Privacy policy.

Updated October 30, 2026 · North America

Operated by GRIM in North America. Public support, privacy and copyright contact: grimamonroll@gmail.com or Help & safety.

This policy explains what GrimmySpace collects, why we use it and the choices you have. Contact the operator through Help & safety for privacy questions, account removal, or a copy of your information. This policy describes the current site, including profiles, Friends, community posts, Death’s posts and shared chat.

What we collect

• Account details: email, authentication records, a permanent username and account number. Display names can change and are limited to 40 characters. Passwords are handled by our authentication provider; we do not display them to moderators.
• Information you share: display name, bio, mood, banner text, chosen music and GIF URLs, sticker positions, saved chat emoticons, sent emoticon URLs, profile picture, uploaded repeating background images and tile settings, community posts and attached photos, post edits, replies, hearts, guestbook notes, chat messages and reply context, Friends requests and connections, music favorites, and privacy choices.
• Shop records: saved game-session state, validated move counters, daily game earnings and reward receipts, your Boobux balance, owned themes, pets, cursors and PFP frames, equipped items, saved three-color name-effect preferences, purchase history and administrator balance adjustments. Equipped items appear where you use them in the app. We also store payment order and session references, amounts, currency and fulfillment receipts. Stripe handles payment details; card numbers are not stored in our app database.
• Safety and support records: reports, moderation actions, roles, badges, muting status, and support messages and contact email.
• Session and technical information: necessary authentication cookies, browser storage used by authentication, and technical request information handled by hosting and service providers. Support rate limits use a hashed IP address when the hosting service supplies one, otherwise a hashed contact email.
• Age and rules acceptance: we check the birth date you enter and discard it after processing. We store whether you meet the minimum age and when you accepted the current rules; we do not store your birth date in our app database.
• Online status: when the site is open, a heartbeat records recent activity so members can see who has been active in the last minute.

How we use it

We use information to create and authenticate accounts, show profiles and content, deliver Friends requests, play chosen media, display online members, prevent abuse, moderate reports, answer requests, and comply with legal obligations. We do not sell personal information or run behavioral advertising in the current app.

Who can see it

Your profile and community posts are visible to signed-in members by default; you may restrict them to accepted Friends. You may hide your Friends list, turn off requests or guestbook notes, and appear offline. Blocking prevents profile access and direct interactions between those accounts; muting hides that person from your feed and chat. These controls do not recall copies already seen by others. The community feed and shared chat are visible to signed-in members. Pending Friends requests are visible only to the participants. Your email is not included in profile, feed, chat, Friends or online-list responses. Reports are available to authorized moderators; support contact details and privacy requests are available only to the administrator. Private messages are visible to their participants in the app; reported messages can be reviewed by moderators. They are stored on our servers and are not end-to-end encrypted.

Keep your home address, precise whereabouts, phone number, financial details and other sensitive information out of posts, profiles and chat. Privacy controls cannot prevent another member from taking a screenshot or sharing something elsewhere.

Death’s posts and media

Death’s published posts and attached photos and videos require a signed-in adult account. We store Death lifetime membership grants and display the Death badge beside member names. New website accounts created during free enrollment receive a permanent grant; after enrollment closes, accounts without a grant need the $10 one-time lifetime membership. Only the owner can publish in that section or access unpublished drafts and unattached media. Uploaded originals and optional compatible video copies are stored with the service. The owner can export post records and a media inventory. Desktop video conversion uses a private, revocable connection that expires after 24 hours and can read queued originals and upload playback copies. It does not grant access to member messages or other account administration.

Services we use and external media

We use service providers to run accounts, send account emails, host and deliver the website, store the database and uploaded files, process payments and prevent fraud, and supply GIF search and external media. These providers receive the information needed for their part of the service:

• Account and email providers handle login details, email addresses, confirmation messages and session information.
• Hosting, network, database and file-storage providers process stored account data, member content, uploaded files, support records and technical logs such as IP addresses and request information.
• Stripe supplies the payment component. Its scripts can receive device, browser, IP and usage information for security and fraud prevention when loaded, even before a purchase. Stripe processes payment details during checkout; card numbers are not stored in our app database.
• GIPHY and other media hosts receive your browser’s requests when you search for or load their content. Those requests can include your IP address, browser information and GIF search terms. A custom music or image URL connects visitors to that URL’s host.

Providers may keep operational logs and backups under their own practices. You can request the current provider list and more details through Help & safety. See Stripe’s privacy policy and GIPHY’s privacy policy for those components. We do not control third-party services or copies other people keep.

Cookies and storage

The app uses necessary cookies/browser storage for login and session continuity. We do not add an advertising tracker. Payment and media components may collect technical or usage information and use their own cookies or storage under their providers’ policies. Blocking or clearing authentication storage may log you out or prevent account features from working. Drafts may be stored temporarily on your device to recover interrupted writing. Sound, decoration visibility and larger-text preferences are stored on your device; music favorites are stored with your account. Third-party media providers may use their own technologies under their policies.

Retention and deletion

Account, profile, post and Friends data stays in the active database until removed or the account is deleted, subject to safety and legal needs. Changing or removing a photo replaces or deletes its active stored file. Online entries become invisible after one minute without activity and are cleaned up during later heartbeats. The shared chat deletes everything beyond the latest 150 messages from its active table when a new message arrives. This is a count limit, not a promise that messages disappear after a particular time. Reports preserve a restricted copy of the reported text, attached profile/post photo when available, and relevant context separately, so reporting does not lose its evidence when ordinary chat rolls over. Attached media may remain in storage until operator cleanup; removal prevents normal member viewing.

Reports, moderation history, support records, authentication records and provider backups may remain longer for handling requests, security, legal obligations or disputes. We do not promise that deletion from active storage instantly erases every provider backup or copies kept by other members. The administrator is responsible for reviewing support and moderation records for continued need; there is currently no automatic fixed-day deletion schedule for those records.

Private messages and status

One-to-one private messages are available only between accepted Friends. Group conversations and clique channels are available only to accepted group members. We store ownership, invitations, membership and read markers, and group messages. Joining gives access to earlier group messages. Clique channels retain their latest 150 messages; group conversation history remains until removed or handled through a verified deletion request. Leaving or removal ends future access; messages already shared remain visible to other members. Closed group records may be retained for support, safety and legal needs. Message contents are shown to the participants, and a reported message is preserved for restricted moderator review. Messages are stored on our servers and are not end-to-end encrypted. Unfriending or blocking disables one-to-one conversation access; stored records may remain for verified privacy requests, safety review, disputes, or legal obligations. Featured friends choices follow your Friends-list visibility setting. Mood status disappears from display when its chosen time expires, although its database record may remain until replaced or deleted.

Your choices and requests

You can edit profile content and community posts, remove your own chat messages and replies, remove guestbook notes on your profile, manage Friends, block or mute members, set privacy and music preferences, and sign out. Settings provides a downloadable app-data export; private operator evidence and full deletion require an ownership-verified request. You can request access, correction, a data copy, account deletion, or a privacy review through Help & safety. Tell us the username and request; do not send a password. We may verify ownership, and applicable law may allow or require some retention. If you believe your information is being misused, send a safety report. Depending on where you live, additional privacy rights may apply; the operator will consider requests under applicable law.

Adults only · underage accounts

GrimmySpace membership is for adults ages 18 and up, and higher local minimum ages still apply. People under 18 may not create an account or use member features. We check the birth date entered during signup or renewed policy acceptance, then discard it after processing; we store eligibility and the acceptance version, not the birth date. This is a self-declaration, not an identity-document check. If we learn that an account belongs to someone under 18, we may restrict or remove it and handle its information as required by law. Anyone can report an underage account through Help & safety without signing in.

Security, location and changes

We use authenticated account access, server-side permissions, and encrypted connections, but no service can promise absolute security. The operator is based in North America; providers may process information in the United States and other countries. Legal protections may differ by location. We will revise the effective date when this policy changes and notify members or request renewed acceptance for material changes where appropriate.