The fine print

Privacy policy

Darling, you’re trusting us with some very personal things. Here’s exactly what we keep, why we keep it, and who gets to see it.

Who we are

Spice Me Up, Lucy (spicemeuplucy.com) is a private community run from Auckland, New Zealand, by Gage and me. We follow New Zealand’s Privacy Act 2020.

Questions, requests or worries about your information: email lucy@spicemeuplucy.com. That inbox is our privacy contact.

What we keep

  • When you join: your username, email address, password (stored scrambled, so nobody can read it, us included), your city or region, your profile type, and the moment you confirmed everyone on the profile is 18 or over.
  • Your profile: your tag line and About Us, your interests, and for each person on the profile a name, gender, date of birth and (if you choose to give it) orientation.
  • Your photos and videos, with the setting you chose for each one.
  • What you do here: your messages, friends, blocks and message filters, the events you create or ask to join, your Party Chat posts, and any reports you make.
  • When you were last here, so members can see “Online now” or “Active today”.
  • Anything you send us through Message Lucy.
  • The technical bits: a login cookie, and the internet address and browser recorded in our web host’s logs and by our security tools (for example when a sign-in fails).

What we use it for

To run the site: showing your profile to members the way you’ve chosen, sending the emails you need (confirming your address, password resets, discreet message alerts), keeping everyone safe (looking into reports, keeping out fakes and bots), and doing what the law requires.

We never sell or rent your information.

Who sees what

  • Visitors who aren’t members see nothing of you: no names, no photos, no profiles.
  • Members with a finished profile can see yours. Each photo and video is seen by everyone, friends only, or only you, as you choose. Your date of birth is never shown, only your age.
  • No location in your photos. We strip the location data out of every photo before anyone sees it. Videos are cleaned on your phone before they’re sent too, but to be completely sure, turn off location for your camera.
  • Event addresses are only shown to guests the host has let in, and the guest list is hidden from everyone who isn’t a guest unless you choose to open it up.
  • Messages are seen only by the people in the conversation.
  • Gage and I, as the people who run the site, can get to what’s stored. We only look when we need to: to run the site, to look into a report, or when the law requires it.

Services we use

A few trusted services help us run the site, and each only gets what it needs to do its job:

  • Hoopla, a New Zealand web host, where the site and your information are kept.
  • Google Workspace, which sends our emails.
  • Bunny.net (Bunny Stream), based in the European Union, which stores and plays members’ videos.
  • Google Fonts and cdnjs, which supply the lettering and some icons. Your browser fetches these directly, so they see your internet address, as any website you visit does.

Some of these keep information outside New Zealand. We only use services that are required to protect it.

Cookies

Just one that matters: the login cookie, which keeps you signed in for 60 days and is renewed each time you visit. Your browser also remembers a few small things for the page you’re on (for example, your username when you click “Forgot your password?”). No advertising or tracking cookies.

How long we keep it

  • Everything stays for as long as your account does.
  • Delete account (Settings) removes it at once and for good: your profile and the people on it, your photos, your videos (from Bunny.net too), the messages you sent, your event requests and Party Chat posts, your friends and blocks. Messages from everyone else in a conversation stay put, and your name there becomes “Former member”. Events you hosted that have already happened pass to Gage and me to look after, so the guests keep the Party Chat.
  • Sign-ups that are never confirmed by email are deleted after 7 days.
  • Our web host’s routine backups may hold a copy for a short while until they’re replaced.

Your rights

You can see and change most of your information yourself on Edit Profile, and delete your account whenever you like. You can also ask us for a copy of what we hold about you, or ask us to correct it: email lucy@spicemeuplucy.com. If you’re unhappy with how we’ve handled your information, tell us first and we’ll put it right. You can also complain to the Office of the Privacy Commissioner (privacy.org.nz).

If something goes wrong

If there’s ever a privacy breach likely to cause serious harm, we’ll tell you and the Privacy Commissioner, as the law requires, and tell you what we’re doing about it.

Grown-ups only

Everyone here must be 18 or over. If we learn that someone under 18 has joined, that account is deleted.

Changes

If we change this policy, the date below changes too, and we’ll tell members about anything important before it takes effect.

Last updated: 29 October 2026