Privacy

Raveroll stores what it needs to run your walls. There is no third-party analytics. We do not sell personal information.

  • Account email and a PBKDF2 password hash.
  • Walls, themes, and the testimonials you collect or import.
  • The IP address and time of each collection-form submission, to rate-limit abuse. These rows are not shown on your wall.
  • A Stripe customer id and your plan after you pay. Card numbers stay with Stripe.
  • Two cookies. rr_session keeps you logged in. rr_csrf protects forms. Both are HttpOnly, Secure, and SameSite=Lax.
  • Password reset requests store the email, the IP address, and a hash of the link. The raw link is not stored. Unused links expire after 60 minutes.

Questions: contact support.