1. Overview
This Privacy Policy explains how re-do collects, uses, stores, and shares information when you use re-do.net and related services. re-do is a creative platform built around creating, sharing, learning, and re-doing.
2. Information re-do collects
Depending on how you use the service, re-do may collect:
- Account and identity information: identifiers associated with your AT Protocol account, such as your DID, handle, display name, and account settings.
- Birthday and country for age and jurisdiction checks: during sign-up, re-do asks for your full date of birth and country. re-do uses this information to determine which age, parental-consent, or account-access requirements may apply in the country associated with your account and to support compliance with applicable laws and platform rules. Where an applicable law requires age-assurance information to be deleted after use, re-do may keep only the resulting eligibility decision and other information needed to administer that rule.
- Content you provide: creations, descriptions, tags, images, links, attribution, branch or re-do relationships, and other information you choose to publish.
- Connected account information: when you connect Twitch or YouTube, re-do may store the provider name, provider account or channel identifier, handle, display name, and timestamps needed to maintain and verify the connection. re-do uses these connections to verify that media you submit belongs to the connected identity.
- Waitlist and invitation information: your email address, invitation status, invite code, delivery status, and related timestamps when you join or are invited through the waitlist.
- Age-review and parental-consent information: where an age rule requires manual review or parental or guardian consent, re-do may store the applicable rule version, review status, AT Protocol identity, guardian email address, consent status, delivery records, and related timestamps.
- Session and security information: information needed to authenticate you, maintain a signed-in session, prevent abuse, and protect the service.
- Usage and analytics information: re-do uses Google Analytics on the website, which may collect information about visits and interactions such as pages viewed, approximate location derived from network information, device or browser information, and referral information, subject to Google's applicable settings and policies.
3. How information is used
re-do may use information to:
- provide, operate, maintain, and improve the service;
- authenticate users and maintain account sessions;
- publish and display creations and re-do relationships;
- store, resize, deliver, and protect uploaded media;
- connect and verify Twitch and YouTube identities and media;
- administer invitations and the waitlist;
- measure usage and understand how the service is used;
- detect abuse, fraud, security incidents, and technical problems; and
- apply age, parental-consent, and jurisdiction-related account rules;
- carry out manual eligibility reviews where needed;
- request, deliver, verify, and record parental or guardian consent where that pathway is enabled;
- review or update eligibility when age requirements or laws change;
- comply with legal obligations and enforce re-do's terms.
4. Google and YouTube data
If you choose to connect a YouTube account, re-do uses Google OAuth to request the access needed for the connection and to verify the identity associated with YouTube media. re-do does not ask you to provide your Google password.
Information received from Google APIs is used only to provide and secure the YouTube connection and related re-do features. Your use of Google and YouTube remains subject to Google's and YouTube's own terms and privacy policies.
5. When information is shared
re-do does not sell your personal information. Information may be shared or processed in these circumstances:
- Public content: information you deliberately publish may be visible to other users and the public.
- Service providers: infrastructure, analytics, authentication, media, email, and other vendors may process information as needed to provide their services to re-do.
- Connected services: information may be exchanged with services such as AT Protocol providers, Twitch, Google, and YouTube when you use those integrations.
- Legal and safety reasons: information may be disclosed when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure the service.
6. Infrastructure and international processing
re-do uses third-party infrastructure, including Cloudflare, to deliver and store parts of the service. Information may be processed in countries other than the country where you live, subject to the safeguards and terms used by the relevant service providers.
7. Data retention
re-do keeps information for as long as reasonably necessary to provide the service, maintain security and records, resolve disputes, comply with legal obligations, and support legitimate operational needs. Retention periods may vary by type of data.
Date of birth and country may be retained where reasonably necessary to administer age and jurisdiction-related eligibility. In jurisdictions where applicable law requires age-assurance information to be destroyed after it is used, re-do will minimize or delete the underlying age-assurance data and may retain the resulting eligibility decision, applicable rule, country, and related audit information. Age-review and parental-consent records may be retained as reasonably necessary to demonstrate or administer the applicable eligibility decision.
OAuth state records and other temporary security records may be retained only for the period needed to complete or protect the relevant flow.
8. Your choices
Where the relevant feature is available, you can update account settings, disconnect linked Twitch or YouTube accounts, or stop using re-do. You may also have rights under applicable privacy law to request access to, correction of, or deletion of personal information.
9. Security
re-do uses technical and organizational measures intended to protect information against unauthorized access, loss, misuse, or alteration. No online service can guarantee absolute security.
10. Children and age requirements
re-do requires users to provide a date of birth and country during sign-up. The service currently applies a general minimum age of 13. A higher threshold may apply in some jurisdictions; Australian accounts are currently subject to the stricter age-16 threshold. re-do may also apply parental or guardian consent requirements or other restrictions where required by the laws or platform rules that apply to the country associated with the account.
If re-do learns that an account was created or used in a way that does not meet an applicable age or consent requirement, it may restrict or suspend the account and take appropriate steps regarding the associated personal information.
11. Changes to this policy
This policy may be updated as re-do develops, adds integrations, or changes how information is handled. The date at the top of this page shows the latest revision.
12. Contact
Privacy questions or requests can be sent to re.do.net.app@gmail.com.