Legal
Privacy Policy
Last updated: August 14, 2026
The short version
This website does not set tracking cookies and does not run third-party advertising scripts. We collect personal data only when you give it to us (for example, joining the waitlist), we use it only for the purpose you gave it for, and we delete it on request. Rylies is operated from Austria and built to comply with the GDPR.
Who is responsible
Data controller: Rylies, Vienna, Austria. Rylies is
currently in the process of being registered as a company in Austria; this notice
will be updated with the registered entity details as soon as the registration is
finalized.
Contact: hello@rylies.com
What we collect on this website
- Waitlist and registration forms: your email address and, optionally, your channel or handle and a phone number for waitlist updates. Legal basis: consent (Art. 6(1)(a) GDPR). Used solely to contact you about Rylies early access. Deleted on request.
- Server logs: our hosting provider may process IP addresses in standard access logs for security and operation (Art. 6(1)(f) GDPR, legitimate interest).
- Browser storage (not cookies): your referral tag and, during registration, small helpers such as your typed email (for prefilling, cleared when the tab closes) and your chosen page style are kept in your own browser. They are not read back by us; we only receive what you actively submit through the forms above.
Cookies
Cookies are small text files a website stores on your device. This website (rylies.com) sets no cookies at all: no analytics cookies, no advertising cookies, no third-party cookies. The only cookies we use anywhere are strictly necessary ones on the app, which is why no cookie consent banner is required, and none is shown.
When you register or sign in on app.rylies.com, these strictly necessary cookies are set:
| Cookie | Type | Purpose | Duration | How to remove it |
|---|---|---|---|---|
| rylies_session | Essential | Keeps you signed in to your account (HttpOnly, not readable by scripts) | 30 days, or until you sign out | Sign out, or delete cookies for app.rylies.com in your browser settings |
| rylies_oauth_state | Essential | Protects the "Sign in with Google" flow against forged requests | 10 minutes | Expires by itself |
Essential cookies cannot be switched off individually, because signing in does not work without them. You can block or delete cookies at any time in your browser's privacy settings (Chrome, Firefox, Safari, Edge); blocking them simply means you stay signed out. This policy is operated by Rylies, which is currently in the process of being registered as a company in Austria (see the imprint).
Do Not Track: this website does not track visitors, so there is nothing for a Do Not Track browser signal to switch off.
What we do not do
- No advertising or cross-site tracking cookies.
- No sale of personal data. Ever.
- No profiling of website visitors.
The Rylies product (creator pages)
Each creator's Rylies is built from the creator's public content with the creator's consent. Fan conversations with a creator's Rylies are anonymous by default; they are processed to answer the fan and to give the creator aggregated audience insights, and they are not used to train the underlying AI models. Questions containing personal data are scrubbed before storage. Answers are generated automatically and can be inaccurate. A separate product privacy notice applies inside the chat experience.
Service providers and international transfers
We keep the number of companies that touch your data small: a hosting and content delivery provider for this website and the app, and, for the product itself, established AI and infrastructure providers accessed through their business interfaces. Some of these providers are based in the United States; where personal data leaves the EEA, it is protected by EU-approved safeguards such as Standard Contractual Clauses. We will name additional providers here (for example an email delivery provider for sign-in codes) before they go live.
How long we keep data
- Waitlist and form data: until it has served its purpose or you ask us to delete it, whichever comes first.
- Account data: until you delete your account.
- Server access logs: kept briefly by our hosting provider and deleted automatically.
- Essential cookies: at most 30 days, as listed above.
Children
Rylies is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
Security
All connections are encrypted in transit. Sign-in credentials are never stored in readable form, and access to personal data is restricted to what operating the service requires. If a breach ever affects your data, we will inform you as the GDPR requires.
Your rights
Under the GDPR you have the right to access, rectify, delete, restrict and port your personal data, and to object to processing. Write to hello@rylies.com. We answer within 30 days. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde (dsb.gv.at). California residents: we do not sell or share personal information as those terms are defined in California law, and you can ask us to disclose, delete or correct what we hold about you at the same address.
Changes to this policy
Updates appear on this page with a new "Last updated" date. If a change is significant, we will flag it clearly here before it takes effect.