TheyRave
Privacy
Last updated 6 September 2026
What TheyRave keeps about you, why, and for how long. Written to match what the site actually does, which is less than most.
1The short version
We keep what the site needs to work and nothing else. Visitors to a creator’s page get no cookie and are not tracked. A reviewer leaves only what they type into the form. A creator’s account holds an email address, a page name and a scrambled password, and their card details never reach us. We do not sell data and we show no ads.
2If you visit a page
Opening a creator’s page sets no cookie. We count that the page was opened, that the review form was opened, that a review was sent, or that the embed widget loaded, and if you came from another website we keep the name of that site. The count holds nothing about you: no address, no browser, no device, no id. Those counts are deleted after 90 days.
Fonts on every page come from Google Fonts. Your browser fetches them from Google directly, so Google sees your IP address and which fonts were asked for, under Google’s own terms. Our hosting provider, Vercel, keeps ordinary server logs for a short time to run and protect the service, which include your IP address and the page you asked for.
3If you leave a review
A review holds what you typed: the words, your name and X handle if you chose to give them, your answer to whether you would buy again, and the time it was sent. If you came through a one time link, the review is marked as verified. We do not record your email address, your IP address or anything about your device.
The creator reads it first, and once they approve it, it is public: on their page, in their embed widget if they use one, and in the spreadsheet they can download. Your name and handle are shown as plain text and never turned into a link. A review is stored until the creator deletes it or closes their account.
To have a review removed, ask the creator, who can do it from their dashboard. If you cannot reach them, email hello@theyrave.com.
4If you have an account
Your account holds your email address, the name and tagline of each of your pages, your appearance settings, and your password as a scrypt hash, which is a scrambled form that cannot be turned back into the password. We never store or log the password itself. If you connect X, we keep the id and display name X gives us and nothing else; we cannot post as you and we never read your timeline.
Signing in sets one cookie on theyrave.com, a signed token that says who you are. It lasts 14 days, and signing out clears it. To protect the account, we count wrong passwords in a row and pause password sign-in for 15 minutes after five of them. The email link keeps working during that pause.
Your reviews, the verified links you have made, the tags you have set, any reply you have written, and the names you have given up are all stored on your account for as long as it is open.
5If you pay for Supporter
Payment goes through Stripe. Stripe asks for your card and an email address for receipts on its own page, and none of that reaches us. What we keep is Stripe’s id for you as a customer, the id of your subscription, and the date you are paid up to. Stripe keeps its own records under Stripe’s privacy policy, and the law requires it to keep some of them after you cancel.
6Email we send
We send sign-in links, one email when a review arrives on your page (never more than one an hour, however many arrive), and notices about your account, such as a payment that failed or a change to these pages. We do not send marketing email, and if we ever want to, we will ask first and you can say no.
Email is sent through Resend from hello@theyrave.com. The subject line of an email from us never says what you sell.
7Who else handles your data
Five companies run parts of the site for us and see data in the course of doing so. Neon stores the database. Vercel hosts the site and serves every page. Resend sends email. Stripe takes payment. Google Fonts serves the fonts. If you sign in with X, X tells us who you are. Each one handles data under its own privacy policy, and none of them is given your data for any purpose except running the site.
We do not sell data, share it with advertisers, or hand it to anybody else, unless the law requires us to or it is needed to protect the site or somebody using it.
8How long things are kept
Sign-in links expire after 24 hours and are deleted once used or once expired. Page counts are deleted after 90 days. Everything on an account is kept while the account is open and deleted when the account is closed, along with every page, review, link and setting on it. The one exception is a page name you have used: it stays parked so that it can never be handed to anybody else, and it points at nothing once your account is gone.
9What you can ask for
You can see and change most of what we hold from your dashboard and your account settings. Supporters can download every review as a spreadsheet. Anybody with an account can ask for a copy of everything we hold about them, ask for a mistake to be corrected, or ask for the account and everything on it to be deleted. Email hello@theyrave.com from the address on the account and we will do it within 30 days.
A reviewer who wants their words removed should ask the creator first, then us. We will act on it without needing to know who you are.
10Under 18
Accounts are for people aged 18 and over. We do not knowingly keep an account for anybody younger, and if we learn of one we will delete it.
11Keeping it safe
Every page is served over HTTPS. Passwords are stored as scrypt hashes. Sign-in tokens are signed so they cannot be forged. Verified links work once. No system is beyond fault, and if a breach ever exposes data about you, we will email every affected account as soon as we know what happened.
12Changes to this page
The date at the top is the date of the current version. If we change what we collect or who we share it with, we will email every account before the change takes effect. Questions go to hello@theyrave.com, and the person who runs the site is the one who answers them. The site is run from Illinois, USA, and this page is governed by the same law as the terms of service.
Questions about either page go to hello@theyrave.com. A person reads that inbox.