Rage Room

Privacy Policy

Last updated: March 2026

What we collect

We collect your email address when you sign in via magic link. We also collect session data generated during your use of the app — including session scores, object counts, mode selections, and rage meter readings. Journal entries you write are stored and associated with your account.

How we use your data

Your data is used exclusively to operate the Rage Room service — to track your stats, maintain your journal, manage your subscription, and deliver your session history. We do not sell your data to third parties. We do not use your content for advertising.

Authentication

We use passwordless magic links via Resend. Your email is used only for authentication and transactional communication (sign-in links, billing receipts). We do not send marketing email without your explicit consent.

Payments

All payments are processed by Stripe. We never store your full card number or payment credentials. Stripe's privacy policy governs how they handle your payment data.

Journal entries

Your journal entries are private. They are visible only to you. When you burn an entry, it is marked as burned and hidden from your view — burned entries are permanently deleted from our database within 30 days.

Data retention

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data by emailing support@rageroomapp.com. We will process deletion requests within 14 business days.

Cookies

We use a single httpOnly session cookie ("rr_session") for authentication. This cookie is strictly necessary for the service to function and cannot be disabled. We do not use tracking or advertising cookies.

Security

Session tokens are stored as hashed values. All traffic is served over HTTPS. We apply industry-standard security headers including CSP, HSTS, and X-Frame-Options. We do not store passwords.

Contact

For privacy questions or data deletion requests, email support@rageroomapp.com.