Privacy Policy
Ripple (present.buddyx.cc, “the Service”) is a live audience-interaction tool for speakers. This policy explains what data we collect, how we use and keep it, and the rights you have. If this English version differs from the Traditional Chinese version, the Traditional Chinese version prevails.
1. Data we collect
Speakers (users who sign in with a Google account)
- Basic data from your Google account: account ID, name, email and profile picture URL. We only request the three basic scopes
openid,emailandprofile, and never read your Gmail, Drive, contacts or other Google data. - Usage records: sign-up time, last sign-in time, the last time you used the stage or the PowerPoint add-in, number of sessions, and your interface language.
- Content you create: session titles, activities, questions, topics and options, and layout settings.
Audience (people who join by scanning the QR code)
- The audience doesn't sign in. The browser generates a random anonymous ID and stores it in that browser to prevent duplicate votes and to keep quiz scores. It cannot identify who you are.
- Content the audience sends: votes, upvotes, questions, suggested topics, quiz answers, nicknames (optional), reactions, understanding-meter responses and comments. Only the most recent comments are kept temporarily for the speaker and are cleared when the activity changes.
2. How we use data
- To identify speaker accounts, so you can only see and manage your own sessions.
- To provide live interaction (showing results on the big screen and phones).
- To understand how the Service is used (e.g. number of sign-ups and active speakers) so we can run and improve it.
We don't sell your data, and we don't use it for advertising or to build marketing profiles.
3. Google user data
The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is only used to sign you in and show your name and picture. It is not shared with third parties and is not used to train AI models.
4. Cookies and browser storage
- Speaker sign-in cookie: keeps you signed in for 14 days; cleared when you sign out.
- Sign-in flow cookie: protects against forged requests during Google sign-in; expires after 10 minutes.
- Google sign-in button: the sign-in page uses Google's official sign-in button (loaded from accounts.google.com). Google may set its own cookies to remember the sign-in prompt state, under Google's privacy policy.
- Language cookie: remembers your interface language (Traditional Chinese or English).
- Local browser storage: the audience's anonymous ID and nickname. The PowerPoint add-in's layout settings are stored in your PowerPoint file.
The Service uses no advertising or third-party tracking cookies.
5. Storage and processors
- Data is stored on Cloudflare's cloud services (Workers and Durable Objects) and encrypted in transit (HTTPS).
- A session and its audience content are kept until the speaker deletes the session. Deleted sessions cannot be recovered.
- Speaker account data is kept until you ask us to delete your account.
- The only processors that help us provide the Service are Google (sign-in) and Cloudflare (hosting and storage).
6. Your rights
You can delete any session at any time from “My sessions”. To access, correct or delete your account data, or to withdraw consent, email us. You can also remove Ripple's access in your Google account's third-party access settings.
7. Children
Speaker accounts are not offered to children under 13. If audience members are minors, the speaker or school should use the Service according to their own rules.
8. Changes to this policy
If we make significant changes, we will update the effective date on this page and announce it in the Service.
9. Contact us
Email: buddyxhost@gmail.com