Privacy Policy

1. Who we are

RantPark (吐槽公园) is an early-stage web game run by a small independent team. During the beta the fastest way to reach us about privacy is the in-app Feedback button (choose “Other” and mention privacy) — it reaches the operators directly.

2. What we collect

Anonymous account

A random account ID, a generated park nickname and paper doll, and a device key (stored hashed) so this browser can sign you back in. No real name or phone number is needed.

Email & password (optional)

Only if you choose to bind an email to recover your account. The password is stored hashed.

What you write and do

Rants, comments, arena statements, reactions, votes, bets, tips, outfits, coin ledger, quests, badges, crews, follows and blocks. For safety review we keep the original text you typed alongside the automatically masked public version; only moderators can see the original.

Activity

The last time you were active and which days you visited (used for streaks and anonymous retention statistics), and the invite code you joined with, if any.

Feedback

What you send through Feedback, the page you were on, your browser type, and the contact detail you choose to leave (optional).

Error reports

When the app crashes in your browser we receive the error message, technical stack trace, page path and browser type — never the text you were writing.

Technical logs

Our servers log requests (time, path, status, a request ID and your account ID) to keep the service running. IP addresses are processed by our hosting providers to deliver and protect the service; we do not store them in our database.

3. Why we use it

• To run the park: show your rants, run arenas, keep your coins and outfits.
• To keep people safe: detect personal information and harmful content, handle reports, apply cool-downs.
• To generate AI responses (see section 4).
• To improve the beta: aggregate, non-identifying statistics such as how many newcomers post or come back the next day.
• We do not sell your data, we do not use it for behavioral advertising, and we do not build marketing profiles. Sponsor placements in the park are chosen by context (which page or arena), not by who you are.

4. AI features

The Tree-Hollow Sprite, the AI sparring partner, AI verdicts and “AI, design my doll” send the relevant text (for example your rant’s title and masked body, or arena statements) to Anthropic’s Claude API to generate a reply. Under Anthropic’s commercial terms, API inputs are not used to train its models by default. We log only that a call happened, its purpose, timing and size — not its content.

AI characters are clearly labeled. They are not therapists and their verdicts are part of a game, not judgments about real people.

5. Who helps us run the park

Vercel

Hosts the website.

Fly.io

Hosts our servers and database (United States).

Anthropic

Provides the Claude AI model for AI features.

GitHub

Stores our source code and encrypted daily database backups.

Sentry (if enabled)

Receives crash reports to help us fix bugs. Not enabled at the time of writing.

6. Where your data lives

Our servers and backups are in the United States. If you visit from elsewhere, your data is transferred there. We rely on our providers’ standard contractual safeguards for international transfers.

7. How long we keep things

Your account and content

Until you delete them. Deleting a rant takes it down immediately; deleting your account wipes your content and identity right away.

Database backups

Daily backups for 14 days on our server, encrypted off-site copies and volume snapshots for 30 days. Deleted data disappears from backups as they rotate out — within 30 days.

Notifications

180 days.

AI usage records (no content)

180 days.

Error reports

30 days after the error last happened.

Handled feedback

Up to 12 months, then deleted. Feedback is deleted immediately if you delete your account.

Server logs

Kept by our hosting provider for a short rolling period (typically days).

8. Your choices and rights

• Export: Me → Settings → Data & privacy → “Export my data” downloads everything where you are the actor, as JSON.
• Delete: the same page lets you delete your account. Your rants, comments and arena statements are wiped and taken down, your identity details are erased, and the account stops working. Records that no longer point to anyone (for example coin bookkeeping) may remain.
• Correct: you can change your nickname, doll and settings at any time.
• Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA) you may have further rights — to access, correct, delete, restrict or object to processing, and to complain to your data-protection authority. Contact us through Feedback and we will respond within 30 days.
• Our legal bases (GDPR): performing our agreement with you (running the park), legitimate interests (safety, security, improving the service), and consent where we ask for it.

9. Cookies and local storage

We only use what the park needs to work: local storage in your browser for your sign-in tokens and device key, your language and display preferences, and a pending invite code; and one cookie, rp_lang, that remembers your language so pages load in the right one. We use no advertising or third-party tracking cookies and no analytics trackers. If we ever add optional analytics, we will ask first.

10. Age

RantPark is not for anyone under 16. If you believe someone under 16 is using the park, tell us through Feedback and we will remove the account.

11. Sharing outside the park

Anything shared off-site — link previews, clips, cards — is anonymous: it shows park nicknames and dolls only, and content that was hidden, sealed, deleted or marked “just want to be heard” is never shown in previews. Rant pages ask search engines not to index them.

12. Security

Connections are encrypted (HTTPS), passwords and device keys are hashed, off-site backups are encrypted, and access to the database is limited to the operators. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.

13. Changes

If we change this policy in a way that matters, we will update the date above and ask you to confirm again the next time you visit.