Privacy & trust

Your privacy, explained.

Know what you share, what stays private, and how to manage your information.

Effective 29 October 2026

Messages and files

Personal direct chats require an accepted friendship. Social messages use separate follow, messaging and block controls. Groups and member-only spaces require membership; personal files require account ownership. These checks limit access inside the app. The server stores readable messages and files so your account can open them on different devices. An operator with access to the server or its backups can access this content. Account permissions do not prevent infrastructure access. HTTPS protects traffic between your browser and the service.

Application administrators cannot browse private conversations, friend lists, personal storage or other members’ attachments through the normal administration pages. Operators with infrastructure access have a different level of access. When you report content, the information you submit is shared with administrators.

Your Personal and Social identities

Communities use a separate public handle, name, icon and bio. Explore does not reveal your private username, photo, account address or friendships. You choose whether your public profile is discoverable. Personal chats and member-only team spaces use your private identity. Social posts, comments, likes, reposts and follows use your Social profile and can be visible to other signed-in members. Explore discovery controls your profile listing, not the visibility of posts. Social direct messages are separate from Personal chats; sending requires a follow in either direction, messages enabled by both people and no Social block.

These profiles are separate within the app, but are not anonymous to the operator. Reusing personal details or sharing identifying attachments can connect them.

Social photos

Pro and Ultra offer removal of embedded location, camera and date metadata from new Social photos and profile pictures. This is enabled by default for eligible accounts and can be changed in Social settings. It does not change older uploads or remove identifying details visible in an image. Other uploads may retain embedded metadata.

Member advertising

Ultra members can buy ad credits and publish short sponsored messages with uploaded still images and optional website links. Free and Supporter members can see a small text or image ad for thirty visible seconds, with a gap between displays and a dismiss option. Gizmorift may also show official Pro and Ultra plan offers; their links open the matching plan checkout when available and do not use member ad credits. Pro and Ultra members have ads off by default and can enable them in Settings. Ads are not selected using private messages, files, interests or location.

Gizmorift temporarily records account and session references to prevent duplicate billing across tabs and measure a complete display. Completed display receipts expire after ten minutes and are cleaned up when another ad is requested. Your account keeps the time of its most recent completed ad to space displays; this timestamp is included in your export. Advertisers see aggregate display totals, not viewer identities. Credit purchase records and ad campaigns remain with the account until deletion. Visiting an advertiser’s external link opens their website, which has its own policies.

Games

Games use your signed-in account. Friend invitations use accepted Personal friendships; random matches show player aliases without revealing private profiles, account addresses, or friend lists. Game positions, moves and results are stored by Gizmorift and are readable by the service. Unfinished board games expire after seven days of inactivity, invitations after thirty minutes, and completed results after thirty days. Live action matches end after a prolonged disconnection or server restart. Matchmaking searches expire when they stop receiving a heartbeat. Tank Arena, Neon Rally and Starfall also save completed-game totals, wins, XP, medals, personal records and total completed-match play time to your own account. These records remain until account deletion and are not used for advertising profiles. Game artwork, audio and play run through Gizmorift without an outside game catalog or game advertising network. Your account export includes your games and progression, and deleting your account removes those records.

Information used to run Gizmorift

We process account details, a salted password hash, your account address, role and plan; profiles and preferences; friendships, blocks and memberships; content and file metadata; reports, timestamps, emoji reactions, read receipts and optional online presence. Personal read receipts reflect messages visible in an open conversation; shared online presence reflects foreground activity. Call summaries, including missed or ended status and connected duration, are stored as conversation messages. We retain your last successful login and login count, rather than a persistent application list of IP addresses or browser fingerprints. Administrator accounts also use an authenticator secret and hashed recovery codes.

Credits and Shop

Gizmorift stores credit balances and transaction records for purchases, grants, transfers, plan gifts, Nova usage and Shop purchases. Transfers and gifts associate the sender and recipient accounts. Shop ownership is stored on your account so purchased styles can remain available across devices and plans. Credits have no cash-out option; purchases may be paused. Review current availability and prices in the app.

Nova AI

Signed-in members can use Nova with Gizmorift credits granted by administrators or previously purchased. Credit purchases may be paused by the owner. Developer accounts have unlimited Nova use. When you confirm an AI request, its prompt, the conversation context shown by the feature, and any images, recordings or clips you explicitly select are sent to Venice and, for some models, an upstream model provider. Model tags and the cost review describe the selected processing category; an upstream provider may retain content. Nova stores readable prompts and results in your account so you can reopen them. They are available to you through authenticated routes and can be deleted from your library. Credit and usage receipts may remain after result deletion to prevent duplicate charges and support payment refunds. If you save a personal Venice API key, Gizmorift encrypts it on the server and decrypts it to send your requests. You can remove it in Nova setup. This is server-managed encryption; it does not keep the key or submitted content hidden from the server operator. Using your own key also charges your Venice account while normal Gizmorift credit charges still apply.

Connections and service providers

Stripe processes plan payments and ad-credit purchases, and collects the payment method required for Pro trials. A trial becomes Pro at US$5 per month after seven days unless cancelled through Manage billing. Gizmorift receives payment-method, checkout and subscription identifiers, status, trial dates and amounts to apply benefits and credits and enforce trial eligibility. Full card details are handled by Stripe. Cloudflare provides the public tunnel, HTTPS termination and network services. It can process traffic and connection metadata under its own policies. Account creation includes a basic question checked by Gizmorift to discourage automated signups. No external verification service is used. Direct and group calls use public STUN services to find a network path; the other participant and network providers can learn connection information. Browser WebRTC protects media in transit. Gizmorift has no server recording feature. External bots can receive community content allowed by their installed permissions.

Calls do not have independently verified participant identity authentication or a TURN relay. See Security for more detail.

Browser notifications

If you enable push notifications, Gizmorift stores your browser push endpoint, encryption keys and a reference to the signed-in session. Encrypted notifications travel through your browser’s push service, which can process delivery metadata. Notification previews may show sender or group names and call details on a locked or shared device; the neutral preview setting shows a generic activity notice. You can disable notifications in Settings and your browser, and revoke associated sessions. Delivery depends on browser and device support.

Your controls

Settings provides session revocation, a password-confirmed JSON export and member-account deletion. Exports list files; download file contents separately. You can also change your profile, discovery preferences, presence and read receipts, and use blocking or reporting controls.

Account deletion removes associated live records and queues file and session cleanup, with retries for failed cleanup. It removes direct conversations involving the account and its authored group, community and Social content, and associated Social direct conversations. Shared spaces can continue under a remaining owner. Hiding a message removes it only from your own view. Recipients’ downloads and provider logs cannot be recalled.

How long information stays

Profiles, relationships and conversations remain until changed or deleted. Messages have no automatic expiry. Message-retry records contain request and message identifiers, a conversation identifier and a payload hash; they remain with the sending account until account deletion so a delayed retry cannot recreate a deleted message. Older stored content and backups can remain after a feature is retired or data is removed from the live app. The existing backup job retains up to 15 archives without a maximum age. Ask the operator about deletion of older copies if this affects you.

Questions or requests

Start with the export, session and deletion controls in Settings. For questions or unresolved privacy requests, email Gizmorift@gmail.com.

This notice describes current service behavior. Jurisdiction-specific legal review, youth safeguards and verified provider retention terms have not been completed for an unrestricted public launch.