Privacy Policy
Last updated: [EFFECTIVE DATE] · Terms · Privacy · DMCA
This explains what Remote Vegas collects, why, who helps us run it, and how to get your data deleted. It describes what the code does today. Remote Vegas is run by [LEGAL ENTITY NAME], [MAILING ADDRESS]. Privacy questions and requests: [PRIVACY EMAIL].
The short version
- No ads, and we don’t sell or rent your data.
- Noise checks never record audio. Sound is measured in your browser and only the decibel numbers are sent.
- Your exact location never leaves your device. We check “are you at this spot?” in your browser and only send yes/no.
- Photos are reviewed by a person before anyone else sees them, and we strip location data out of them before upload.
- Wi-Fi passwords are encrypted before we store them and are shown only to signed-in members.
- People profiles are off by default, need you to be 18+, and never show your exact location.
What we collect
When you just browse
- A device cookie (
rv_dev): a random, signed ID. It lets you submit checks without an account and lets us limit spam and repeat submissions. - Settings in your browser: your light/dark choice, and which feed posts you’ve already seen (so the feed shows you new ones). These stay in your browser.
- Server logs: our host keeps standard request logs (such as IP address, browser and time) to run and protect the site.
When you sign in
- Your account is managed by Clerk. Clerk stores your email (and any sign-in method you use) and sets a session cookie. We store your Clerk user ID, your handle and display name, and a trust level that goes up as your contributions are approved.
What you choose to share
- Speed tests: download/upload speed, latency and jitter, network type (venue Wi-Fi or hotspot), a rough device type, and whether you were on-site (yes/no/not checked).
- Noise checks: decibel levels (average, peaks, quiet floor), how long the check ran, and calibration and quality flags. With your permission your browser uses the microphone during the check. No recording is made, stored or uploaded.
- On-site check: if you allow it, your browser compares your location with the spot’s (within about 200 m) and sends only the result. Your coordinates are not sent or stored.
- Crowd reports, votes, “what to order”, tier lists and lock-in sessions/RSVPs: what you submit, which spot, and when.
- Photos: your photo is resized and re-saved in your browser before upload, which removes embedded data such as GPS location and camera details. It’s stored privately (Vercel Blob) with your caption, which spot, and your confirmation that it’s your photo and shows no identifiable strangers. Nobody else can see it until a moderator approves it.
- Wi-Fi tips: the network name, the password (encrypted with AES-256-GCM before it’s saved), where you got it (sign, receipt, staff), and confirmations from other members. A moderator reviews it first. After that it’s shown only to signed-in members, and it’s treated as out of date after 45 days without a fresh confirmation. Venues can ask us to stop showing their Wi-Fi.
- #remotevegas feed: your posts (caption, optional photo, optional spot), replies, and your likes, reposts, shares, hides and views (used to rank the feed). For the first 2 hours after you post, other people see only the area, not the spot name.
- People: if you turn on a profile — handle, name, bio, what you’re working on, tags, interests, area, “open to cowork”, and your 18+ confirmation. Only other members who have also turned on a profile can see it. “Working here now” and “open to cowork” statuses expire within 4 hours. Other members see your area. Only people you’ve accepted see the spot. We don’t store GPS coordinates. Also connection requests, follows and blocks.
- Jobs: the listing details you enter and which account posted it. Listings expire 30 days after approval. Applying happens on the employer’s site, so we don’t see applications.
- Reports and moderation: what was reported, why, and by which account or device, plus a log of moderator actions.
What’s public
Approved photos, feed posts, replies, handles, approved job listings and spot summaries are public. Spot pages and our Data & API page show combined stats (for example a spot’s typical speed or noise level) that aren’t tied to you. People profiles are not public: only opted-in members see them.
Who helps us run Remote Vegas
- Vercel: hosting, server functions and private photo storage (Vercel Blob).
- Neon: our Postgres database.
- Clerk: sign-in and accounts.
- Cloudflare Turnstile: a spam check on submissions made without an account. It looks at signals from your browser to tell people from bots.
- Google: some spot photos load from Google’s servers. OpenFreeMap: map tiles. Loading these sends your IP address to them, as with any website.
We share data with them only to run the site. We may also share information if the law requires it or to protect people’s safety.
How long we keep it
“Working here now” statuses expire within 4 hours and job listings 30 days after approval. Other contributions stay until you or a moderator delete them, or until [RETENTION PERIOD, e.g. 24 months of inactivity]. Rejected photos are deleted within [REJECTED PHOTO RETENTION, e.g. 30 days]. Backups held by our providers roll off on their own schedules.
Deleting your data and your choices
- Delete your People profile any time from the People page. Turn visibility off without deleting it.
- To delete your account and everything tied to it (posts, photos, replies, measurements, Wi-Fi tips, jobs), or to get a copy, email [PRIVACY EMAIL] from your account email. We’ll confirm it’s you and act within [RESPONSE TIME, e.g. 30 days]. Combined stats that no longer identify you may stay.
- You can clear the device cookie and browser settings at any time in your browser.
- Depending on where you live (for example California or the EU), you may have extra rights to access, correct or delete your data. Email us and we’ll help.
Children
Remote Vegas isn’t meant for children under [MINIMUM AGE, e.g. 13], and People profiles are 18+ only. If you think a child has given us data, email [PRIVACY EMAIL] and we’ll delete it.
Security
Data goes over HTTPS. Wi-Fi passwords are encrypted. Photos sit in private storage until approved. Moderator tools need a moderator account. No system is perfect, so please use a unique password for any sign-in method you use.
Changes
We’ll update the date at the top when this changes, and say so on the site for big changes.