Your privacy

Updated 21 October 2026.

Who we are

N/V Originals Limited, company number 17407115, operates Afterglow and is responsible for the personal data described here. Registered office: 66 Paul Street, London, EC2A 4NA, United Kingdom. Contact support@next-version.co.uk for privacy requests.

What stays on your device

Player names, card choices, preferences and game progress are saved in this browser. Spoken answers are not recorded. Optional photos and videos stay in this browser’s storage on your device; they are not uploaded to an Afterglow account. You control any export or sharing. We do not receive your answers or a record of the cards you play. Device permissions are optional and can be withdrawn in browser settings.

Access and payments

We use purchase references, access status, terms version and consent timestamps to deliver and restore your purchase and handle support. We store your email address, a salted password hash, your account and purchase link, and a basic browser/device label to let you manage two signed-in devices. We never store your password in plain text. Session and password-reset tokens are stored as hashes. The necessary __Host-ag_account cookie keeps you signed in for up to 30 days. Existing test devices may also use __Host-ag_session. Resend sends password-reset emails to your email address and processes their delivery information. Links expire after 30 minutes and work once. Stripe collects checkout contact and payment details and sends receipts. We can view relevant transaction and customer information in Stripe to handle your purchase and support. Afterglow’s access database does not store card numbers.

Security and hosting

Cloudflare hosts the website and access service and processes connection information, including IP addresses. Our access protection stores a time-limited hash derived from the IP address, requested action and time window, plus attempt counts, to prevent abuse. Google Fonts receives connection information when a browser loads fonts. We use necessary browser storage to operate the game. This version does not include advertising pixels or behavioural analytics.

Why we use data

Purchase, access and support processing is necessary to fulfil our contract with you. Security and abuse prevention serve our legitimate interests in protecting customers and the service. We retain records where needed to meet legal accounting obligations and deal with claims. Providing checkout details is required to buy access; optional camera and microphone features are not required. We do not use your game responses for profiling or automated decisions.

Providers and international processing

Cloudflare provides hosting and access infrastructure; Stripe provides payment processing; Resend sends password-reset emails. Google serves the fonts. These providers may process connection or transaction data outside the UK. Their published privacy and data-transfer information explains the applicable safeguards and how to request details. You can also contact us about the providers used for your purchase. We do not sell your personal information.

How long records remain

Local game data and media remain until you delete them or the browser removes them. Server sessions expire after 30 days and expired sessions are removed by daily cleanup. Password-reset links expire after 30 minutes and are removed by daily cleanup. Old sign-in challenges expire after 10 minutes. Rate-limit records expire after 15 minutes and are removed by the same daily cleanup. Account and purchase records remain while needed to provide your access, including access with no fixed expiry. After access ends, retention is determined by unresolved support, refund or dispute matters and applicable accounting or legal record-keeping requirements. Support correspondence is kept while needed to resolve your request and any related dispute. You can ask us to review records we hold about you; we may need to retain records required by law or needed to defend a claim.

Delete local data

Delete saved photos and videos in Naughty nights. Clearing this website’s browser data removes local progress, preferences and media and signs you out of your account. Export anything you want to keep first. Clearing local data does not delete purchase or access records held by us or Stripe.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal data. You can object to processing based on our legitimate interests, including security processing; we will consider your request and explain any compelling reason to continue. Email support@next-version.co.uk. We may ask for proportionate information to verify your identity; do not send full card details or private media. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Provider information: Stripe, Resend, Cloudflare, Google Fonts. Contact the ICO.