Privacy Policy

Version 2 · Last updated: 12 October 2026

goddy.lol is an app for meeting new people and chatting with them. We don't show ads, we don't track you and we don't sell your data. This policy explains what we keep, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and other data protection laws.

Who is responsible

The controller of your personal data is [DATA CONTROLLER], [ADDRESS]. Contact: [CONTACT ADDRESS]. EU representative (Art. 27 GDPR): [EU REPRESENTATIVE, IF REQUIRED].

What we keep

Account: your username, display name, date of birth (others only see your age), optional gender, the language you use, who invited you (if you entered an invite code) and your level points. Older accounts may have a password; we only store an irreversible hash of it (scrypt), never the password itself.
Google sign-in: only your Google account's permanent ID. We don't receive your email address, photo or contacts. The name on your Google account is used once to pre-fill the sign-up form; you can change it. So that bans can't be dodged with the same Google account, in some cases (see "How long we keep it") only an irreversible hash (SHA-256) of this ID is kept even after your account is deleted.
What you share: your messages, the images you send, your profile photos and profile details, connection requests, blocks and reports, your plot in the world and game results. Only the members of a chat see its messages; only your connections see your plot and house in the world. If you turn off "Show me in Discover", only your connections, people who sent you a request and people you share a chat with see your profile; others can only find you by typing your exact username. Someone you sent a request or a rocket to (even if they declined or you withdrew the request) sees only your name and profile photo and can find you by name, so they can report and block you if needed. You can't launch rockets while hidden from Discover.
Cookies and storage: a session cookie to keep you signed in, a language cookie and short-lived cookies during Google sign-in. Your browser also stores small preferences such as the theme. These are strictly necessary for the service; we use no advertising or tracking cookies.
Technical records: to prevent abuse, your IP address is kept briefly in the server's memory (rate limiting).
Error logs: if something breaks, we keep the error message, the page and the browser type for 30 days so we can fix it. They don't say who you are.

We don't collect your email address, phone number or location.

Why we use it, and on what legal basis

To provide the service (your account, messaging, profiles, Discover, the world): necessary to perform our contract with you (Art. 6(1)(b) GDPR).
To enforce the 18+ age limit, keep people safe, prevent abuse and review blocks and reports: our legitimate interest in a safe service (Art. 6(1)(f)) and, where applicable, legal obligations (Art. 6(1)(c)).
To fix errors and keep the service running: our legitimate interest (Art. 6(1)(f)).
Optional features such as push notifications, the AI assistant goddy and the bot's comment on your new profile photo: your consent (Art. 6(1)(a)), which you can withdraw at any time in your profile.

We don't make decisions with legal or similarly significant effects about you by automated means alone.

Who we share it with

AI assistant goddy: when you talk to the bot or summon it in a chat, the latest messages and images of that chat are sent to an AI provider via OpenRouter to generate an answer. If you ask for a comment on your profile photo, the photo is sent too. This only happens with your explicit permission: you're asked the first time you use the bot, and you can withdraw it at any time in the "AI assistant" section of your profile. The bot can only be summoned in a chat if everyone in it has given permission, so the messages of someone who hasn't are never sent to the AI. The provider may store this data.
Google: sign-in happens through Google; apart from notifications (below), we never send Google anything about your messages or activity on goddy.lol.
Notification services: if you turn on notifications, they reach your device through your phone's or browser's push service (Google Firebase Cloud Messaging in the Android app; in a browser, the browser's service, e.g. Google, Mozilla or Apple). The content is encrypted with a key only your device can decrypt; the service only sees that a notification was sent to your device and when.
Cloudflare: your connection to the site goes through Cloudflare's network for protection against attacks and for speed; Cloudflare processes your IP address and request details. Our encrypted backups are stored in Cloudflare R2 in the European Union data region; Cloudflare can't read their contents.
Hosting: the service runs on a server operated by [HOSTING PROVIDER AND COUNTRY].
Authorities: only when the law requires it.

Some of these providers are located outside the European Economic Area (for example in the United States). Such transfers rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses.

How long we keep it

Your data is kept while your account exists.
Self-destructing messages are permanently deleted, with their images, when their time is up.
Daily backups of the database and photos are kept on the server and, encrypted, in a separate storage service (Cloudflare R2, EU data region) for at most 30 days, then deleted.
You can delete your account at any time with "Delete my account" in your profile: your profile, photos, one-to-one chats (for the other person too), messages you sent to groups and your connections are deleted, and drop out of backups within 30 days.
Reports about you and their evidence (your profile and the messages at the time of the report, images included) are kept for one year after your account is deleted, so they can still be reviewed and to keep other users safe (legitimate interest, Art. 6(1)(f)), then deleted. If you delete your account while a report is open, no new account can be opened with the same Google account until the review is finished (at most 30 days); if the review ends in permanent closure, the hash of your Google ID is kept for good and that Google account can't sign up again.
If someone tries to sign up with a date of birth under 18, the hash of the Google ID is kept until the day they turn 18 according to that date, so the same Google account can't simply try again with another date.
Error logs are deleted after 30 days.

Your rights

You have the right to:

access your data and get a copy of it: use "Download my data" in your profile for a machine-readable file (portability);
have inaccurate data corrected: you can edit most of it in your profile;
have your data erased: "Delete my account" in your profile;
restrict or object to processing based on our legitimate interests;
withdraw your consent at any time, without affecting earlier processing;
lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work.

For anything else, contact us at [CONTACT ADDRESS]. We answer within one month. You can also remove goddy.lol's access to your Google account at any time in your Google account's "Third-party apps" settings.

Age limit

goddy.lol is only for people aged 18 and over. Accounts that turn out to belong to someone under 18 are closed.

Changes

If we change this policy in a significant way, we'll let you know in the app before the change applies.

← Back to goddy.lol