PRIVACY POLICY
Effective date: October 18, 2026
Roast My Life ("the app", "we") is a comedy app: you give it a screenshot and/or some text and it writes a joke "roast". This policy explains what we handle and why. Contact: dalybeau18@gmail.com.
What we collect
- What you submit to be roasted: text you type and, if you upload one, a screenshot (shrunk in your browser before sending). Your screenshot is used once to write your roast and is never stored: we don't save it to our database, to disk, or to logs. It's held in memory only while your roast is written, then discarded.
- Friend roasts: text only, namely the friend's name and the generated roast (headline and text). The details you type and any image are not stored. They're kept so the share link (/r/…) works and are deleted automatically after 180 days.
- Android tester sign-ups: if you sign up at /testers, we store your name, the Google account email you give us, whether you have an Android phone, your 18+ confirmation, sign-up time and a one-way hash of your IP (for rate limiting), only to invite you to the Google Play test. Email us to be removed.
- Creator codes: if you redeem a code, we store which device ID redeemed it and when, so it can't be reused, and links you share from that device carry
?ref=<creator>so we can count (by sampling) how many visits each creator sends. No personal data is attached. - Reports: if you tap “Report this roast”, we store the reason you picked, your optional note, the roast's text, headline and heat level, a timestamp, and a one-way salted hash of your IP address (to spot abuse; it can't be turned back into your IP). Reports are reviewed by a person and deleted automatically after 90 days.
- An 18+ confirmation (
rml_18) kept in your browser's local storage so we only ask once. - A random device ID kept in your browser (local storage and a cookie). It isn't linked to your name or email. We use it to count free roasts and to remember a Pro purchase on your device.
- Free-limit counters: to stop the free limit resetting in a private window or a new browser, we keep one daily counter per IP address. The IP is never stored: it's combined with a secret salt and today's date and run through a one-way hash (HMAC-SHA-256), so the stored key can't be turned back into your IP, and it changes every day. The record holds only two numbers (roasts and friend roasts used today) and auto-deletes after 2 days. Your browser also gets a signed cookie (
rml_fq) with today's count for your device. Each device gets 3 free roasts a day (and 1 friend roast). Each network (one IP address, such as a home, dorm or office Wi-Fi) gets 15 free roasts a day in total (and 5 friend roasts), so a private window or a new browser can't reset the limit, but people sharing Wi-Fi aren't cut off after 3. You're blocked when either limit is reached; if it's the network limit, we tell you so. A separate in-memory counter limits bursts to 20 requests a minute per network; it isn't saved. - Purchases: payments on the website are handled by Stripe. The Android app sells nothing. We never see or store your card number. We receive a purchase ID, the plan, and its status. Stripe's privacy policy: stripe.com/privacy.
AI processing
OpenAI is the only AI provider we use. No other AI company receives your data. When AI mode is on, your text and screenshot are sent to OpenAI's API (model gpt-5.6-luna), only to write that one roast, with response storage turned off (store: false). Under OpenAI's API data policy, API data isn't used to train their models by default, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it: platform.openai.com/docs/guides/your-data. We don't keep your screenshots or personal roasts after the response is sent (friend roasts are the exception, see above, and those store text only). When AI mode is off, roasts are generated on our own server from templates.
What we don't do
- We don't sell or rent your data.
- No advertising trackers, and no third-party analytics.
- No account, name, email or contacts required.
Please don't upload sensitive info
Crop or blur account numbers, addresses, phone numbers, or anyone else's private info before uploading. Only roast friends who'll take it as a joke.
Adults only (18+)
Roast My Life is for adults 18 and older only. It isn't directed to anyone under 18, we ask every visitor to confirm they're 18+, we refuse to roast anyone who appears to be under 18, and we don't knowingly collect data from minors. If you think a minor has used the app, email us and we'll delete what we have.
Your choices
Clear your browser/app storage to reset your device ID. To delete a friend roast link or ask about your data, email us with the link or your device ID and we'll remove it. Hosting: Cloudflare (see their policy).
Changes
If this policy changes, we'll update this page and the effective date.