Privacy Policy

1. Who's responsible

PATV (publicaccess.tv, the Pepe bot and our Discord and Twitch bots) is run by Houseplants LLC, who is responsible for your personal data. Contact: [email protected]. This policy goes with our Terms of Service.

2. What we collect

You give us

• Account details: username, display name, email address, password (stored only as a one-way hash), profile picture and profile settings.
• Linked identities: your Camfrog name (when you !verify), and your Discord or Twitch account id and display name when you sign in with them. We don't get your Discord or Twitch password. Discord and Twitch also give us the email address on that account when they have verified it: we use it to find your existing PATV account, and if your PATV account has no verified email yet we save it as your account email so you can recover your account. You can change it in your profile settings.
• Your content: posts, comments, pictures, audio, video, links, votes, follows, reports, direct messages to other members, messages to Pepe and anything else you submit. Uploaded files are re-encoded and their embedded metadata (camera, GPS location) is removed.
• Activity in PAT features: your PAT balance and ledger, games, bets, markets, wagers, staking, purchases, achievements and cosmetics.

We collect automatically

• Safety data when you post or comment — see section 4.
• Anti-abuse keys for the welcome bonus: to stop one person claiming it many times we keep salted, one-way hashes (never the raw values) of the network you use, a random browser id, and your linked identities, plus the days you were active. Network hashes are dropped after 90 days.
• Technical data: like every website, our servers and Cloudflare (which sits in front of the site) process your IP address, browser type and the pages you request in order to deliver them and stop attacks. Short-lived server logs may contain this.
• Camfrog activity: Pepe counts public activity in the rooms he's in (chat, mic time, commands, moderation) per Camfrog name; it powers profile stats, achievements and leaderboards.

3. Camfrog rooms on the website

Pepe sits in public Camfrog rooms and mirrors them to the website for members: public room chat, who's in the room, who's on the mic, and what's said on the mic, transcribed automatically by speech-recognition software. Transcripts can be wrong. Private messages are never shown. If you type !incognito or !bridge hide in the room, you appear as "someone". Pad owners can switch the mirror, the audio and the transcripts off for their pad. Pepe's snaps and clips of a room (!snap, !clip) are shown as stories to signed-in members and expire after 24 hours by default.

Things you say to Pepe, in rooms or on the site, are processed by automated systems — including AI language and speech models that we run ourselves or that service providers run for us — to produce his replies.

4. Safety data on posts and comments

To fight spam, ban evasion and abuse, every time you create or edit a post or comment, or send a direct message we store a separate, private record with:

• your IP address (as passed on by Cloudflare) and a salted one-way hash of your network;
• your browser's user agent and its Accept-Language setting;
• a country, taken from Cloudflare's country header — we don't look IPs up anywhere else;
• your account's age at the time and whether Camfrog, Discord or Twitch is linked;
• a salted one-way hash of your browser id (the patv_dev cookie), which tells us when several accounts post from the same browser.

Who sees it: only PATV site administrators, when reviewing a report or investigating abuse. They can see other accounts that posted from the same network or browser in the last 90 days, and your recent posting and report history. Every time an admin opens this data it is logged. Pad owners never see it — they only see an account's age and whether it's linked. It's never shown on public pages or APIs.

How long: the raw IP address and user agent are deleted automatically after 90 days. The rest of the record (hashes, language, country, account age, linked status) is deleted after 365 days, so repeat abuse can still be matched after the IP itself is gone. The admin access log is kept for 2 years.

Why (legal basis, where it applies): our legitimate interest in keeping the service and its users safe, and complying with the law (for example reporting child sexual abuse material).

5. How we use it

• To run the service: your account, sign-in, posts, pads, PAT features, notifications and your inbox.
• To keep it safe and fair: moderation, reports, rate limits, detecting spam, ban evasion, multi-accounting and cheating.
• To communicate with you: account emails (verification, password resets) and inbox notices. No marketing email.
• To fix bugs and improve the service, using aggregate or minimal data.
• To comply with the law and respond to valid legal requests.

We don't sell or rent personal data, we don't use it for advertising, and we don't run third-party analytics or ad trackers.

6. Who can see what

Direct messages

Direct messages are not end-to-end encrypted. They're sent over HTTPS and stored on our servers like the rest of the site, so don't use them for anything you wouldn't want an administrator to be able to see in an emergency. We don't read them, scan them for advertising or use them to train AI. A site administrator can read a message only when someone in the conversation reports it: then the admin sees that one message (a copy is kept with the report, even if it's later deleted) and its safety record, and every such view is logged. Pad owners never see direct messages or reports about them.

Group chats (up to 10 people) work the same way. Everyone in a group sees its messages from the time they were added, its name and who's in it; adding, removing, leaving and renaming show up in the chat. Someone can add you to a group only if they're allowed to message you (your "who can message me" setting and blocks apply). If you've blocked someone in a group you're both in, their messages are collapsed for you and they aren't told. When a group message is reported, the admin sees that one message, the group's name and how many people are in it, never the rest of the chat.

Pictures you send in messages are private to the conversation: they're never public links and are only shown to its current members, who must be signed in. Before storing them we re-encode them and remove their metadata (including camera details and GPS location). You can mark a picture NSFW so it's blurred until clicked. Deleting a message deletes its pictures for everyone (the files are erased within a few hours, or once a report about the message is resolved); clearing or leaving a conversation hides them from you only. A link to a PATV post shows as a small card that follows the post's own visibility: removed or hidden posts show as unavailable.

If you've linked a Camfrog name, Pepe sends you a Camfrog private message when you get a direct message you haven't read here (on by default, at most once per conversation every 10 minutes; group alerts name the group). It quotes the start of the message unless you turn previews off, and never quotes someone who has !incognito on. For a picture it only says that a photo was sent, never the picture or a link to it. Turn alerts or previews off in your message settings, or mute a single conversation. You decide who can message you (everyone, people you follow, or nobody) and can block anyone.

7. Who we share it with

• Service providers who help us run PATV, only for that purpose: server hosting (Turnkey Internet, in the United States); network, DNS, security and email routing (Cloudflare); the Pepe help and overlay site (Netlify); emails such as sign-up verification and password resets (Resend, SendGrid); sign-in and our chat bots (Discord, Twitch); AI model providers that write Pepe's replies, make images and video, and read pictures when those features are used (currently Anthropic, Google (Gemini) and Z.ai (GLM), and, depending on configuration, OpenAI, Moonshot AI (Kimi), OpenRouter and TypeSafe); web search for Pepe's answers (Brave Search); and music (Spotify). Some speech, voice and vision processing runs on hardware we operate ourselves. We also read news headlines from Google News RSS, which receives nothing about you.
• Camfrog, Discord and Twitch, when you link them or sign in with them, under their own privacy policies. Things Pepe says in a room are visible to that room.
• Embedded players: YouTube (privacy-enhanced mode) and Twitch players only load when you click play, and then those companies receive your IP address and their own cookies apply. The site's fonts are loaded from Google Fonts.
• Authorities: when the law requires it, to protect someone's safety, or to report child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) via its CyberTipline, as required by 18 U.S.C. § 2258A, and law enforcement where appropriate — in which case we may share the content and the safety data we hold about it.
• If PATV changes hands, data may transfer to the new operator under this policy.

8. Cookies and local storage

We only use what the site needs. No advertising or tracking cookies.

9. How long we keep things

10. Your choices and rights

• Edit or delete your posts and comments, and choose which profile panels are public, at any time.
• In Camfrog rooms, !incognito / !bridge hide keep your name off the website. Incognito does more than that: see Incognito below.
• Turn inbox notices on or off in your inbox settings; choose who can message you, block people and turn Camfrog alerts for messages on or off in your message settings.
• Clear cookies and local storage in your browser (you'll be signed out).
• Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, and to complain to your data-protection authority. Email [email protected] from the address on your account and we'll respond within the time the law requires. We may need to keep some data (for example safety records about content that was reported) where the law allows or requires.

Incognito

Incognito is a switch for your chat identity (your linked Camfrog name). It is off unless you turn it on. Turn it on or off with !incognito on / !incognito off in chat (in a room or a PM to Pepe), or in Settings → Privacy on the website. Both change the same setting, and you get an inbox notice when it changes.

While incognito is on:

• Pepe doesn't remember anything new you say - in rooms, in PMs, in direct messages on the site or on Telegram. Lines that were still waiting to be remembered when you switched it on are discarded.
• You're "someone" on the website: your name is hidden on the live room view and your chat lines aren't shown there, so they can't be quoted or turn up as mentions.
• Captures of you are private: snaps and clips that show you can't be kept or posted, your cam can't be used as a reference for AI pictures, and Pepe doesn't keep your mic audio for clips.
• You're left out of bounty evidence and analytics: your lines are never quoted or sent to the AI judge when a bounty is checked, your most-used words aren't recorded for your profile analytics, and room statistics count you without naming you.

What it doesn't do: it only stops new data. It doesn't delete what Pepe or the site already stored about you, including memories, chat logs, captures and analytics from before you switched it on. To have that deleted, or to get a copy of it, email [email protected] from the address on your account (see your rights above). Your points, games and commands work as usual while it's on.

11. Children

PATV is for adults (18+). We don't knowingly collect data from anyone under 18; if we learn we have, we close the account and delete the data, except where we must keep it to report abuse.

12. Security

Passwords are hashed, the site is served over HTTPS, sign-in cookies can't be read by page scripts, the most sensitive data is limited to administrators with every view logged, and identity keys are stored as salted hashes. No system is perfectly secure; if a breach affects you we'll tell you as the law requires.

13. Where data is stored

Our servers are in the United States, and service providers such as Cloudflare may process data in other countries. Where the law requires, we use appropriate safeguards for these transfers.

14. Changes

We'll update this policy when what we do changes. The "Last updated" date at the top shows the latest version; for significant changes we'll also give notice on the site.

• 13 October 2026: added Incognito (section 10): what the incognito switch stops, what it doesn't delete, and that it can now be changed in Settings → Privacy as well as with !incognito. A clarification of a setting you control; nothing about what we collect changed.

15. Contact

Privacy questions and requests: [email protected]. Everything else: [email protected].

Version 2026-10-11. Terms of Service · About PATV