names, couple pairings or group rosters, scores, heat level, settings and your 18+ confirmation in your browser's local storage on your own device. This is never uploaded to us. It stays until you tap "New night", clear your browser data or uninstall the app.

2. If you create an account

Sign-in uses a one-time code sent to your email. No passwords. For a signed-in account we store:

• Email address, to sign you in and to send sign-in and account-deletion codes.
• Plan details: free, Date Night Pass (with its end time) or Lifetime.
• Free hot card history: which games' free Lv3 card you've used, and when.
• Preferences: penalty mode, auto-ramp and cards per ramp, sound, haptics, motion, sound pack, home look and saved player names (if you're on Pro).
• Light stats: games played, favourite game and highest heat reached.
• Purchase records: product, amount, status, date and the Razorpay order and payment IDs.

Player names in a game are only saved to your account if you're on Pro and use saved names. Answers you type during play are never saved or sent anywhere.

3. Payments

Purchases are processed by Razorpay Software Private Limited. When you pay, Razorpay collects the details needed to complete the payment under its own privacy policy. We receive confirmation of the payment (amount, status and IDs), never your card, UPI or bank details.

4. Service providers

• Cloudflare hosts the site and runs our server code. It also provides Turnstile, a privacy-friendly check that stops bots on the sign-in step. Like any host, it receives your IP address and browser details to deliver pages and protect the service.
• Supabase stores account data and runs sign-in.
• Razorpay processes payments.
• Our email provider delivers sign-in codes.

Fonts are hosted by us. No third-party analytics or ad scripts run on Heat Check.

5. Crash reports and security logs

If the app hits an error it may send a short technical report: the error message, where it happened, the page path and a time. Reports never include player names, card answers or anything you typed. To prevent abuse we keep short-lived rate-limit counters keyed to a one-way hash of your email or IP address.

6. Cookies and storage

Heat Check uses local storage and a service worker cache so the game works offline, and to keep you signed in on your device. We don't use tracking cookies. The only cookie is a short-lived, security-only cookie for the site owner's admin tools.

7. How long we keep data

Account data is kept while your account exists. When you delete your account, your profile, preferences, stats and free hot card history are deleted immediately. Purchase records are kept with your email and account link removed, because payment records must be retained for accounting and tax purposes. Crash reports and logs are kept no longer than 90 days.

8. Your rights

From your profile you can export everything we hold about you as a JSON file, and delete your account (confirmed with a code sent to your email). Under India's Digital Personal Data Protection Act, 2023 and similar laws you can also ask us to access, correct or erase your data, or raise a concern, by contacting our support email (being set up, check back soon).

9. Security

The site is served only over HTTPS with strict security headers. Account data is protected by row-level security so each account can only read its own records. Payments are verified on our server with signed confirmations from Razorpay.

10. Adults only

Heat Check is only for people aged 18 and over. We do not knowingly collect information from anyone under 18, and we delete any account we learn belongs to a minor.

11. Changes

If this policy changes, we'll update it here and change the effective date above. Significant changes will be shown in the app before they apply.

12. Contact

Questions about privacy: our support email (being set up, check back soon).