Privacy Policy

• Account details: your email address, and a hashed password if you sign up with one. If you sign in with Google, GitHub or GitLab, that service sends us your name, email address and profile picture; we use the name to suggest a display name. We also keep the country you signed up from (from your IP address), which we use only for our own statistics and never show on your profile.
• Profile information: your display name and handle, and anything optional you add: a photo, organization, bio, website, favorite AI models, and the country or region you represent (not necessarily your nationality or where you live).
• Contact email (optional): an email address you choose to share with people who'd like to work with you. We send a code to confirm it before it's used.
• Competition activity: the competitions you join or leave, your place on waitlists, when you got or lost a seat, and whether an admin removed you from a competition.
• Submissions: the prompts and files you submit, the optional description you add, and how each was scored: the AI model's reply to every test item, the result, the tokens it used and how long it took.
• Playground tries: the prompts you try on the Playground tab, the puzzle you picked, the model's reply and its result.
• Messages: the name, email address, topic and message you send through our contact form. They're delivered to our team's inbox by email.
• Prize information: if you win, the identity, payment and tax details needed to verify you and pay you.
• Technical data: your IP address and browser information. We use them to limit how often you can sign up, sign in, reset your password or send the contact form, and for the human check on those forms and before showing a contact email. Our hosting and database providers keep them in short-lived security logs.
• Usage data: the pages you visit, the site or campaign that linked you here, your device type, browser, operating system and country (from your IP address), and your account if you're signed in. We count visits without cookies: your IP address and browser only go into a code that changes every day, and we don't store either one.

• to run your account and profile, and let you join competitions;
• to run and score your submissions and playground tries, and show results on leaderboards and profiles;
• to send the emails the service needs: codes to confirm your email address or reset your password, a code to confirm a contact email, emails when you get a seat from a waitlist or lose one, and a copy of messages you send us;
• to verify winners, pay prizes and meet legal obligations, such as tax and sanctions rules;
• to prevent cheating, abuse and security problems, for example by comparing submissions and technical data across accounts to find people using more than one (see our fair play rules);
• to fix scoring problems and improve competitions, for example by reviewing how models answered;
• to see how the site is used, for example how many people visit and which pages they read, so we can improve it;
• to reply to your messages.

We don't sell your personal information or use it for advertising.

• Your profile: your display name, handle and anything optional you add to it (except your contact email), and the competitions you've taken part in with your places. Profiles also appear in the Community directory.
• Leaderboards: your display name, handle, photo and flag next to your best score, along with its details (such as tokens used and run time), how many times you've submitted and when you last did. Leaderboards can also be viewed by country or region.
• Your contact email, if you add one, is never printed on your profile. A visitor sees it only after passing a human check.

Not public: your account email, password, the contents of your submissions and playground tries, and the model's replies to them, unless a competition's rules require winners to publish their solution. Our team can see them to run competitions, check fair play and answer your questions.

We use these providers to run Renbu. They process data only on our behalf:

• Supabase, for accounts, the database and file storage, on servers in the United States;
• Cloudflare, for hosting the site, running the scoring, the human check on sign-up, sign-in, password and contact forms and before showing a contact email, and security logs, on its global network;
• Resend, for sending email, in the United States;
• Anthropic, whose Claude models answer the test items. They receive your submitted prompts and playground prompts together with each item, in the United States;
• Google, GitHub and GitLab, if you choose to sign in with them.

This means your information is transferred to and stored in other countries, mainly the United States.

Cookies are small files a website keeps in your browser. Renbu uses only the cookies it needs to work. We don't use advertising, analytics or third-party tracking cookies, and we count visits without cookies or other browser storage.

• Sign-in (names starting with sb-): keep you signed in. Removed when you sign out, and kept for up to 400 days otherwise.
• Sign-in return (renbu_auth_next): when you sign in with Google, GitHub or GitLab, brings you back to the page you were on. Up to 10 minutes.
• Password reset (renbu_recovery): shows that you entered a reset code, so you can choose a new password. Up to 15 minutes.
• Time zone (tz): your browser's time zone, so competition dates and times show in it as soon as a page loads. 1 year.
• Cookie notice (cookie_notice): remembers that you closed the cookie notice. 1 year.

Cloudflare's human check runs on our sign-up, sign-in, password and contact forms, and when you ask to see someone's contact email. It runs from Cloudflare's own site, which receives your IP address and browser information to tell people from bots.

You can block or delete cookies in your browser's settings, but you can't sign in without them.

• Your account, profile, submissions and playground tries: while your account is open.
• Usage data: 25 months. If you delete your account, your past page views are kept without it.
• Messages to us: in our team's inbox, for as long as we need them to help you.
• Prize and tax records: as long as the law requires.
• Security logs: a short period, set by our providers.

You can change or remove your profile information, photo and contact email at any time from your account page.

You can also ask us for a copy of your data, to correct it, or to delete your account. Deleting your account removes your profile, seats, submissions, scores and playground tries, so you also disappear from leaderboards, including in competitions that have ended. If you won a prize, we keep the records the law requires. Depending on where you live, you may have further rights under local law. To make a request, contact us.

If you are under the age of majority where you live, you need a parent or legal guardian's permission to use Renbu. Guardians can contact us to review or delete a young person's information.

We use encryption in transit, hashed passwords, private storage for the files you submit, and admin tools that only our team can sign in to. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

We may update this policy. If a change is significant, we'll tell you by email or on the site before it takes effect.

Questions about your privacy? Contact us.