Last updated: October 24, 2026
Roleo ("Roleo", "we", "us") is operated by modcore. This policy explains what data we collect, how we use it, and the choices you have. By using Roleo you agree to this policy.
Contact: modcoretech@proton.me
You sign in with Patreon. We receive your Patreon identity and membership tier.
Your chats, personas, character drafts, avatars, settings and API keys are stored on your device, not on our servers.
Only things you choose to publish (characters you submit for review) and your public profile are stored in our cloud.
When you use Roleo AI, your messages pass through our server to OpenRouter and a model provider. We do not store chat content.
We do not sell your data and we do not run advertising or ad trackers.
When you sign in, Patreon shares with us: your Patreon user ID, email address (and whether it is verified), full name, vanity name, and your active membership tier. We use your full name and vanity name only to create your initial display name and username. Your email is used to verify your account and identity.
Username, display name, and bio (bio up to 200 characters)
Lists of users you follow and who follow you
Account creation and update timestamps
Your username, display name, bio, follower count and following count are public. Your following list is visible only to you. Avatars are not uploaded to our servers.
If you submit a character for review, we store its name, tagline, description, definition, greetings, tags, review status and timestamps. Approved characters are public. Characters that are pending or declined are visible only to you and to moderators. Avatars are never uploaded.
If you report a character we store your user ID, the character ID, your written reason, and the time. If an account is blocked, we store the block reason and time.
Stored in your browser (localStorage / IndexedDB), scoped to your account:
Chats and messages, memory summaries
Personas (including avatars), local characters (including avatars)
Model settings, provider choice, endpoint, and any API key you enter
Notifications (kept for 14 days)
Your login session token (valid for 7 days)
We cannot see or recover this data. Clearing your browser data, or using a different device, will remove it.
Our servers process your IP address to apply rate limits and protect against abuse, and our hosting providers (Cloudflare) may log requests for security and operation. We do not use analytics or advertising cookies.
Roleo AI (free provider): your prompts (character data, persona, memory summary and recent messages) are sent to our server and forwarded to OpenRouter, which routes them to a free model hosted by a third-party provider. We do not store these messages. However, OpenRouter and the underlying model provider have their own policies, and free models in particular may log prompts or use them to improve their services. Do not send information you would not want a third party to process.
Bring-your-own-key and local providers: if you select OpenRouter (BYOK), a custom endpoint or a local server, your messages go directly from your browser to that provider and not through us. Your API key is stored only in your browser. Their privacy policies apply.
To authenticate you and provide your tier benefits
To operate profiles, following, publishing, review and reporting
To provide Roleo AI and enforce rate limits
To moderate content and enforce our Terms and Community Guidelines
To secure the service and prevent abuse
To comply with legal obligations
We do not use your data to train AI models, and we do not sell or rent personal data.
We share data only with:
Patreon (sign-in and membership verification)
Cloudflare (hosting, storage and edge processing)
OpenRouter and model providers (only when you use Roleo AI)
Authorities or other parties where required by law, or to protect rights, safety and the integrity of the service
Profile and published characters: until you delete them or your account.
Reports: until resolved or the character/account is deleted.
Local data: until you delete it or clear your browser.
Session tokens expire after 7 days.
Server logs kept by hosting providers follow their own retention periods.
Edit your username, display name and bio in your profile.
Unpublish or delete characters at any time. Unpublishing removes the cloud copy. People who added your character to their library lose access to it.
Delete your account from Settings. This deletes your cloud profile and published characters and clears local chats on that device. Some references (for example, follower counts on other profiles) may take time to update. Data on other devices must be cleared there.
Sign out to remove your session from the device.
Depending on where you live (for example the EEA, UK, or California), you may have rights to access, correct, delete, restrict or port your data, and to object to processing. To exercise them, email us. We may need to verify your identity. You may also complain to your local data protection authority.
We process data to perform our contract with you (account, features), for our legitimate interests (security, moderation, abuse prevention), to comply with legal obligations, and with your consent where applicable.
Our providers operate globally, so your data may be processed outside your country. Where required, we rely on appropriate safeguards offered by those providers.
Sessions are signed tokens, traffic uses HTTPS, and cloud access is permission-checked. No system is perfectly secure. Because chats and API keys live in your browser, keep your device secure and avoid shared computers.
Roleo is for people 18 and over. It contains user-generated fiction that may include mature themes. We do not knowingly collect data from anyone under 18. If you believe a minor uses Roleo, contact us and we will remove the account.
We may update this policy. The "Last updated" date will change, and for material changes we will make reasonable efforts to notify you. Continued use means you accept the update.
modcore — modcoretech@proton.me