Republic Privacy Policy

Characters and the people behind them

A fictional profile can still contain personal data. This Policy explains how the people operating Republic process information about visitors and account holders. It applies to Republic's services, not the independent practices of Discord, linked websites, or people who copy public material. The Legal & Safety Center provides a private request channel. The operators must provide any additional identity, representative, or contact disclosures required for their circumstances; a fictional character or organization is not a substitute for the actual data controller.

Information we receive

Account information includes a Republic identifier, handle, display name, biography, profile images, affiliations, account status, and the settings you choose. Discord authentication provides a stable Discord user identifier and an authorization limited to identifying your account. We do not request your Discord email address, contacts, servers, messages, or password through the default sign-in scope. Access and refresh credentials needed to maintain the connection are encrypted and restricted to the server. These credentials are never public profile fields.

We receive content you submit, including posts, replies, quotes, uploaded media, descriptions, community activity, and private messages if you use available messaging features. Interaction records include likes, reposts, follows, bookmarks, blocks, reports, and notification read states. Reports, appeals, verification applications, and legal requests may contain supporting text or contact information you choose to provide. Do not send identity documents, sensitive health details, payment information, or another person's private records unless a specific lawful process requires them. Copyright notices and counter-notices may require real contact and signature information.

Eligibility records include your declared country, the applicable minimum age, and the date of your eligibility confirmation. We do not ask for your date of birth during registration or linking and do not infer an age band from Discord authentication. Broad age bands recorded before this change may remain subject to our retention and correction rules. Self-declaration and Discord control are not identity or age verification. We also record the legal document versions and timestamps you accept or acknowledge.

Technical information can include network addresses, request and error information, session identifiers, necessary cookie identifiers, device/browser characteristics, and security signals used to operate and protect the service. Infrastructure providers may maintain operational logs. Technical and security measures help identify abuse, enforce platform rules, and prevent circumvention of restrictions. We do not disclose the implementation of those safeguards, and a technical association is not treated as conclusive evidence of wrongdoing.

Why information is used

We use information to authenticate accounts, maintain sessions, display your chosen fictional profile and submissions, provide social and community features, deliver requested content, support account recovery, and apply your settings. We use activity signals to order conversations and recommend relevant public content within Republic. We use reports and relevant records to investigate harmful conduct, handle appeals and legal complaints, secure the service, prevent fraud and restriction evasion, and meet legal duties. Operational measurements help diagnose failures and reduce unnecessary requests. Essential communications concern policy changes, account security, moderation, and important service notices.

Where data-protection law requires a lawful basis, processing may be necessary to perform the account agreement, meet a legal obligation, or pursue proportionate legitimate interests such as service security and responsible moderation, with consideration of your rights. Optional processing that requires consent must remain off until valid consent is obtained. A Privacy Policy acknowledgment is not blanket consent. We do not rely on accepting Terms to authorize every form of processing, and we do not claim that every visitor is covered by identical legal rights.

Who can see what

Public profiles and public posts are visible to other people and may appear in search results or link previews. Consider what you disclose before posting. A followers-only audience is checked by the service and is not intentionally placed in a shared public cache or public embed. Private messages and restricted material are available only to their permitted participants and authorized personnel with a legitimate operational, safety, or legal purpose. They are not end-to-end encrypted. Reports and internal review records are not shown to the reported account merely because it was reported. Staff access is restricted by role, and sensitive actions create audit records.

Recipients can copy or disclose content they can access. Revoking access or deleting material cannot retrieve those copies. Previously issued temporary media URLs expire rather than providing instantaneous revocation of a downloaded file. Do not use Republic to share secrets that require stronger confidentiality.

Service providers and other disclosures

We use third-party providers for infrastructure, authentication/session services, database and file storage, security, delivery, and communications. They may process relevant information to perform those services and may have their own legal duties. We use contractual and technical safeguards where required; the operator must verify the applicable provider terms and transfer arrangements. This Policy describes provider categories without exposing the system's internal deployment details.

Discord is a separate service. Signing in sends authorization information to Discord. When an essential DM is attempted, Discord receives the recipient identifier and a brief notice or service link. The system avoids placing sensitive moderation reasons or private message text in those DMs. Discord independently determines DM availability and handles information under its own policies. Disabling essential Discord DMs keeps notices available on Republic. We do not sell personal information or operate an advertising-tracking system in the current service.

Information may also be disclosed when reasonably necessary to comply with a valid legal requirement, protect a person from a serious threat, investigate abuse, exercise or defend legal rights, or complete a lawful organizational change with appropriate notice and safeguards. We do not promise confidentiality against every lawful demand.

Storage, security, and retention

We use encrypted transport, protected server credentials, restricted database access, account-specific session storage, and security auditing. No system can eliminate every risk. Keep your Discord account secure and sign out of shared devices. Account and content information is retained while needed to provide the account and its features. Saved-device sessions expire after up to 45 days; Discord verification for ordinary participation expires sooner and may require renewal. Security cookies have limited lifetimes described in the Cookie Policy.

Deletion requests promptly restrict ordinary participation and schedule live-data erasure within 30 days, unless a documented legal or safety hold applies. Processing removes account content, credentials, and associated stored media from live systems. Shared conversations, third-party copies, caches, and Discord records have separate limits. Completed notification delivery logs and ordinary security rate-limit records are pruned after their configured operational periods. Moderation, legal, and audit evidence may be retained for a limited period needed to handle abuse, appeals, rights claims, or applicable duties, with periodic review of any hold. We do not keep account data indefinitely merely because storage is available.

Backup copies are isolated from ordinary access and age out under the operator's backup schedule. If a backup is restored, deletion records must be reapplied. The operator must confirm the actual backup lifecycle and any mandatory evidence-retention period; this document does not invent a provider-wide erasure deadline. Where preservation prevents immediate deletion, a request response should explain the relevant reason and expected review, unless law prevents disclosure.

Controls and requests

You can edit your profile, choose the audience for a post, block accounts, manage permitted messaging and essential Discord DMs, and review saved sessions. Account privacy controls provide a structured export and a deletion request. The export excludes other people's restricted data, secret credentials, and confidential internal security records. Use the legal request channel for access, correction, objection, processing restriction, portability, deletion questions, or a concern about an automated or moderation decision.

We verify authority before disclosing or changing personal data and may request proportionate additional information when needed. We aim to respond promptly and within the applicable statutory deadline; extensions or refusals must follow the law that applies. Rights can have exceptions, including protection of other people and lawful preservation. You may withdraw optional consent without changing the lawfulness of earlier consent-based processing, and you may complain to a competent supervisory authority where that right applies. Privacy requests remain available if you decline updated Terms or cannot resume ordinary participation.

Younger users and international use

Republic does not permit children below 13 or a higher applicable minimum age. If we learn that an account is ineligible, we restrict it and arrange deletion or lawful handling of relevant records. We do not treat a checkbox as a substitute for every age-assurance, child-safety, or parental-permission duty. Service providers or authorized staff may process data outside your country. The operator must establish any required international-transfer safeguards, local representatives, and jurisdiction-specific notices before relying on them. Contact the legal request channel for information about safeguards relevant to your account.

Policy versions

Current and prior published versions are available in the Legal & Safety Center with their effective dates. Important changes are announced on Republic and may be queued for Discord delivery. Editorial corrections do not automatically trigger a new contractual agreement. A new policy does not retrospectively authorize incompatible uses or replace consent where consent is legally required.