Privacy
The short version: we collect almost nothing, and we don't sell any of it.
What we have about you. If you sign in: your email address, your handle and display name, and what you do on riff88 (things you publish, like, save, and the notes you leave). If you subscribe to the newsletter: your email address, only after you click the confirmation link. That's the list.
No passwords. Sign-in is by email link, so there's no password for anyone to steal.
Analytics. We measure how riff88 is used with our own first-party events (things like “someone played with the front-page pick” or “someone published”). No third-party ad trackers, no advertising cookies, no data brokers. The only cookie is the one that keeps you signed in.
Emails. Sign-in links, and the newsletter if you asked for it. Every newsletter email has an unsubscribe link that works permanently, first click.
Profile photos. If you add a photo, it's cropped and re-encoded right on your device before it's uploaded — the location and camera details phones embed in photos never reach riff88. You can remove it any time, from your profile or Settings.
Published content is public. Things you put on the shelf, your profile, and notes you leave are visible to anyone. Link-only pages are hidden from browsing and search, but anyone with the link can open them — they're unlisted, not encrypted.
Deleting things. Delete any of your work from its Manage page — gone for good. Want your whole account gone? Email hello@riff88.com and we'll take care of it, including your data.
Where things live. Hosted on Render (US), domain via Cloudflare. Your published files, and the database with the list above, live there.
Questions: hello@riff88.com.