Privacy Policy

What we collect

Your account

• Your email address and password. Passwords are stored as secure hashes, never in plain text.
• Basic account records, like when you signed up and last signed in.

Your application (private)

• Your pitch, your application's status, when you sent it, and our decision with any note or reason we give you. Only you and our team can see it.

Your verified platforms

• When you verify a Twitch, YouTube or Kick account, you sign in on that platform, and we receive a temporary key to read your account's id and name. We keep only the platform, the account's id, its name and when you verified it, then cancel the key straight away. We never see your password and don't keep any access to your account. Once you're a member, your verified platforms show on your profile card.

Your profile (public once you're a member)

• Your username, photo, roles, bio, interests, social accounts, links and clips, and the date you became a member. Until you're approved, only you and our team can see it.

Your area and activity (members only)

• Your home area (a neighborhood, city or region you choose), a place name for it and its borough or county, and whether to show you on the map.
• If you allow it: when you were last active.

Your settings and activity (private)

• Your privacy settings.
• The people you've blocked. Only you can see your blocks.
• Reports you make about other users, and reports others make about you. Only our team can see reports.
• Warnings or bans from our team, if any.
• Counters that limit how often an account can do certain things, to prevent abuse.

Technical information

Like any website, our hosting provider receives your IP address and basic details of each request (such as your browser type) and keeps short-term logs, which we use to keep IRLZ running and secure.

How your location works

When you share your location, your browser asks your device for its position, then snaps it to an area on the device itself: a neighborhood (about 1 km across), a city (about 5 km) or a region (about 40 km). Only that area is sent to us and stored. Your pin shows at the center of the area, and members see a place name for it. We never receive or store your exact coordinates, and we don't add random offsets that could be averaged out.

The Nearby list works out distances on your device, from your current position. That position is used only on your device and is never sent to us.

Turn off “Show me on the map” in Settings → Privacy and your pin comes off the map. Members still see your area's place name, since your home area is part of your membership.

What's public

Once you're a member, your profile card is public so you can share it: anyone with the link can see it, even without an account, and search engines may list it. That includes everything under “Your profile” above, and nothing else. Other members can also see your area and last active, see your pin on the map, and find you in search and the Nearby list, unless you've hidden yourself or blocked them. Your email address, application, settings, blocks and reports are never public.

How we use your information

• To run IRLZ: your account, your application, your profile, the map, search and the Nearby list.
• To review your application.
• To send account emails, like confirming your address and resetting your password, and to tell you the decision on your application.
• To keep people safe: checking content before it's saved, handling reports, blocks and bans.
• To protect IRLZ from abuse, spam and attacks, and to fix problems.

We don't sell your information, and we don't use it for advertising.

Services we use

We share only what each service needs to do its job:

• Supabase stores our database and profile photos, handles sign-in, and sends account emails.
• Resend, our email provider, delivers our emails, including decisions on applications. It receives your email address and the message.
• Cloudflare hosts the website, so it handles every request to IRLZ.
• OpenStreetMap (Nominatim) turns areas into place names. We send only the center of your area, from our servers, never your exact position or anything that identifies you.
• OpenAI checks the text on your profile (username, bio, social handles and links) for harmful content before it's saved. We send only that text.
• Twitch, Google (YouTube) and Kick handle signing in when you verify an account with them, under their own privacy policies. We ask each only for read access to your account's id and name.
• YouTube, Twitch and Kick host the clips on profiles. When you add a clip, our servers ask the platform about it (its title, picture and which channel posted it) to check it's yours. When you watch a YouTube or Twitch clip, your browser loads that platform's player, and it may collect information under its own privacy policy; YouTube uses its privacy-enhanced mode. Kick clips open on Kick.

We may also share information if the law requires it, or when it's needed to protect someone's safety.

Cookies and storage

We use cookies only to keep you signed in. The map remembers where you were looking in your browser's session storage, which is cleared when you close the tab. We don't use analytics or advertising cookies.

How long we keep it

• We keep your information while you have an account.
• When you delete your account, we immediately delete your sign-in, application, profile, area, verified platforms, photos, settings, blocks, and reports made about you. Reports you made about others are kept without your name, so our team can still act on them.
• Place names are cached per area, not per person, so they're looked up only once.
• Copies may remain in our providers' backups and logs for a limited time before they're deleted.

Your choices and rights

• Edit or remove anything on your profile at any time.
• Hide from the map, choose a bigger area, or hide your active status in Settings → Privacy.
• Block anyone, and unblock them in Settings.
• Delete your account and its data in Settings → Delete account.

Depending on where you live, you may also have the right to ask for a copy of your data, to correct it, or to object to how we use it. We'll add a contact address for these requests here soon.

Security

We protect your data with encrypted connections (HTTPS), database rules that deny access by default, and server-side checks on every change to your profile. No system is perfectly secure, so we can't guarantee absolute security.

Age

IRLZ is only for people 18 and over. We don't knowingly collect information from anyone younger. If you believe someone under 18 has an account, report their profile and we'll remove it.

Where your data is processed

Our service providers may process your information in the United States and other countries, which may have different data protection laws from where you live.

Changes to this policy

We'll update this policy when IRLZ changes, and change the date at the top. We'll tell you in the app about big changes. See also our Terms of Service.

Contact

We'll add a contact address here soon.