Privacy Policy

RizzzBox (“we”, “us”) lets you build and share confession cards. This policy explains what we collect and why.

What we collect

Account data — when you sign in with Google we receive your name, email, and profile photo.
Card interactions — when someone opens a card you built, we record page visits, step events (button clicks and their text, choices, form answers), and notes.
Technical data — IP address, approximate city and country (from edge headers), browser, and device type.
Consent logs — when you accept this policy and the Terms at sign-in, we store your IP address and a timestamp.
Cookies, analytics & ads — we use cookies, Google Analytics, Google Tag Manager, and Google AdSense to understand usage and show ads. Analytics storage stays off until you accept in the banner (Google Consent Mode); ad-related storage stays off by default. If you're in the EEA, UK, or Switzerland, a Google-certified consent management platform asks for your choice on ads and personalization before any ad loads. Everywhere else, you can decline non-essential cookies in the banner.

How we use it

To operate the service, show card owners their responses and analytics, secure the app against abuse, and improve RizzzBox.

Who we share it with

Service providers only: Google Firebase (auth, database), Vercel (hosting), and Google Analytics / Tag Manager. We do not sell your data.

Retention

We keep data for as long as your account and cards exist. Deleting a card hides it from view; records may be retained for legal and audit purposes.

Your rights

You can request access to, or deletion of, your personal data. Contact us and we will respond within a reasonable time.

Contact

Questions about privacy? Email hello@rizzzbox.com.