Privacy Policy
What GoodBoy Room collects, why it is needed, when outside services may receive data, and which controls you have.
TL;DR — your privacy at a glance
- We store what runs your Room: your account, answers, messages, proof, preferences, and progress.
- Optional analytics start off. Essential sign-in, security, and operational records still run.
- Some Warden features use outside AI. Google Gemini may process relevant submitted context.
- Enabled services receive relevant data. These may include hosting, email, Telegram, Google, and Microsoft Clarity.
- Your role is not your orientation. Content permissions are separate and should not be guessed.
- You have choices. Review settings, change analytics consent, or request account review. Deletion has limits.
Optional analytics & experience
Essential login, account, and operational security records are not turned off here. This setting controls optional analytics and experience measurement.
Checking your current optional analytics setting…
You may change your mind later. Your choice is saved by the existing GoodBoy privacy service. Advertising remains disabled in this control.
1. What data we collect
The categories below describe features present in the GoodBoy Room source. You may not use every feature.
Account and identity
Email address, username, verification or login state, linked sign-in accounts, passkey metadata, login and security events, and settings.
Intake and preferences
Age/adult confirmation, Agreement acceptance, onboarding answers, selected language and titles, avoidance preferences, optional Discovery answers, and revisions.
Room activity and GBC
Lessons, check-ins, Missions, submissions, corrections, badges, credit changes, reward history, progress, timestamps, and the technical events needed to keep the system consistent.
Private content
Messages, text and uploaded proof, and image or audio attachments you choose to submit. Content may be sensitive and can be accessible to authorized reviewers.
Technical and usage data
IP address, browser or device details, error logs, session and authentication cookies, operational telemetry, and—if enabled—optional analytics identifiers.
Communications
Notification settings, quiet hours, email or Telegram delivery information, account and support requests, and related delivery or audit records.
Some information, especially private proof and optional personal preferences, could reveal sensitive facts. You should submit only what you choose to share under the visible feature permissions.
2. Why we use this information
- To create accounts, verify access, prevent abuse, and protect the service.
- To display your Path, record progress and proof, award or adjust GBC, and provide Master review and corrections.
- To remember settings and adjust instruction presentation where you have chosen personalization.
- To send requested or enabled Signals, reminders, account messages, and support responses.
- To detect technical failures, investigate account problems, and maintain system integrity.
- With optional analytics permission, to understand site performance, navigation, and product experience.
We distinguish account-essential processing from optional measurement; disabling optional analytics does not disable necessary sign-in, transactional records, or fraud and security logs.
3. The Warden, personalization, and outside AI
Warden features can use explicit intake and Discovery answers, permitted lesson or Mission context, events, reactions, preferences, and progress records to produce help, summaries, Signals, or suggestions. Some choices are handled by approved rule-based logic; other configured features can call Google Gemini or another external AI provider. This means applicable submitted context may leave GoodBoy infrastructure for processing by that service.
Not every Warden function sends the same information, and a new Discovery answer does not by itself authorize an unrelated sensitive proof review. Private content must be reviewed under the permission and feature controls for the specific workflow. The Warden does not know your thoughts and should not infer sexual orientation or consent from chosen role or obedience.
AI output can be wrong or incomplete. Authoritative account changes, sensitive judgments, and consent decisions should remain subject to their own permissions and review.
4. Services that may process data
Based on enabled features and configuration, GoodBoy Room may interact with:
- Hosting and database operators to store accounts, media, logs, and application data.
- Email delivery services for verification, requested notifications, and support communications.
- Telegram if you connect Telegram or enable a Telegram Signal or sign-in flow.
- Google for a selected sign-in flow, and separately Google Analytics or Google Tag Manager when configured and permitted.
- Microsoft Clarity for optional experience measurement when configured and permitted.
- Google Gemini for configured AI-assisted workflows using the context supplied to that workflow.
Providers may apply their own service terms and handling rules. A connected feature can share identifiers, messages, or submitted context necessary for that feature. We do not list unverified processor contracts or claim external processors immediately delete historical records when you change a setting.
5. Cookies, operational telemetry, analytics, and advertising
Essential cookies support login, account security, and storage of privacy choices. The GoodBoy privacy-choice cookie is configured for up to 365 days. Analytics and advertising storage begin denied under the reviewed consent implementation; optional measurement may use Google Analytics and Microsoft Clarity when allowed and configured.
Separately, the application can record bounded operational events for reliability and business functions even when optional analytics is denied. Event records can include action labels, timestamps, page or feature identifiers, and duration bands; they are not intended to reproduce message bodies, raw intake answers, or proof contents as routine analytics payloads.
Advertising is disabled by default in the reviewed configuration. We did not verify a live data-sale arrangement, and the reviewed source does not establish one. If advertising or other sharing is activated later, additional notice and controls may be required. You can withdraw optional measurement permission; this stops new consent-dependent collection and requests browser-cookie clearing, not retroactive deletion from provider backups.
Change your optional analytics choice or review account settings.
6. Private proof, messages, and boundaries
Text, image, audio, and other submitted proof can be stored with a Mission and made available to Master or authorized moderators/reviewers. Some proof-review tooling may analyze permitted submissions. Your choice of proof type, adult category, or language preference should not silently authorize all other categories. Do not upload material you do not have the right to share.
Privacy preferences do not replace content permissions. In particular, identifying as straight, gay, bi, or otherwise is optional and does not decide whether someone accepts a chosen male authority dynamic. We should not infer sexual orientation from gameplay, chosen language, or proof format.
7. Data retention and deletion limits
Retention depends on the record and purpose. Account records may be needed while an account is active; Mission and GBC ledger history may be needed to explain credits, judgments, and disputed activity; security, consent, and delivery logs can be needed to investigate errors or abuse. Historical account activity may remain in backups or audit records after an account review, where retention is necessary.
For the optional browser consent cookie, the current configured lifetime is up to 365 days. The available backup does not establish verified deletion intervals for every database table, uploaded file, vendor log, or backup. We therefore do not claim a universal deletion timetable or instant erasure. Applicable legal rights and the outcome of a confirmed request may vary by location and record category.
8. Choices and requests
- Use your account Privacy & account settings for supported notification, connected-account, and privacy choices.
- Use the privacy choice panel (where available) to deny or withdraw optional analytics.
- Use Support to ask for help, access review, correction, or account review (sign-in required).
- Account discharge/deletion request processes may require verification and human review. A submitted request is not the same as immediate deletion.
- We will assess requests involving access, correction, deletion, and withdrawal in accordance with applicable law and the available identity verification process.
Do not place passwords or sensitive proof in an ordinary support message. Some requests may require confirmation that you control the account.
9. Safety, access, international services, and changes
GoodBoy uses authentication, permission checks, and application security safeguards, but no online service can promise absolute security. Data may be processed or stored where providers operate, potentially outside your home jurisdiction. Authorized personnel may access information needed for support, moderation, account review, or service security.
The Room is intended only for adults aged 18 or older. It is not designed as a service for minors. We may revise this page when data practices change, and material processing changes should receive appropriate notice and choice before activation.
10. Questions and contact
For account-specific privacy or Agreement concerns, use GoodBoy Support after signing in or the Privacy & account section. A public privacy email address and comprehensive processor/retention schedule were not established in the reviewed source; those operational details still require owner verification before this document is treated as final legal compliance advice.