Privacy Policy | URoasted

1. Who We Are

URoasted (“we”, “our”, or “the Service”) is an anonymous-first roast generator that lets you create and share playful insults with friends. This Privacy Policy explains what information we collect, how we use it, and your rights.

2. Information We Collect

We collect the minimum data needed to make the Service work:

Device ID — a random identifier stored in a browser cookie. It is not linked to your real identity. We use it to attribute roasts you create and to apply rate limits.
Roast content — anything you type into the creator: receiver names, your display name (if you provide one), roast lines, button text, tags, and other content you submit.
IP address — automatically logged by our hosting provider (Vercel) for security and abuse prevention. We do not store IP addresses in our own database.
Usage analytics — basic page views and feature usage. We do not use cross-site tracking.

3. How We Use Information

To create, store, and display the roasts you make.
To moderate content for harmful material (hate speech, sexual content involving minors, threats, etc.).
To prevent spam and abuse via rate limiting.
To improve the Service.

4. Third-Party Services

We use the following providers, each governed by their own privacy policy:

Supabase — database and authentication infrastructure.
Vercel — hosting and analytics.
OpenAI — automated content moderation (Moderation API only; we do not send your data to OpenAI for any other purpose).
Google Fonts — typeface delivery.

5. Public vs Unlisted vs Private Roasts

When you create a roast you choose its visibility. Public roasts appear in the Wall of Shame feed and are indexable by search engines. Unlisted roasts are only accessible by the share link. Private roasts (when available) require sign-in to access.

6. Age Requirement

URoasted is intended for users aged 13 and older. If you are under 13, do not use the Service. If we discover that we have collected data from a child under 13, we will delete it.

7. Data Retention

Roasts are retained until you delete them or we remove them for policy violations. Rate-limit logs are retained for up to 24 hours.

8. Your Rights

You can request that we delete your data by emailing contact@uroasted.com. Include the device ID and / or roast slugs you want removed.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the new policy on this page with an updated date.

10. Contact

Questions about this policy? Email contact@uroasted.com.