Privacy

What we collect, and what we deliberately don't

• Story submissions are anonymous by design. When someone submits a story through a submission link, we store the text and nothing else. No name, no email, no account, no IP address stored against it. We could not tell the organiser who said what even if they begged us. This is the point of the product.
• Players don't sign in. Joining a game takes a nickname and a 4-letter code. The nickname and scores exist for the game and are deleted with the event.
• Organisers can stay anonymous too. Creating an event needs no account. If you choose to claim an event or sign in, we store your email address — that's the entire account record.
• Event content: the guest of honour's first name, the occasion, the submitted stories, the quiz questions built from them, and (on the Roast & Toast plan) the speech. All of it is deleted with the event.

The 30-day self-destruct

Every event is permanently deleted 30 days after it was created — stories, questions, scores, the speech, all of it. This is automatic and not optional. What happens at the do stays at the do. Account records (your email) persist so you can come back for the next one; you can ask us to delete that too.

Payments

Payments are processed by Stripe, acting as merchant of record. Your card details go directly to Stripe and never touch our servers — we receive only a confirmation that an event was paid for. Stripe's privacy policy is at stripe.com/privacy.

AI features

On paid plans, submitted stories may be processed by Anthropic's Claude API to write the speech, sharpen quiz questions, or power the organiser's assistant. That processing is transient: the text is sent, the output comes back, and Anthropic does not use API data to train its models. If AI features are switched off, everything is generated by our own template engine and no data leaves our server at all.

Cookies and tracking

One cookie, and only if you sign in: a session cookie so you stay signed in. No analytics scripts, no advertising pixels, no third-party trackers, no fingerprinting. That's why there's no cookie banner.

Where data lives

The service is hosted on Render's cloud infrastructure. Magic-link emails are delivered via Resend. Both act as processors on our behalf and neither is permitted to use your data for anything else.

Your rights

Under UK GDPR you can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted before the 30 days gets there first. Email hello@getgrilled.co.uk and a human will sort it. If you think a submission about you is genuinely harmful (rather than embarrassingly accurate), use the same address and we'll take it seriously. You can also complain to the ICO at ico.org.uk, though we'd rather you told us first.