Privacy Policy

Trivana Moments

Trivana Moments makes a personal gameshow for an occasion: a birthday, anniversary, wedding, graduation, retirement or farewell, a team celebration, a reunion, a festival or a pet. This section explains what we collect for a show, who helps us process it and how long we keep it. The rest of this policy applies too.

What we collect

• •
  From you, the organizer: your email address and the confirmation of your payment, and the brief you write. A brief can include names and how to say them, how people are related, interests, memories, your opening and closing words, your choice of host, colors and music and, if you add them, the event date and an age.
• •
  From friends you invite: the name or label they choose, the memories and words they send and any photos they add.
• •
  From people who play: very little. Playing needs no account and no sign-up, and we never ask players for an email address. When a group plays together on a TV, each player types a nickname for the scoreboard. We count plays with anonymous events, such as a game starting, to keep shows working.

How we use it, and who helps us

We use this information only to write, check, voice, film and deliver the show you ordered, to support you and to keep the service safe. We never contact your recipient, we do not sell it, and we do not use it to advertise to your recipient or guests. These providers process it for us:

• •
  Google Cloud: Vertex AI models write and review your questions and host script; Cloud Run and Cloud Tasks run the background work that prepares your show.
• •
  OpenAI: checks the words in a brief, a friend's memory and a script for content that breaks our rules.
• •
  ElevenLabs: turns the host script, which includes names and memories, into the host's voice.
• •
  Runway: turns the host's script and voice into the host's video.
• •
  Supabase: stores your draft, your order and your show, with photos and show media in private storage.
• •
  Vercel and Cloudflare: host the site and deliver its pages and your show.
• •
  Resend: sends your order, review and ready emails, and the emails you ask us to send.
• •
  Payment providers: Stripe takes your payment on behalf of Rerato, Inc. and retains the related billing records. Purchases made through Dodo Payments before October 30, 2026 were processed with Dodo Payments as merchant of record, which keeps their billing records. We never see your full card number.

The service-provider register lists every provider and the data each receives.

Photos: adults only, and why

Photos are optional. They can show adults, and pets with their adult owners, but not children, even for a child's birthday or graduation. A released show opens for anyone who has its link, and we cannot collect a parent's consent from everyone pictured, so we do not accept children's photos. A photo of the cake, the place, a drawing or the family pet works well instead. Everyone who uploads confirms that the photo shows adults only and that they may share it.

We keep photos in private storage, linked to the saved draft and, for a friend's photo, to that friend's words. Uploading does not make a photo public. Only the photos the organizer selects and approves are available through a released show's unlisted play link.

Children

A family show may be played by children. We do not ask players for an account, an email address or their real name, and no advertising pixels or ad trackers load on the pages where a show is played, including the join page guests open on their phones, even for a visitor who accepted them elsewhere on our site. When a show is about a child, the organizer may give us the child's first name, age and interests; we use them only to make that show. Please share only what you would happily say at the party.

How long we keep it

• •
  Unpaid drafts: a private draft lasts 14 days. Its photos expire with it. You can ask us to delete an unpaid draft's words and friends' contributions at any time.
• •
  Paid shows: a show stays live at its private link for at least three years from payment, and we keep what it needs for as long as it is hosted. Payment, tax and order records are kept for as long as the law requires, even after a show is deleted.
• •
  A scheduled email to your recipient: if you ask us to email the show to your recipient at a time you choose, we keep their email address sealed (encrypted) until that email is sent or you cancel it, and then only a masked hint of it (like r…@example.com) for 30 days. We send that one email and nothing else to them.
• •
  Friends' replies: if you ask us to email you when your friends' replies are in, we keep that address sealed (encrypted) until the one email is sent, or until it can no longer be sent, and delete the request 30 days after it ends or as soon as the unpaid draft expires. So you can open your invitation link in another browser, we also keep that link encrypted on our side until 30 days after the collection closes, or sooner if it is canceled or the draft expires.
• •
  Removing something: the organizer can remove photos; a friend can withdraw their own words or photos. This blocks future authorized reads and queues stored files for deletion. Cleanup may take time, and we cannot recall a copy someone already saved. Removed or expired photos are not restored by a later payment.
• •
  Deleting a show: email support@trivana.ai from the address you ordered with, or use the request form below. Once we have confirmed the request comes from you, we switch the show's links off and remove its personal content from our active systems, keeping only the order and payment records the law requires. Copies someone has already downloaded or printed cannot be recalled.

Things you make: hauntings, The You Show, looks and reels

You can make a haunting, a You Show, a look or a reel without an account. This section says what we collect when you do, who helps us make it, who can see it and how to have it removed. The rest of this policy applies too.

What you give us

• •
  For a haunting, a You Show or a look: a first name or nickname, a description in words of how you look, your answers to a few questions about yourself, and the monster or costume and the voice you pick. We do not ask for a photo.
• •
  For a reel: the subject you type or the link you paste, and the host, language and format you pick.
• •
  From a friend who plays: the name or nickname they type and their score. They are told, where they type it, that both are shown to the person who made it and to anyone else who plays it.
• •
  For a haunted room: the room's name, each person's first name and the short sentences they write for the round and, if an organiser adds them, a name and a picture of a mark to show on the room.

What we make from it, and who helps us

We use what you give us only to make the thing you asked for, to keep the service safe and to support you. We do not sell it and we do not use it for advertising. These providers process it for us:

• •
  Google and Runway: draw your portrait and its faces from your description. Your description is sent to them; your name and your answers are not part of that request.
• •
  Google, OpenAI and OpenRouter: language models write the questions from your answers, and read your description and your words before anything is drawn or published, so that a real named person, a character that belongs to someone else, a child or something unsafe is refused. For a reel they also research the subject and check each fact against pages on the web.
• •
  ElevenLabs: speaks the lines that are made fresh for you, which include your first name and a question.
• •
  Runway: where a film is offered, turns your portrait into a short moving picture; for a reel, makes the host speak its lines on camera.
• •
  Cloudflare, Supabase and Vercel: store your pictures, spoken lines, films and reels, store the questions and the scores, and deliver the pages.

Our providers are listed in the service-provider register.

Who can see it

• •
  Anyone who has the link. A haunting, a You Show and a look are opened by their link, with no account. Whoever opens it sees your first name, your portrait and the questions written from your answers, with the right answer once they have chosen. We ask search engines not to list these pages. Share the link only with people you want to see it, and answer only with things you would happily say to them.
• •
  The board. A friend's name or nickname and score are shown to you and to anyone else who plays.
• •
  The community wall, only if you choose it. Nothing you make is on the wall unless you press "Show it on Trivana". For a haunting or a You Show you first confirm that you are 18 or over and that it is yours to show. The wall then shows its title, its poster and its film if there is one. It never lists your questions, your answers or the description you typed, and people can play it from the wall only if you tick that too. It is checked before it appears, anyone can report it, and you can take it down at any time from the same place.
• •
  A reel is made to be posted: its page, its video and the sources behind its facts can be opened by anyone who has its link.

What stays on your device

• •
  One cookie that counts. Free making has a daily share, so we set a cookie called tv_haunt_device that holds a random number and nothing else, for up to 400 days. With your network address, it is how we count how many free things one phone and one connection have made today. The counts start again each day. It is not used for advertising or to follow you across sites.
• •
  Your work in progress. Your browser keeps your name, your description, your answers and the proof that what you made is yours, so that a reload lands where you were and so you can share it again or keep it in an account later. Your reel library, and the list of friends who have played, are kept in your browser in the same way. Clearing this site's data in your browser removes them from the device; it does not remove what is already published at a link.

Accounts and coins

You can sign in to keep what you made on your account. If you buy coins, Stripe takes the payment on behalf of Rerato, Inc. (for coins bought through Dodo Payments before October 30, 2026, Dodo Payments did) and we never see your full card number. We keep a record on your account of every coin added and used: packs bought, coins that came with a plan, coins given to a new account, what each coin was spent on and anything returned. That record is what your wallet shows you. So that the coins given to a new account are given once to each person, we also keep a one-way code made from your device's random number and from your network address beside that gift; neither can be read back from the code.

Adults, and other people

Portraits are drawn of adults only: a description of a child is refused and nothing is drawn. Describe yourself, or an invented character, and not another real person. A haunting, a You Show or a look should be about you; do not put another person's private details in your answers.

How long we keep it, and removing it

• •
  While its link is live. We have not set a date on which a haunting, a You Show, a look or a reel is deleted by itself. It stays at its link, with its pictures and its board, until it is removed.
• •
  Removing something you made. Take it off the community wall yourself, at any time, where you put it there. To have a haunting, a You Show, a look or a reel removed altogether, send us its link from the request form below or at support@trivana.ai. We switch the link off and remove its pictures, words and scores from our active systems. A copy someone has already saved or posted cannot be recalled.
• •
  A friend's name on a board. Ask us the same way and we remove it.
• •
  Purchases and coins. Payment, tax and coin records are kept for as long as the law requires, even after an account is closed.

Trivana Learn & Participant Data

For participant content and response records that Trivana handles under a buyer's instructions, the buyer generally acts as controller and Rerato acts as processor. Rerato separately decides how to process account, billing, service-security, abuse-prevention, legal-compliance, and certain operational records needed to run Trivana. The applicable agreement or DPA controls if it says otherwise.

• What we store about learners: the name a learner types when they start a quiz (self-asserted, not identity-verified), a pseudonymous participant identifier, their responses, scores, completion time, and play timestamps. The current participant flow does not require an email address or a Trivana account.
• Link access and identity: access uses an unlisted round link. A learner can use any name; possession of the link and the entered name do not verify who completed the round. A forwarded link may be opened until it expires or is revoked.
• Reinforcement continuity: an essential, HTTP-only participant cookie may remain on the learner's device for up to 90 days so Day 0, Day 7, and Day 14 activity can be associated with the same pseudonymous learner. The cookie does not keep an expired or revoked participant link authorized; each round is checked separately on our servers.
• Retention & deletion: learner records are retained while your account is active. You can request deletion of a specific quiz's results, a cohort's data, or all learner data by emailing support@trivana.ai. We target removal from active systems within 30 days after verification, subject to legal retention requirements. Limited residual copies may remain until bounded backup cycles complete. On termination, source content and learner records can be exported or deleted as provided by the applicable agreement.
• Sub-processors & DPA: the providers we use to process this data are listed on our sub-processors page. Any Data Processing Addendum for a written Trivana Learn or Trivana Studios scope must also be agreed in writing.

For a done-for-you workshop reinforcement pilot, we use the supplied workshop material only to produce, review, host, and support the purchased deliverables. We do not publish that material or the resulting private checks as public library content without permission. You can request deletion of the source material and pilot results at any time, subject to legal recordkeeping requirements.

Cookies

We use cookies and similar technologies for essential functions and, where you choose, optional measurement and attribution:

• •Session Cookies: To keep you logged in during your visit
• •Authentication Cookies: To securely identify your account
• •Preference Cookies: To remember your settings and preferences
• •Learn continuity cookie: To connect a participant's three private reinforcement rounds for up to 90 days without requiring an account; authorization for every round is still validated server-side
• •Daily crew cookie: When you play Trivana Daily with a crew (friends who play each Daily through the same shared links), we set a functional, HTTP-only cookie named trv_crew so your browser stays on that crew's board without an account. It holds up to three crew codes, each with a random secret; we keep only a hashed copy of each secret. It holds no name, email or account details, is never shared with third parties, and lasts up to 400 days. If you have declined optional cookies, it ends when you close your browser. Anyone with your crew's link can see its board: the player name you gave when sharing, your Daily scores and finish times, your crew streak, and whether you have played today's Daily. Shared crew links can show a crew member's name in link previews.
• •Visitor measurement identifier: If you have not yet answered the cookie banner, we store a random first-party identifier on your device so we can tell a returning visit from a new one. It contains no personal information, is never shared with third parties, and expires automatically after 90 days. If you decline optional analytics, it is not stored and every visit is counted as new
• •HubSpot visitor-attribution cookies: After you accept optional analytics on an eligible public page, HubSpot may set __hstc, hubspotutk, __hssc, and __hssrc to recognize a browser, count visits and sessions, and associate a later identified interaction with a CRM contact. The visitor identifiers currently last up to six months; the session cookies last for 30 minutes or the browser session. Withdrawing consent sends HubSpot do-not-track and cookie-revocation requests; HubSpot may use the __hs_do_not_track cookie to remember that choice.

We show a cookie consent banner on first visit so you can accept or decline optional product analytics cookies, CRM visitor attribution, and advertising pixels. Declining optional analytics does not disable first-party traffic and website performance measurement on public pages. That measurement uses no advertising cookies, is never shared with third parties, and excludes private account, buyer, participant, and capability-link surfaces. Until you answer the banner, it includes the 90-day visitor measurement identifier described above, so that returning visits can be distinguished from new ones; declining removes that identifier and each visit is then counted separately.

Trivana on Muse

When you ask Muse to use Trivana, we receive the inputs for that tool request, such as a quiz topic, optional title, language, difficulty, host preference, question count and a retry identifier. The connector does not give us your Muse password, payment-card details or general access to your conversation history. Text you or the assistant include in the tool request is received by Trivana, so do not include sensitive personal material in a free quiz prompt.

• Quiz creation: We use the request to generate and host the quiz, prevent abuse, handle retries and measure use of the connector. Relevant prompts and generated content may be processed by the AI, hosting and storage providers listed in our service-provider register. Operational records include request and game identifiers, timing and standard network metadata.
• What returns to Muse: The quiz title, question count and play link, and, for a newly claimable game, a private claim link. Free quizzes are unlisted, not private: anyone with the play link can play. Claiming is optional and associates the game with your Trivana account. Keep claim links private because they can transfer ownership.
• Paid features: Where commercial tools are available, Muse can receive public product information and a link to continue on Trivana. Enter personal Moments memories, recipient details and source material only in the private Trivana builder. They are used to prepare, review, deliver and support your requested show, not returned to Muse by this connector. Buyer review and recipient sharing remain separate actions on Trivana. Subscription and coin access are checked against your Trivana account, not an assertion made by an assistant. The provider shown at checkout handles payment details in its hosted checkout; this connector does not send card details or private order-access links to Muse.
• Referral measurement: A Moments handoff may contain a signed referral identifier valid for 24 hours. It identifies the Muse channel, not your identity or payment authority. We use it with internal draft and order identifiers to measure the purchase and delivery journey. The referral does not contain your brief, email address, card details or private access credentials.

Rerato and Meta each control their own processing of connector data. This policy describes Trivana's processing; Muse's privacy notices and settings describe Meta's processing. Disconnecting Trivana in Muse stops future use through that connection, but does not itself delete a quiz or an order already stored by Trivana. The current connector does not receive an account-level disconnect notification.

To request deletion or make a revocation request to Trivana, use the deletion form below or email support@trivana.ai. You do not need to create a Trivana account. Include the public game link or an order reference so we can locate the data and verify your authority. Do not send passwords, claim tokens or private buyer-access links. We review these requests and delete or restrict access to the relevant data after verification, subject to the retention requirements below.