Privacy Policy

Who we are. Proxy Twins is a pilot service operated by Tauntu [legal entity TBD], contact [EMAIL TBD].

What we collect.

• Account: your email (for login links and invites) and your display name.
• Age: your birth year, used only to confirm you're 18+. We store a confirmation timestamp, not the year.
• Twin profile: your 8 interview answers, off-limits topics and roast level, plus optional taste answers (favourite music, books, shows, games) and an optional guilty pleasure, which is only used in games if you opt in.
• Game data: lines, votes, reels, songs, lyrics, novel chapters, lore (nicknames and running jokes), and scores.
• Your choices and records: morning guesses, cheers and votes; reel visits (for streaks); badges, collectibles and avatar flair; vetoes; reports; join requests and their notes; forfeits; any photo you upload as forfeit proof.
• Server logs: IP address and timestamps, for security.

Who sees it.

• Your league's members see its reels, shelf (band, novel, songs, legendary cards), lore, standings and member names.
• For a listed league, anyone can see the league's name, theme, description and member count in Discover. Its members and content are not shown there.
• League owners see join requests (display name and note), reports and the member list.
• We don't sell data or use it for ads.

Processors.

• Google Gemini API (AI): your twin card and league-mates' twin cards, the league theme and lore are sent to generate game content. No email addresses, birth years or other personal details beyond the twin card are sent. Google's API terms apply [confirm paid-tier data-use and no-training terms, TBD].
• Resend (email delivery): your email address and the message content (login links, invites).
• Fly.io (hosting): app, database and backups, hosted in Sydney, Australia (syd).
• Cloudflare (domain/DNS for tauntu.com).

Processing may occur outside your country.

Deletion.

• Delete your twin anytime from your persona card. We immediately wipe the persona, remove you from the league, and scrub cards, lines and guesses involving your twin from stored reels.
• League creations (band tracks, novel chapters, songs) that others co-wrote may remain, with your name removed [TBD].
• To delete your whole account, contact [EMAIL]. We'll do it within [30] days.
• Database backups are kept for 7 days, then overwritten.
• Login tokens expire after 15 minutes and are stored hashed.

Retention. Reels and creations are kept while the league exists [or 12 months of inactivity, TBD]. Reports and join requests are kept for [90 days, TBD]. Spend logs contain no personal data.

Age. Proxy Twins is 18+ only. We delete accounts we learn belong to under-18s.

Your rights. [GDPR/UK/AU/NC (France) notes TBD: lawful basis is consent and contract; you have rights to access, correct, delete and port your data, and to complain to your regulator, e.g. the CNIL or OAIC.]

Changes. We'll tell league members by email before material changes.

Still TBD: operator entity and contact email; Gemini data-use terms; retention periods; the regulatory section; handling of co-written creations after deletion.