← back to the beta
Privacy Beta
Last updated 16 September 2026.Last updated 24 September 2026. Reblika is based in the Netherlands, so this follows the GDPR.
The short version: we store your email so you can sign in, your characters
so you can load them back, and anonymous counts of which parts of the app get
used. We do not send any of it to anyone else, and there is a button that
deletes all of it.
What we store, and why
| What | Why | How long |
|---|
| Your email address |
It is how you sign in. There is no password; we email you a link. |
Until you delete your account |
| Your characters |
So you can open them again on another day or another machine. Stored only if you are signed in. |
Until you delete them, or your account |
| Your share links |
So a link opens your mascot. Each conversation on a link is counted with the link's number, and with nothing about the visitor. |
Until you delete the link or the mascot |
| Your plan |
Which plan you are on and, if you pay, the customer and subscription numbers Stripe gives us. Never your card. |
Until you delete your account |
| Today's conversation time |
How many seconds your mascot spoke each day, and how long you used voice chat, so your plan's daily allowance can be applied. One number a day, never what was said. |
Until you delete your account |
| Sign-in links |
To let you in. Only a hash of the link is kept, so the stored row cannot be used to sign in as you. |
30 minutes |
| A random id in your browser |
To count returning visitors without knowing who they are. It is a random number, not built from your device. |
Until you clear your browser, or opt out |
| Usage events |
Which features are used, how long a visit lasted, whether an export failed. Counts and labels only. |
24 months |
| Country, from your IP |
To know roughly where people are. The address is looked up and thrown away; only the two letter country is kept. |
Kept as a country, never as an address |
| Your browser's time zone and language |
To tell roughly where people really are: an address can belong to a VPN, a clock and a language usually do not. Both are shared by millions of people and neither can point at you. |
24 months |
What we never store
No part of your character ever goes into the
usage numbers. Not the mesh, not the textures, not the thumbnail, not the
name you gave it, not anything you typed.
This is enforced on our server, not just in
the browser: the server keeps a list of exactly which fields each event is
allowed to contain and throws away everything else, so it holds even if the
page is tampered with. The list is published in the repository as
docs/EVENTS.md.
We also do not store your IP address, we do not use advertising or
analytics cookies, and there is no third party tracker on any page. Nothing on
this site talks to Google Analytics, Meta, or any similar service.
Who else sees it
Nobody, with threefour exceptions that are all suppliers doing a job for us:
- Railway hosts the app and the database, in the EU.
- Resend sends the sign-in emails. They see your address because
they have to deliver to it.
- Cloudflare serves the large files, such as clothing and lighting.
- Stripe takes payment for a paid plan. They see your card and billing
details because they process them; we never do.
If you use the conversation feature, what you type there is sent to Google
(Gemini) to answer, and to ElevenLabs to be spoken. That happens only while
you are using it. It is the one place where text you type leaves our servers,
which is why it is called out here rather than buried.
On a share link the same is true of your visitors' words: they go to Google
and ElevenLabs to be answered and spoken, and they are not kept.
We do not sell data. There is nothing to sell and no arrangement to sell it.
The usage counting, in plain terms
We count things like: how many people opened the app, which tabs they
actually used, how long a visit lasted, what kind of device it was, and
whether anything failed. This is how we decide what to build and what to fix,
and on a beta with a few hundred people it is the only honest signal there is.
- It is tied to a random number stored in your browser, not to your
name or your email, unless you are signed in.
- It never contains anything you made or typed.
- It is ours alone, on our own server and our own database.
- If your browser sends Do Not Track, we record nothing at all.
- You can turn it off in Settings inside the app, at any time.
Because this is limited, first party measurement that is never
shared or combined with anything else, we do not put a consent banner in front
of it. If a regulator tells us that is the wrong call we will add one rather
than argue.
The camera, on the practice page
Practice interviews can use your camera to score how you come across. The
picture never leaves your device: your browser turns it into a few numbers,
such as where you looked and how still you sat, and only the score is kept, in
your browser. You can practise with the camera off, and the score does not
count that against you.
Deleting everything
In the app: Settings, then Delete account.
It removes your account, your email address, every character you saved and
your usage rows. It happens immediately and it cannot be undone.
To delete a single character rather than
everything, remove it from your library.
You can also ask us to do it, or ask for a copy of what we hold, with the
form under Your rights below. We will answer within 30 days, and normally much
sooner.
Your rights
Under the GDPR you can ask for a copy of your data, ask us to correct it,
ask us to delete it, or object to us processing it. Ask with the form below.
If you think we have handled it badly you can complain to the Dutch data
protection authority, the Autoriteit Persoonsgegevens.
Children
The beta is not intended for children under 16. We do not knowingly keep an
account for one, and we will delete it if we learn of it.