Privacy

What you give Rivyra

• Your email address, your name and handle, and your password. The password is stored only as a one-way hash, never as you typed it.
• What you add to your profile: a picture, a cover, a bio, links and the interests you choose.
• What you share and do: posts, pictures and video, comments, reactions, saved posts, Moments, messages, shows and episodes you publish, what you write in a listening room, who you follow, block or mute, posts you mark as not interested, and reports you send.

What Rivyra records

• Each sign-in: the time, the network address and the browser it came from. You can see this list, and end any sign-in, under Signed-in devices. A sign-in lasts up to 30 days.
• Whether you have seen a Moment, counted once, visible only to the person who shared it. And which videos you watched in Watch, which is one of the things the feed formula counts. And where you stopped in each episode, your queue, the episodes you saved and what you listened to, so the player can take you back.
• Short-lived counters by network address that limit repeated attempts to sign in or sign up.

Pictures and video

• Uploaded pictures and video are made again from their content before anyone sees them. The data a camera stores inside the file, such as the place it was taken, is removed.
• Media is delivered through links that expire after five minutes, and Rivyra checks who is asking before giving one.

Who sees what

• A public account's public posts and Moments can be seen by anyone, signed in or not. A private account's posts and Moments are seen only by followers it approved. Its name, picture and bio stay visible to everyone.
• You and an account you blocked cannot see each other. Messages are private to the two people in a conversation and stored on Rivyra's servers. They are not end-to-end encrypted. What you write in a listening room is seen by everyone in that room. If you report a message you received, staff can read it and up to three messages either side of it, and nothing else of the conversation.

Cookies

Rivyra sets one cookie, which keeps you signed in. There are no advertising cookies and no analytics from other companies on its pages.

Email

Rivyra emails you to confirm your address, when you ask to reset your password or change your address, when a copy of your data is ready, and when your account is set to be deleted or is suspended. It does not send notifications by email.

How feeds use this

Feeds are ordered by a fixed formula over when something was posted, who you follow, the interests you chose and how people responded. There is no trained recommendation model.

Deleting

• You can delete your posts, comments and Moments. A Moment is removed by itself 24 hours after it was shared, and its files are deleted within a day after that.
• You can delete your account from your account settings. It is hidden at once and deleted after 14 days, and signing in during those 14 days cancels the deletion. You can also ask there for a copy of your data.