Privacy

Only what an account needs:

• Your phone number, if you sign in with one. It is how we know you next time.
• Your username, which you choose and can change. This is public: it is shown on any stage you take and beside anything you say in a chat.
• A provider account id, if you sign in with Google or Twitter. We store the identifier that provider gives us, and nothing else from them.
• Sign-in tokens, stored as one-way hashes so a copy of our database cannot be replayed as a session.

We do not ask for your name, your email address, your date of birth or your location, and there is no profile beyond a username.

• Video and audio are never recorded and never reach our server. A performance goes directly between the browsers watching it. Nothing is stored.
• Chat messages are not stored. They go to whoever is in the room at that moment and are then gone; someone arriving later sees nothing of what was said.
• Votes, audience counts and who holds which stage live only in memory while a performance is running, and disappear when it ends.

• Login codes: ten minutes, or until used. Then deleted.
• Sign-in sessions: sixty days, or until you log out.
• Your account: until you ask us to delete it.

• Twilio sends the text message containing your login code, so they process your phone number.
• Google or Twitter, only if you choose to sign in with them, and only to confirm the account is yours.
• Heroku hosts the site and its database, and keeps ordinary server logs.
• Google Fonts serves the typeface in our logo, which means your browser makes a request to Google carrying your IP address.

We do not use analytics, advertising or tracking pixels, and we do not sell or share your details with anyone else.

Video and audio travel directly between the people in a performance. That is better for privacy in one way -- we never see or store it -- and worse in another: making a direct connection reveals your device's IP address to the other people connected to that performance, as it would on any video call. If that matters to you, watch rather than take a stage.

Two, both strictly necessary, neither used for tracking: _rapt_fm_key holds your signed-in session, and _rapt_fm_user keeps you signed in between visits if you ask it to.

You can change your username at any time in settings, log out to end a session, or ask us to delete your account and the phone number or provider id attached to it. Ask and we will do it -- there is not much to delete.

Questions about any of this, or a deletion request, go to hello@rapd.fm.