Privacy Policy

The Short Version

We don't store your messages. Ever. Your roast input goes to the AI, the AI generates a response, we send it back to you, and the content is gone. We keep zero message data. That's it. That's the policy.

What We Collect

• Anonymous session metadata — whether you provided context, message length ranges, whether you shared the result. No message content. No identifying information.
• Standard analytics — page views and feature usage via Google Analytics 4. This uses anonymized data and cookies you can block with any standard browser extension.
• Payment data (if you tip) — handled entirely by Stripe. We never see, process, or store your credit card information. Stripe is PCI DSS Level 1 certified.

What We Don't Collect

• Your messages or roast inputs
• AI-generated responses
• Your name, email, or any account information (we don't have accounts)
• Your IP address (not stored in our database)
• Anything that could identify who you are or what you said

AI Processing

Your messages are sent to Anthropic's Claude API for processing. Anthropic's API does not use your inputs to train their models. The message is processed, the response is returned, and nothing is retained. See Anthropic's privacy policy for details.

Cookies

We use a minimal anonymous session token (stored in your browser) to track basic usage patterns. Google Analytics 4 may set its own cookies for aggregate traffic analysis. No cookies are used for advertising, tracking across sites, or identifying you personally.

Third-Party Services

• Anthropic (Claude API) — AI processing. No message retention.
• Vercel — Hosting and deployment. Standard server logs.
• Supabase — Anonymous session metadata storage (no message content).
• Stripe — Payment processing for voluntary tips. PCI compliant.
• Google Analytics 4 — Aggregate traffic analytics.

Data Sharing

We don't sell your data. We don't share your data with advertisers. We don't have your data to sell or share because we don't collect it.

Children's Privacy

reFlame is designed for users 17 and older. We do not knowingly collect information from children under 13. Since we don't require accounts or collect personal information, there is no mechanism for us to verify age or collect children's data.

Changes to This Policy

If we change this policy, we'll update the date at the top. The core commitment stays the same: your messages are never stored.