No selling your uncle

Privacy

soggybiscuit.fun stores enough to run your account and your calls. It does not sell that data, and a share link never includes the phone number. The biscuit is nosy on the phone. The database is not a marketplace.

Your account

We store your name, email, a password hash, whether the email is verified, your role, and your biscuit balance. If you sign in with Google, we store the account link Google gives us. Session cookies keep you logged in. The cookie is the session, not a tracking profile.

Payments

Buying a pack sends you to Stripe Checkout. Stripe processes the card. We keep a ledger row: the checkout session id, how many biscuits were added, and the balance afterwards. A finished call adds a row for the seconds spent. We do not store the card number.

What you type

Call fields, saved prompts, and voice descriptions are stored so you can repeat them. A draft of the call form also sits in your browser under the key wh-draft. Clearing site data removes that draft.

The person you call

A live call sends their number, your bit, and the generated prompt to the voice provider so the phone can ring. The history on your account keeps the number, the transcript, and, when one exists, the recording. Other users cannot see your calls. Admins can, because they operate the service.

Share links

A share link is off until you create one. Anyone with the link can hear the recording and read the bit and the transcript. The page does not show the phone number. Revoke the link from the call and the page stops working.

Who processes it

The app host and the database hold accounts, prompts, and call rows.
The phone service places live calls and can store the audio.
The voice service speaks the characters.
Email goes out when mail is switched on.
Google can sign you in when that option is on.

If a service is switched off, that part of the product stays off.

Email verification

When mail is switched on, we email you a confirmation link and a password-reset link when you ask. Otherwise a new account waits for an admin to approve it, unless unverified signup has been allowed.

How long

Account data stays while the account exists. Call rows stay so your history works. An admin can ban an account, which blocks new sessions. Ask the operator if you want an account deleted. They control the database.

The safety and consent policy explains what a call is allowed to say. The terms explain biscuits and who may place a call.