Privacy Policy

Last updated: August 2026

The short version

Riverge stores your account, your rooms and the code in them, because that is the product. We do not sell anything about you, we run no advertising trackers, and we do not use your code to train machine-learning models. Riverge is operated by Lucas Erik Andreas Lundmark, Spolegatan 15, 222 19 Lund, Sweden.

What we collect

• Account: your email, username, display name, and a password stored only as a scrypt hash. With Google sign-in we store the Google account id and, if present, your avatar URL. We never see your Google password.
• Your work: the rooms you create, the files and code in them, chat messages, comments, version snapshots and run output. This is the service, not surveillance.
• Connections: friends you add and teammates on your Team plan.
• Integrations you set up: a GitHub token if you connect one, encrypted at rest, and secrets-manager settings if you use them. You can disconnect at any time.
• Usage: a short log of product milestones such as pricing viewed and plan changed, so we can tell whether the product works. No third-party analytics and no advertising pixels.
• Technical: IP address and browser type in server logs, kept briefly for security and debugging.

The legal bases are performing our contract with you, our legitimate interest in keeping the service secure and understanding whether it works, and consent where you have given it.

What we never do

• We do not run your code on our servers. It executes in your own browser, so we never receive the output of a program you run unless you write it into the shared room yourself.
• We do not read your camera, microphone or screen. If you share your screen during a live session, the video goes directly between browsers through LiveKit and is never recorded by us.
• We do not sell personal data, and we do not train models on your code.

Joining without an account

Anyone with a room link can join as a read-only spectator without signing up. In that case we store no account, only the temporary presence needed to show that someone is in the room. Only signed-in members can write.

Who else is involved

We rely on a small number of companies: Railway for hosting in the EU, Polar for payments as our merchant of record, Resend for transactional email, LiveKit for screen sharing when you use it, Google for sign-in if you choose it, and a public CDN that delivers the Python runtime to your browser. Details, including where each one is based and the transfer mechanism, are on the sub-processors page.

How long we keep things

• Free rooms expire 7 days after their last activity and are then deleted permanently, files included. If you cancel a paid plan, the clock restarts from the cancellation, so nothing you have already left idle disappears the moment you downgrade.
• Paid rooms are kept as long as your plan is active.
• Your account is kept until you delete it. Deleting removes your account, the rooms you own and your memberships elsewhere.
• Backups may hold a copy briefly after deletion, until they are overwritten.

Your rights

You can ask for access to your data, correction, deletion, a portable copy, restriction, or object to processing based on legitimate interests. Most of it you can do yourself: download any project as a zip, delete rooms, and delete your account from Settings. For anything else, email us. You can also complain to a supervisory authority; in Sweden that is Integritetsskyddsmyndigheten (IMY).

Cookies

One cookie: a signed, HttpOnly session cookie that keeps you logged in. Page scripts cannot read it, and it is not used for advertising or tracking, so there is no consent banner to click. Our marketing pages set no cookies at all.

Children

Riverge is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has an account, tell us and we will remove it. Classrooms and study groups are welcome, with the supervision your school requires.

Security and changes

How the platform is protected is described on the security page. If something goes wrong that affects your data we will tell you promptly, and notify the authorities where the law requires. If we change this policy materially we will say so before it takes effect.

Contact

hello@riverge.net. A person reads it.