# Privacy

## Who's responsible

Bando runs this site and the show, and is responsible for what they keep. Write to privacy@bando.show with a question about it, or to have your account forgotten.

## Signing in

You sign in through Privy, with X, Google, Discord or a wallet. We keep Privy's id for your account and the name chat shows: your X handle or name, your Discord handle, your Google name, or a wallet's first and last four characters. A Google name can be your real name. We don't keep your email address or your full wallet address.

## Chat

We keep every line you send, with your name and badges, and a show's replay keeps the lines sent while it was on. Checks hold a line they flag until a moderator lets it through or drops it, and past a hundred held, the oldest goes. During a poll, a message naming an option is your vote, and shows in chat like any other line. We keep which option you picked only while the poll is open, and the poll shows only how many picked each. We keep a keyed hash of your internet address, never the address itself, so a mute or ban can hold it. It's deleted a week after your last line, or, while a mute or ban holds it, once that ends. The clean-up runs as lines come in and as shows start.

## Watching

For each page you load, we keep the page, the site that linked you here, any campaign tags or share code in the link, and your account if you're signed in. We keep what it played and when, whether its tab was in view and its sound on, and each press of a sponsor's link. That's how a show and its sponsors are counted. Nothing ties one page load to the next unless you're signed in.

## What's public

Chat is public: anyone can read it live with your name and badges, and in a show's replay. Alexia is told to say viewers' names and to read out or answer what they write, so the recording, its transcript and its clips can carry them. A clip shows its title and who made it as soon as it's made.

## Who else sees it

Privy signs you in, and we read your account's id and names from it. OpenAI checks each message, your name, clip titles and sponsor cards for harm, and gets the text alone, without your account or address. OpenRouter passes chat, with names, to the AI models that write what Alexia says, and her words to the model that speaks them, which may keep them; they're what she says on air. Another model reads a message's text, without a name, for scams and private details. We ask OpenRouter to send chat only to providers it lists as neither storing what they're sent nor training on it. Cloudflare hosts the site and sees your address, as any host does. Browserbase runs Alexia's browser, which doesn't show chat, though she may open a link a viewer asks for.

## On your device

A cookie keeps you signed in for 30 days. Your browser's storage keeps two settings: theater mode and hidden chat. Once you press Sign in, Privy keeps its own sign-in tokens in your browser's storage and cookies. There's no analytics cookie, and nothing of ours follows you to other sites.

## How long we keep it

Until it's deleted. A moderator deletes a line, and a mute or ban takes your recent lines with it. The producer deletes a clip. These go by themselves: your address's hash and a held line, as above, and which option you voted for, when the poll closes.

## Having your account forgotten

Write to privacy@bando.show with the name you chat under. We may ask you to show the account is yours, such as by sending a word we give you in chat while signed in. We delete your lines from chat and every replay, your name, badges and votes, and take your account off the pages you loaded and the links you pressed, and your clips are credited to "a viewer". It takes effect at once in chat that's open, and within a couple of minutes on every page as it loads. A clip's title stays as it was written. What aired stays: the recordings, Alexia's own record of what she read and said, and the show's notes of what aired, of what she did, such as a link she opened or a search she typed for a viewer, and of what moderators did. A mute or ban that holds you stays, under your account's id alone, until it ends. Your sign-in account is Privy's: ask Privy to delete it.

[All shows](https://bando.show/shows.md), [all clips](https://bando.show/clips.md) and the [agent guide](https://bando.show/llms.txt).