Omorashi Activity Tracker
How your data is collected, stored, and used on this site.
There is no advertising on this site, no advertising network, no tracking pixel, and no analytics product such as Google Analytics. Nothing you record here is sold, rented, or shared with advertisers, and your activity is never used to build a profile for marketing.
There are, however, a small number of external services that necessarily receive your IP address or your content in order to work. They are listed in full further down rather than buried, because pretending they do not exist would be dishonest.
Account data: your username, your email address, and your password. The password is never stored in readable form, only as a bcrypt hash. Also stored: the date you registered, your language choice, a timestamp of when you last used the site, the confirmation that you are 18 or older, and temporary codes used to verify your email.
Activity data: the sessions, timers, and entries you record, your statistics and personal bests, leaderboard scores, daily challenge progress, and any in game items or currency in your inventory.
Profile and social data: your display name, biography, avatar, profile privacy setting, any social links you add, your friends and friend requests, comments you write, reactions you leave, chat messages, direct messages, and co-op session participation.
Media: images you upload to a session, to your private gallery, to your profile gallery, or inside a direct message.
Location data: if you place a pin on the map, the coordinates you chose are stored with that pin. This only happens when you deliberately place a pin. The site never reads your device location in the background.
Technical data: your IP address is processed while you use the site so that request rate limits can be enforced and abuse can be stopped. It is not used to build a profile of you.
Given what this site is for, the entries you record can reveal information about your sexual preferences. Under Art. 9 GDPR this is a special category of personal data and receives stronger protection.
This data is processed only on the basis of your explicit consent under Art. 9(2)(a) GDPR, which you give by creating an account and recording entries. You can withdraw that consent at any time by deleting your entries or your account. Withdrawing consent does not affect processing that already took place.
Because of this, think carefully before uploading images that identify you, and before placing map pins near your home or workplace.
Only what is needed for the site to work. No consent banner is shown because none of the following is used for tracking, advertising, or profiling, and all of it is required for a function you actively requested:
You can clear all of this at any time through your browser settings. If you are using the site anonymously, clearing it will disconnect you from your entries permanently.
These are the only third parties involved, and this is exactly what each one receives:
Maps are handled differently on purpose. Map tiles are fetched by this server and passed on to you, and the map library is hosted here rather than loaded from a content delivery network. Your browser therefore never contacts the map provider directly, and they never see your IP address.
The donation link in the footer is an ordinary link. Nothing is sent anywhere unless you choose to click it.
Some optional game modes use an AI model. When you use one of them, the messages you write and the relevant session context are sent to an external AI provider in order to generate a response. At present this is Ollama Cloud.
This means the content of those conversations leaves this server and is processed by a company that may be located outside the EU. Do not enter anything in an AI conversation that you would not want processed by a third party. The AI features are entirely optional and the rest of the site works without them.
Images are not served as ordinary public files. Private gallery images, direct message images, profile gallery images, and map photos are all stored outside the publicly served area and are delivered only through checks that confirm you are allowed to see them.
Be aware that anyone who can legitimately see an image can still save or screenshot it. Technical access control cannot prevent that, on this site or on any other.
You can use the site without registering. In that case no email address and no password are stored. Your entries are held on the server under a random ID that is kept in your browser, and that ID is the only thing connecting you to them.
If you clear your browser data, or switch to another browser or device, that link is gone and the entries cannot be recovered or reassigned to you. This is a direct consequence of not collecting identifying information, and it cannot be worked around.
Account data and the content you create are kept for as long as your account exists. You can delete your account at any time from the settings page. Doing so removes your account and the content attached to it.
Two things survive deletion in a limited form. Messages you sent to another person may remain in that person's conversation view, in the same way a sent email stays in the recipient's inbox. Backups may hold a copy for a short period until they rotate.
Under the GDPR you have the right to:
You also have the right to complain to a data protection supervisory authority if you believe your data is being handled unlawfully.
The quickest way to reach the staff team or the operator is the Discord server. Join it here and just ask, whether it is a report, a question about your data, or a problem with your account.
If this policy changes in a way that materially affects you, you will be told about it on the site rather than quietly updated. The date below always shows the current version.
Last updated: 12 August 2026