Privacy policy

Who we are

reveal.world is operated by TTSN Web and Social AB, which is the data controller for the personal data described here.

You can reach us about anything in this policy at ns@reveal.world.

Account data

You can read reveal.world without an account. To publish a story or post a comment you sign in with Google or Apple, and we store what that sign-in gives us:

We never receive or store your Google or Apple password.

• your email address
• your display name
• your profile picture, if your provider supplies one
• an identifier from the provider, so we recognise you next time you sign in

Content you publish

Stories and comments you post are public. Anyone visiting the site can read them, and search engines can index them.

A comment is stored with your display name, the text you wrote, which story it belongs to, and when you posted it. Your display name is shown next to it. Your email address is never shown publicly and is never included in what the site sends to other visitors.

Comment notification emails

When someone comments on a story, we email the story's author and everyone else who has commented on it, so a conversation does not go unnoticed. The email contains the commenter's display name and the comment text.

We use your email address for this only because you wrote the story or joined its comments. Every notification has a one-click unsubscribe link at the bottom, which stops all comment emails without affecting your account. You can keep reading and posting comments after unsubscribing.

Technical data

Our servers record ordinary web request data, including your IP address, the pages requested and your browser's user agent. We also keep a short-lived, in-memory count of recent comment submissions per account and per IP address, so the site can rate limit spam. Those counters are not written to disk and are discarded within the hour.

Cookies

We use a small number of cookies, all of them necessary for the site to work:

• reveal_session — keeps you signed in for up to 30 days
• reveal_oauth_nonce — a 10-minute security token that protects the sign-in redirect
• reveal-ui-locale — remembers your chosen interface language for a year

Analytics and service providers

We use Google Analytics to understand how the site is used. It sets its own cookies and receives your IP address and browsing activity on this site.

We also rely on service providers who process data strictly on our behalf: Amazon Web Services hosts our infrastructure and images, sends our email, and generates story audio; Google and Apple handle sign-in. They may not use your data for their own purposes.

Moderation

Comments are automatically screened against a list of hate-speech and abuse terms when you post them. A clear match is rejected and never stored. A borderline match is published but marked for a moderator to look at.

Our moderators can read, hide and delete any comment, together with the display name and account it belongs to.

How long we keep data

Comments and stories stay published until you or a moderator remove them. A deleted comment is hidden from the site immediately and kept in our database in a deleted state so moderation decisions remain auditable.

If you close your account, we delete the account and the comments attached to it.

Your rights

Under the GDPR you can ask for a copy of your data, correct it, have it deleted, or object to how we use it. You can also withdraw consent for anything you consented to, and complain to your data protection authority — in Sweden, Integritetsskyddsmyndigheten (IMY).

To exercise any of these, write to ns@reveal.world.

Children

reveal.world is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy. When we do, we change the effective date at the top of this page, and for significant changes we will make it clear on the site.