Scope
This Privacy Policy explains how UnLaughable collects, uses, discloses, stores, and protects information when you use the website, accounts, live rooms, camera and microphone features, shop, leaderboards, reports, moderation tools, and related services.
This policy applies to users, guests, registered account holders, people who contact support, people who make purchases, and people whose information appears in reports or moderation events.
By using UnLaughable, you understand that live social video features require camera, microphone, connection, device, and safety processing. If you do not want that processing, do not enter playable rooms.
Information you provide
We may collect account and profile information such as email address, display name, passwordless authentication data handled through Supabase Auth, date of birth, Male/Female lobby selection, profile image, badges, settings, support messages, reports, appeal messages, and rules acceptance records.
We may collect purchase and commerce information such as purchased product, membership status, gem balance, cosmetic inventory, care package contents, order status, Stripe checkout session identifiers, Stripe customer identifiers, payment status, refund status, subscription status, and related billing metadata. We do not store full payment card numbers on our own servers.
If you submit a report, appeal, support request, or admin request, we may collect the text, selected reason, match ID, reported user ID, reporter ID, timestamps, severity, status, admin notes, and related metadata needed to review and respond.
Camera and microphone privacy
Playable rooms require camera and microphone permission. Webcam frames and microphone audio are used to show you to yourself, transmit live peer-to-peer room media, and run client-side safety or game checks.
UnLaughable does not record webcam video or microphone audio by default. Current laugh detection is based on client-side MediaPipe face analysis for face visibility and smile or smirk risk. Audio laughter detection is disabled until a later release.
We may process safety metadata, match metadata, report metadata, and detection results, such as match ID, user or guest identifier, event type, confidence, timestamp, match phase, and detection result. Unless a separate feature or legal process says otherwise, we do not upload raw webcam frames or raw microphone audio for laugh detection.
Device, usage, and technical information
We may collect technical information such as IP address, approximate location inferred from IP, browser, device type, operating system, user agent, page views, referrer, route, session identifiers, cookies, local storage values, feature flags, errors, security events, network timing, WebRTC signaling metadata, and server logs.
Live 1v1 rooms may process WebRTC signaling data, ICE server configuration requests, connection state, match room IDs, role assignment, queue status, peer readiness, offer and answer metadata, and ICE candidate metadata needed to connect two players.
We may use analytics, hosting logs, database logs, security logs, payment logs, and infrastructure logs to operate, secure, debug, improve, and audit the service.
How we use information
We use information to provide accounts, authenticate users, run playable rooms, connect live peers, enforce 18+ access, apply same-lobby public matching, operate leaderboards, manage gems and cosmetics, process payments, provide memberships, respond to support, and maintain the service.
We use information to detect abuse, enforce rules, investigate reports, moderate serious incidents, apply cooldowns or suspensions, prevent fraud, secure accounts, debug errors, maintain logs, verify purchases, handle refunds and chargebacks, and comply with law.
We may use aggregated or de-identified information to understand gameplay, improve detection, improve matchmaking, improve shop offerings, measure performance, and plan product changes.
Sharing and service providers
We may share information with service providers that help operate UnLaughable, including Supabase for database, auth, storage, and realtime features; Stripe for checkout, subscriptions, payments, refunds, and billing records; Vercel for hosting and logs; Cloudflare for network, TURN, security, or performance services; and other vendors we use for operations.
Third-party TikTok clip embeds may receive information from your browser according to TikTok's own terms and privacy policies when those embeds load or play. We do not control TikTok's independent tracking or data practices.
We may disclose information if required by law, legal process, security needs, fraud prevention, child safety, emergency risk, enforcement of our terms, protection of users, protection of rights and property, or a business transaction such as a merger, acquisition, financing, or asset transfer.
Retention
We keep information for as long as reasonably needed to provide the service, maintain accounts, process purchases, operate leaderboards, preserve safety and moderation history, comply with legal obligations, resolve disputes, prevent fraud, enforce terms, and maintain backups.
Account profile data is generally kept while the account exists. Billing records may be kept as required for tax, accounting, fraud prevention, chargeback, and payment compliance. Moderation and report metadata may be kept for safety, repeat-offender review, and legal defense.
Guest identifiers and session values may be stored in cookies or browser storage to count guest games, remember rules acceptance for the session, remember lobby selection for the session, and prevent abuse.
Your choices and rights
You may choose not to create an account, not to enter playable rooms, not to grant camera or microphone permission, not to purchase products, or not to submit optional profile information. Some features will not work without required information or permissions.
Depending on where you live, you may have rights to access, delete, correct, or receive information about personal data; object to or limit certain processing; opt out of certain sharing; or appeal a privacy decision. We will respond as required by applicable law.
To make a privacy request, contact support. We may need to verify your identity before acting. Some information may be retained if needed for security, legal compliance, billing, chargebacks, fraud prevention, dispute resolution, moderation, safety, backups, or enforcement.
Children and minors
UnLaughable is for adults 18+ only and is not directed to children. We do not knowingly allow minors to use the service.
If we learn that a minor used the service or that information about a minor was submitted, we may suspend access, delete or restrict data where appropriate, preserve information needed for safety or legal purposes, and take additional steps required by law.
Parents or guardians who believe a minor provided information to UnLaughable should contact support with enough detail for us to investigate.
Security
We use technical and organizational measures designed to protect information, including server-side handling for service keys, restricted client exposure of secrets, authentication, Row Level Security where applicable, payment-provider isolation, and access controls.
No online service can guarantee perfect security. You are responsible for keeping your login credentials secure, using trusted devices, and reporting suspected unauthorized access.
If we identify a security incident that requires notice, we will provide notice as required by applicable law.