Privacy Policy

Last updated: March 31, 2026 · Effective: March 31, 2026

      Short version: PolyQuest collects only what it needs to run the service,
      never sells your data, and treats your relationship style, identity, and quiz results
      with the discretion they deserve.
    

1. Who We Are

PolyQuest ("we", "us", "our") operates the PolyQuest app and website at polyquest.polsia.app. PolyQuest is a social platform for the polyamorous, ethically non-monogamous, and relationship-curious community, offering compatibility quizzes, community profiles, messaging, and TTRPG-style social games.

For privacy questions, contact us at: privacy@polyquest.polsia.app

2. Information We Collect

Account Information

Email address and username (required to create an account)
Display name, pronouns, bio, and avatar (optional, set by you)
Relationship style and orientation tags (optional, visible on your profile)
Password (stored as a bcrypt hash — we never store plaintext passwords)

Content You Create

Messages you send to other users (stored to deliver them)
Quiz responses and compatibility scores
Polycule group memberships and names you create
Dice rolls and game room interactions
Reports you file about content or users

Automatically Collected

IP address and approximate location (for security and rate-limiting)
Browser/device type and OS (for compatibility)
Session tokens (stored in browser localStorage, expire after 30 days)
Basic usage logs (feature usage counts, not content)

What We Do NOT Collect

We do not sell advertising and do not build ad profiles
We do not collect precise GPS location
We do not scan or analyze message content for advertising purposes

3. How We Use Your Information

Provide the service: Deliver messages, calculate quiz compatibility, run game rooms
Safety and moderation: Detect spam, abuse, and policy violations; review reports
Service improvements: Understand which features are used (aggregate, anonymized)
Communications: Send transactional emails (quiz invites, game invites, DM notifications) — only if you've enabled them in Notification Preferences
Billing: Process subscription payments via Stripe (we do not store card numbers)

4. Sensitive Information

PolyQuest is designed for the polyamorous and ENM community. Your relationship style, pronouns, sexual identity tags, and quiz results about intimacy and BDSM dynamics are sensitive personal information.

We apply additional protections to this data:

Sensitive profile fields are only visible to other logged-in users unless you set your profile to public
Quiz results are only shared with participants in the same quiz session
We do not share sensitive profile data with third parties for any purpose

5. Sharing Your Information

We do not sell your personal data. We share data only in these circumstances:

With your consent: When you choose to make your profile public or share quiz results
Service providers: Stripe (payments), email delivery providers — under strict data processing agreements
Legal requirements: When required by law, court order, or to protect safety
Business transfer: If PolyQuest is acquired, data transfers with the service (you will be notified)

6. Data Retention

Account data: retained while your account is active
Messages: retained until you or the recipient deletes them (future feature)
Quiz sessions: retained indefinitely for your history
After account deletion: data purged within 30 days, except where legally required to retain

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Port your data in a machine-readable format
Object to certain processing activities

To exercise any of these rights, email privacy@polyquest.polsia.app. We respond within 30 days.

8. Children's Privacy

PolyQuest is intended for users 17 years of age and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EU). If you believe a child has provided us data, contact us immediately and we will delete it.

9. Security

Passwords stored as bcrypt hashes (never plaintext)
All data transmitted over HTTPS/TLS
Session tokens are randomly generated and expire
Database access restricted to application servers
Regular security reviews of authentication and data access paths

10. Cookies and Local Storage

PolyQuest uses localStorage (not cookies) to store your session token. This token authenticates your requests to our API. No third-party tracking cookies are set.

The service worker (PWA) may cache app assets for offline use. These caches contain only app code and UI assets — not your personal data.

11. Third-Party Links

PolyQuest may contain links to external websites. We are not responsible for the privacy practices of those sites. Review their privacy policies independently.

12. International Transfers

PolyQuest is operated in the United States. If you access the service from outside the US, your data is transferred to and processed in the US. By using PolyQuest, you consent to this transfer. We apply appropriate safeguards consistent with applicable law.

13. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information we collect and how we use it
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell data)
Right to non-discrimination for exercising your rights

To make a CCPA request, email privacy@polyquest.polsia.app.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you via email (if you have notifications enabled) and update the "Last updated" date above. Continued use of PolyQuest after changes constitutes acceptance of the updated policy.

15. Contact Us

Questions about this policy or your data:
📧 privacy@polyquest.polsia.app
🌐 polyquest.polsia.app