R3 Together

No.00 — Legal

Privacy policy.

Last updated

April 23, 2026

No.01

What we collect

When you sign up: your email, the password hash, and (for OAuth signups) the basic profile shared by Google or Facebook (name, email, profile photo URL).

When you complete your profile: full name, date of birth (used only to verify you're 18+), sex at birth (optional, used only for adventure targeting), city/state, optional ZIP, a short bio, and a profile photo you upload.

When you use R3: the adventures you post or join, your messages, your reviews, your coin transactions, and basic activity logs (sign-in times, IP-derived location, device user-agent).

When you pay: PayPal handles your payment and we receive only the order ID and capture ID. We never see or store your card number, CVV, or PayPal password.

No.02

Why we collect it

To run the platform: match members with adventures, deliver chat, calculate review averages, enforce lockouts, and process coin transactions.

To keep the community safe: profile review, restricted-word filtering, audit logs of admin actions, and reports on flagged behavior.

To communicate with you: profile-status emails, password resets, referral notifications, and (rarely) operational announcements about the platform.

We do not sell or rent your personal information. We do not run ad networks against your activity.

No.03

Where it lives

Your profile, adventures, messages, and review data live in a managed PostgreSQL database accessible only to the R3 Together application servers — never directly exposed to the internet.

Profile photos and any uploaded images live in object storage with public read access (so they can render on your profile and adventure cards). Don't upload anything you wouldn't want a stranger to see.

Operational logs are retained for up to 90 days for security and abuse investigation. Audit logs of admin actions are retained for the life of the account.

No.04

Who can see what

Other members can see your profile, your hosted/joined adventures, your reviews, and your rolling-3 review snippets. They cannot see your email, date of birth, exact age, or coin balance.

Admins and moderators can see all of the above plus your email, exact date of birth (for 18+ verification), audit history, and coin ledger. Admin actions on your account are audit-logged.

Anyone who isn't logged in (the public) can see only the marketing pages — they cannot see profiles, adventures, or any member activity.

No.05

Your rights

You can request a copy of your data, request correction of any inaccurate field, or request deletion of your account by emailing [email protected].

Profile edits go through admin re-approval; once a change is approved it overwrites the previous value. We do not retain a history of every prior bio you've had.

If you delete your account, we anonymize your reviews of other members (so their rolling averages remain stable) and remove your profile, photos, and chat messages. Audit logs of administrative actions taken on your account are retained.

No.06

Cookies and tracking

We use session cookies to keep you logged in. We use a referral cookie when you click a Share & Earn link, so the referrer can be credited if you sign up. We do not use third-party analytics or advertising trackers.

No.07

Children

R3 Together is for adults 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact [email protected] immediately.

No.08

Changes

When we make material changes to this policy we will email registered members and update the date below. Continued use of R3 Together after a change is posted constitutes acceptance.