1. Information We Collect
We collect the following categories of information when you use OurRealm:
- Account information — email address, password hash, signup timestamp, OTP verification records.
- Username and profile information — display name, username, bio, avatar, banner, profile customization, selected interests, mode selection, public links.
- User-generated content — text posts, images, videos, sounds, comments, reactions, hashtags, saved items, shares, and content created in Groups or Realms.
- Messages — direct messages between friends, including support tickets in conversations with @support.
- Media uploads — uploaded images, video, and audio along with file metadata.
- Support tickets — subject, category, status, conversation contents, optional screenshot evidence attached to reports.
- Sound upload rights confirmation — when you upload a sound we store a timestamped record that you confirmed you own or have permission to upload the audio, plus the user id, sound id, app version, and the originating IP / user-agent. This is used internally for moderation and DMCA response.
- Device information — operating system, application version, locale.
- Browser information — user agent, viewport size, browser type and version.
- IP addresses — for security, abuse prevention, and approximate location.
- Approximate location — derived from IP (typically city/region level); we do not collect precise GPS without explicit prompt.
- Usage analytics — pages visited, features used, basic interaction events.
- Crash logs — exception and error reports to diagnose product issues.
- Security logs — sign-in attempts, failed logins, brute-force lockouts, session tokens.
- Moderation logs — actions taken by admins (Approve, Hide, Restore, Delete, Ban User) and associated audit data.
- Report data — user-submitted reports, including reason, optional detail, optional screenshot attachments.
- Cookie and session information — see the Cookie & Tracking Notice.
2. How We Use Information
We use your information to operate, secure, and improve OurRealm; create and maintain your account; deliver friend, messaging, and presence features; personalize your feed based on interests, hashtags, and friends; respond to support tickets; enforce these Terms and our Community Standards; detect, investigate, and prevent abuse, fraud, and security incidents; and comply with legal obligations.
3. Sharing
We do not sell personal information. We share data with:
- Service providers — vendors required to operate the platform under contractual confidentiality (see the Vendor Inventory below).
- Other users — only as you direct (public posts, friends-only posts, custom audiences).
- Law enforcement and legal authorities — when required by valid legal process, or to protect users, our rights, our property, or public safety. See section 9 below.
4. Vendor Inventory
We use the following categories of service providers. Specific vendors may change as the product evolves; this section is updated when material changes are made.
- Hosting & infrastructure — cloud compute, ingress, and edge networking.
- Database services — managed MongoDB for primary data storage.
- Authentication — first-party JWT and OTP today; future federated providers may be added with prior notice.
- Storage — object and file storage for uploaded media (today: ephemeral pod storage; future: durable cloud object storage).
- Realtime / messaging — Supabase Realtime for the unified messenger and online presence channels.
- Analytics — first-party in-app analytics today; lightweight third-party analytics may be added with prior notice.
- Email delivery — transactional email for OTP, password reset, and security notifications.
- Customer support — internal admin ticketing today; future third-party CRM / help-desk may be added with prior notice.
- Payment processing — not currently active. No payment processor is engaged at this time.
5. Children's Privacy (COPPA)
OurRealm is not directed to children under 13. We require an age confirmation at signup. If we learn we have collected personal information from a child under 13, we will delete the account and any associated data. Parents or guardians who believe their child has created an account may email OurRealmSocial@gmail.com.
6. Your Rights
You can access, edit, and delete most of your information from Account Settings, including deleting your account (see the Account Deletion Policy).
GDPR (EU/UK users): You have rights to access, rectify, erase, restrict, and port your data, and to object to certain processing. To exercise these rights, email OurRealmSocial@gmail.com.
CCPA / CPRA (California residents): You have rights to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any sale or sharing of personal information. We do not sell personal information.
7. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Service. Specific retention practices:
- User accounts — retained while active; on deletion, the visible profile is removed and the account row is anonymized. Limited records (e.g. for legal compliance or abuse prevention) may persist.
- Messages — retained while both participants' accounts exist and the conversation has not been deleted.
- Support tickets — retained while the linked account exists; closed tickets may be retained for audit and pattern-detection purposes.
- Moderation audit logs — retained for up to 90 days unless needed for an active investigation.
- Security logs — login attempts, lockouts, and session records are retained for short security windows.
- Internal webhook event logs — retained for up to 30 days (these are internal-only event records, not external integrations).
We do not claim immediate or irreversible deletion. Deleted content may be retained for limited periods for legal compliance, fraud prevention, abuse prevention, and platform security.
8. Security
We use industry-standard safeguards including encryption in transit (HTTPS / WSS), hashed passwords, brute-force lockouts, role-based admin permissions, and audit logging on admin actions. No system is perfectly secure; please use a strong unique password and report suspicious activity to OurRealmSocial@gmail.com. The Service does not claim end-to-end encryption.
9. Legal Disclosures
We may disclose information when required by law, in response to a valid subpoena, court order, search warrant, or preservation request, or when we believe in good faith disclosure is necessary to protect users, OurRealm's rights or property, or public safety. Our internal procedures for handling such requests are not published.
10. International Transfers
OurRealm may process your information in countries other than the one in which you live. By using the Service, you consent to such transfers consistent with applicable law.
11. Changes
If we make material changes we will post the updated policy with a new effective date and version. Material changes that affect your rights will be highlighted in-app or by email.
12. Contact
Privacy questions: OurRealmSocial@gmail.com.