Privacy Policy
Your data, your page, your rules. Here's exactly what we collect, why, and how you stay in control of it.
1. What we collect
When you create a Rizzzler account we store your email, username, and a securely hashed password — we never store your password in plain text. Anything you add to your showcase page — display name, bio, phone number, location, profession, social links, avatar, banner, and gallery photos — is stored so we can display your public page and let you edit it later.
2. Where your files live
Every image you upload (avatar, banner, showcase photos) is stored directly inside our MongoDB database using GridFS — nothing is ever written to a local disk or a third‑party storage bucket. Files are capped at 5MB each. When you replace or remove an image from your dashboard, the old file is permanently deleted from the database, not just hidden.
3. What's public vs. private
Your showcase page is public by design — that's the point of the platform. Fields like your phone number and location are only shown on your public page if you choose to fill them in; leaving them blank keeps them out of your page entirely. Your email address and password are never shown publicly. You can also pause your whole showcase from Settings, which hides it from everyone but you until you turn it back on.
4. Cookies & sessions
We use a single session cookie to keep you logged in for up to 15 days so you don't have to re‑enter your password every visit. Session records are stored in MongoDB (not on our server's disk) and automatically expire after the same 15‑day window. We don't use third‑party tracking or advertising cookies.
5. Verification codes
When you register, log in with an unverified account, or request a password reset, we email you a one‑time 6‑digit code. These codes expire automatically and are never reused across requests.
6. Your control over your data
You can update or remove almost everything from your dashboard settings at any time — profile fields, links, theme, audio, and every uploaded image. From the Account section of Settings you can also deactivate your showcase (hides it, keeps your data) or permanently delete your account, which removes your profile and every uploaded file from our database immediately and cannot be undone.
7. Changes to this policy
If this policy changes in a meaningful way, we'll update this page and note the date below.
Last updated: 2026‑07‑12