Privacy, plainly
HomeWhat we store
Your email address, the display name and profile details you choose (a short bio, a picked avatar), the game entries you submit (facts, two-truths-and-a-lie statements, and childhood photos for Fry), an optional profile photo, your guesses, and your scores. Every uploaded photo is re-encoded on arrival, which strips hidden metadata like location and camera details. Fry photos stay private to your Reef and delete themselves after the round's retention window. Sign-in is by emailed link; we never store passwords.
Who sees it
Only members of your own Reef. Everything is scoped to your team; other companies on The Reef can never see your people, entries, or scores. During guessing games your entries are shown without your name until the round's reveal. There is no advertising and no tracking scripts.
Where it lives (subprocessors)
The app and its database run on Render. Transactional email (sign-in links, invites, round updates) goes through MailerSend. Payments and card details are handled by Stripe; card numbers never touch our servers. Errors are reported to Sentry; we redact email addresses in error logs and never send your profile or game content there. That is the whole list; if it changes, this page changes.
If a trial ends without an upgrade
When a Reef Pro trial ends, saved bios, pronouns, and profile photos pause but are kept, and come back in full if the Reef upgrades. If the Reef stays on the free plan with no upgrade for 90 days, that paused data is permanently removed. Rounds, results, and names are part of the free plan and are not touched.
Deleting your data
Email madison@offsite.com from the address on your account and we will delete your account and everything you contributed within 7 days. A Reef Keeper can request deletion of their whole Reef the same way. One thing we keep: a minimal internal record that the deletion happened, holding a one-way fingerprint of the address (never the address itself), so we can prove your request was honored.