Privacy Policy
Draft dated September 28, 2026This policy explains what grill-me stores, why, who can see it, and how to delete it.
What we collect
If you use grill-me without signing in (as a Guest): a random device ID that your browser generates and keeps, so we can let you start one Grilling and find it again.
From Google sign-in: your name, email address, profile picture and Google account ID. We never get your Google password or access to your other Google data. When you sign in after trying grill-me as a Guest, we move that Grilling into your account.
Your Grillings: the questions you ask, every Round (the question, its options and your answer, including answers defaulted when time ran out), timestamps, and the Shared Understanding.
Billing: if you subscribe, Stripe processes your payment. We store your Stripe customer and subscription identifiers and your subscription status. We never see or store your full card number.
Technical: one session cookie to keep you signed in, and basic server logs (such as IP address and request times) for security and debugging.
How we use it
To run grill-me: sign you in, run your Grillings, apply the free limits, and manage your Subscription. To improve it, we look at aggregate statistics, such as how many Rounds Grillings last and how they end. We don’t sell your data and we don’t use it for advertising.
Who can see your Grillings
Only you. grill-me admins can’t read your Grillings; they see aggregate statistics only. There are two exceptions, and both are your choice.
Feedback: when you send Feedback on a Grilling, the grill-me team can read that one Grilling in full: your question, every Round and answer, and the Shared Understanding.
Public Grillings: when you make a Grilling public, anyone can read it in full, including anything you typed in your own words, along with a short Digest of it. Other visitors never see your name, email or photo. The grill-me team can see which account published it, so they can hide it if it breaks the rules. You can make it private again at any time.
AI model providers
To generate questions, Shared Understandings and Digests, the content of your Grilling is sent to the AI model provider we use. [List of providers and their data-retention terms — TBD.]
Cookies and local storage
We use one essential session cookie to keep you signed in. Your browser also keeps your Guest device ID and your light or dark mode choice. We don’t use advertising or cross-site tracking cookies.
Keeping and deleting data
We keep your data while your account exists. You can delete any Grilling from your list, or delete your account from the Account page. Deleting your account deletes your profile and all your Grillings, including Public ones, and cancels your Stripe subscription. Copies in encrypted backups are removed within [backup retention period — TBD]. Stripe keeps billing records as the law requires. [Retention of unused Guest data — TBD.]
Adults only
grill-me is for people 18 and older. We don’t knowingly collect data from anyone under 18, and we delete accounts that belong to minors.
Your rights and contact
Depending on where you live, you may have the right to access, correct, delete or export your data. You can delete your data yourself at any time. For anything else, contact [privacy contact email — TBD].