Privacy Policy

Effective Date: March 20, 2026

1. Introduction

RabbitHole ("RabbitHole," "we," "us," or "our") provides tools for community members to create webcam, voice, and text chat rooms. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our apps or visit rabbithole.cam. This policy forms part of our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

Account & Identity Data: Username, display name, email address, password hash, age declaration, and optional profile fields.
Room & Community Data: Room names, descriptions, tags, and custom rules from Room Owners.
User Content: Text chat, uploads, images, GIFs, and other media you share. Live audio/video is routed but not stored by default.
Support & Compliance Records: Information you provide when contacting support or filing reports, including feedback messages, replies, and any screenshots or log files you choose to attach. Website support conversations are available to your account and the RabbitHole support team.

2.2 Information Collected Automatically

Device & Connection Data: IP address, approximate location, device/OS/browser identifiers, crash logs, and network metrics.
Usage Metrics: Room joins, feature interactions, and aggregate analytics to understand performance.
Cookies & Local Storage: Session tokens, preferences, and anti-fraud data. Website account and support use a separate, essential sign-in cookie that expires after 14 days unless you sign out sooner.

2.3 Information from Third Parties

Payment Processors: PayPal processes new payments; historical Stripe records remain for support and accounting. RabbitHole sends the payment amount, currency, a shared accessory or membership description and an opaque purchase reference. Private gift messages stay in RabbitHole. Transaction status, card brand, billing country (no full card numbers stored).
Room Owners & Moderators: Report details shared for moderation or investigations.

3. How We Use Information

Service Delivery – Authenticate accounts, route audio/video, show chat, personalize profiles.
Community Safety – Detect spam/fraud, enforce rules, investigate reports, comply with takedowns.
Payments & Commerce – Fulfill purchases, prevent unauthorized transactions, provide receipts.
Service Quality & Improvement – Monitor performance, debug issues, develop new features.
Legal & Compliance – Respond to lawful requests, meet tax/accounting obligations.

4. How We Share Information

Service Providers: Hosting, analytics, anti-abuse, email, and payment vendors under confidentiality agreements.
Room Owners & Moderators: Limited data visible to the team running that room.
Legal & Safety: Disclosure when required by law or to prevent harm.
Business Transfers: If RabbitHole undergoes a merger, acquisition, or asset sale, with notice to users.
Aggregated/De-identified Data: Insights that do not identify individuals.

5. Data Retention

Account Data: Kept while your account is active and generally deleted within 30 days of account deletion, subject to legal requirements.
Room & Chat Logs: Retained based on room needs and legal obligations; report-related data kept as necessary.
Telemetry & Logs: Usually retained up to 12 months for security and reliability.

6. Security

We use TLS encryption, zero-trust access controls, monitoring, and data minimization. No online service can be absolutely secure, so please share information carefully.

7. International Transfers

RabbitHole operates in the United States. By using the service, you consent to data transfer to the U.S. or other countries where our providers operate. We rely on lawful transfer mechanisms such as Standard Contractual Clauses.

8. Your Choices and Rights

Account Controls: Update profile and settings within the app.
Data Access / Correction: Email [email protected] to request a copy of or correct your data.
Deletion: Use in-app deletion where available or email us; certain data may be retained to meet legal obligations.
Marketing Preferences: Unsubscribe via links in our emails or settings.
Appeals: If action is taken on your account, email [email protected] with context.

9. Adults Only and Age Verification (Didit)

RabbitHole is intended for adults 18 and older only. We do not knowingly permit users under 18.

Provider: Didit (third-party age verification processor).

What you submit to Didit: A selfie for age estimation. If Didit cannot confirm you are 18+ from the selfie alone (estimated age in the 16–22 range), you may be asked to provide a government-issued ID on Didit's systems. Biometric and identity data are processed on Didit's systems and subject to Didit's privacy policy.

What RabbitHole receives from Didit: Verification status (approved/declined), warning codes, and session/node identifiers only. We do not receive your selfie, estimated age, ID images, or document-extracted personal details.

What RabbitHole stores: Your self-reported date of birth (from registration), age verification timestamp, and Didit session ID for compliance and support.

What RabbitHole does NOT store: Selfie or liveness media, estimated age from Didit, ID document images, document numbers, legal name from ID, address, nationality, or other extracted ID fields.

Privacy assessment: A Data Protection Impact Assessment for this processing is maintained internally and available on request at [email protected].

10. Room Recordings and Community Responsibilities

RabbitHole does not continuously record live audio/video. Room Owners or participants may use their own tools; participate only in rooms you trust and follow local recording laws.

11. Third-Party Links and Integrations

Rooms may link to or embed third-party services. Review their policies before sharing information with them.

12. YouTube API Services

Our application uses YouTube API Services to enable video searching and embedding features. By using these features, you agree to be bound by the YouTube Terms of Service.

We utilize YouTube API Services, which process data in accordance with Google's Privacy Policy. You can learn more by visiting the Google Privacy Policy.

Our application utilizes the YouTube API solely for real-time video search and rendering within the chat interface. We do not store, retain, or harvest any YouTube user data, personal information, or API data on our servers. All data processing occurs locally and temporarily during your active session.

13. Changes to This Policy

We may update this policy as the service evolves. Material changes will be announced via in-app notice, email, or the Rabbithole website at least 15 days before they take effect (unless required sooner by law).

14. Contact Us

For privacy questions or requests, contact [email protected].

Last Updated: October 1, 2026