Privacy Policy

Rizzbox (“we”, “us”) lets you build and share confession cards. This policy explains what we collect and why.

What we collect

Account data — when you sign in with Google we receive your name, email, and profile photo.
Card interactions — when someone opens a card you built, we record page visits, step events (button clicks and their text, choices, form answers), and notes.
Technical data — IP address, approximate city and country (from edge headers), browser, and device type.
Consent logs — when you accept this policy and the Terms at sign-in, we store your IP address and a timestamp.
Cookies & analytics — we use cookies and Google Analytics to understand usage. You can decline non-essential cookies in the banner.

How we use it

To operate the service, show card owners their responses and analytics, secure the app against abuse, and improve Rizzbox.

Who we share it with

Service providers only: Google Firebase (auth, database), Vercel (hosting), and Google Analytics. We do not sell your data.

Retention

We keep data for as long as your account and cards exist. Deleting a card hides it from view; records may be retained for legal and audit purposes.

Your rights

You can request access to, or deletion of, your personal data. Contact us and we will respond within a reasonable time.

Contact

Questions about privacy? Email hello@rizzbox.app.