Privacy Policy

This Privacy Policy explains how White Rabbit Entertainment ("White Rabbit," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the White Rabbit website, applications, and browser extension (the "Service"). White Rabbit Entertainment is the business responsible for your personal information (the "controller" under laws that use that term). We're based in California, United States.

This policy should be read with our Terms of Use, Cookie & Storage Policy, and Advertising Policy. It doesn't cover third-party websites that rabbit holes link to, which have their own policies.

Information you give us

• Account information: your email address, name, username, and password. Passwords are handled by our authentication provider and stored only in hashed form. If you sign in with Google, Apple, or GitHub, we receive your name, email address, and an account identifier from that provider.
• Profile information: your bio, what you're currently curious about, the topics you pick, and the people you follow.
• Content: rabbit holes (titles, notes, Trails of links, topics, questions, time spent, and cover images, which you upload to us), comments (with the earlier versions of any you edit), likes, bookmarks, forks, and relays.
• Messages: the messages, reactions, photos, videos, files, and voice messages you send, and the conversations you're part of.
• Requests to Rabbit on boards: what you type or say when you ask Rabbit on a board. A spoken request's recording is turned into text and not kept, and your conversation with Rabbit lasts only while the board is open.
• Imported history: browser history files you choose to import, and pages you sent to White Rabbit with the bookmarklet or your phone's share sheet before October 13, 2026. Pages you share with White Rabbit now go only where you put them: a private rabbit hole, a rabbit hole you're on, or the composer.
• Invite links: the invite links you make to a rabbit hole you're on or a group discussion you're in, until when each works, how many people joined with it, and whether it was turned off.
• Asks to join: the rabbit holes and chats you ask to join, when you asked, the note you add, if any, and, for a chat, the posted board you asked from.
• Plus and payments: when you start checkout for White Rabbit Plus, we give Stripe your email address and your account's id, so your payments are tied to your account. That creates your customer record at Stripe, and we keep its id even if you don't finish. If you subscribe, you pay on Stripe's own pages, and Stripe keeps your card details and billing address. We never see your full card number. In Stripe, we can see what it shows the businesses it works for, like your card's brand and last four digits, your billing address, and your invoices. Our own billing record keeps your Stripe customer id and, once you subscribe, your subscription's id, its status, its price, when it renews or ends, and whether you've cancelled it.
• Safety choices and reports: the people you block, who can contact you, and the reports you send, with the reason, any note, and a copy of what you reported.
• Communications: what you send us when you email us for support, make a request, or report a problem.

Information created as you use the Service

• Activity: rabbit holes you open, like, save, or comment on; the settings you choose (such as default visibility and AI model); and notifications.
• Badges and streaks: the badges you've earned and when, including your Founder number if you're one of the first 1,000 people. They show on your profile to anyone who can see it, unless you hide them (you can hide any badge). Maker counts only your public rabbit holes; the badge shows a level, such as “10 rabbit holes”. We also keep the last date you opened White Rabbit (by your own date, which your browser sends), with how many days in a row you've opened it and your longest run. Only you see those exact figures and that date. The Streak badge you reach shows on your profile like any other badge, unless you hide it.
• Rabbit hole of the day: one of your public rabbit holes may be featured to everyone, including people who aren't signed in, at the top of Discover and at Rabbit holes of the day, with your name (people who are signed in also see it in Explore). It's chosen from what other people did with it (likes, saves, comments, shares, and forks) or picked by hand by White Rabbit. We keep which of your rabbit holes were picked, and on which dates, and tell you when one of yours is. If one of yours is picked, it's also emailed to every member who gets the daily email, with your name and profile photo. If it has no cover uploaded to White Rabbit, an image model draws a small picture for it from its public title and description (see AI processing).
• Discover taste: how you respond to rabbit holes on White Rabbit (how long posts stay on your screen and how long you spend on a rabbit hole, resting the pointer on a post, likes, saves, comments, forks, shares, follows, and Not interested), summed up as weights for topics, people, and sites. Kept in your browser, and with your account when you're signed in. Only you can see it.
• AI requests: a record of each request to Rabbit, with what kind it was (such as a reply to a comment, or a look at your browsing), when it was made, and how much of your allowance it used, so we can apply your daily and weekly allowance and fair-use limits. It doesn't include what you asked or what Rabbit answered.
• Usage events: we count first-party usage events, like signing up, publishing, opening a rabbit hole, following someone, passing on a relay or taking one deeper, sharing a link, opening a link someone shared or signing up from one, making or joining with an invite link, saving a link, ignoring or deleting a rabbit hole Rabbit suggested, and which push or email brought you back, with a random id for your browser, to see where people get stuck and what brings people back. When you're signed in, they're linked to your account. Each one says what kind of thing happened, such as whether a rabbit hole you opened is one you're on, the kind of page you followed someone from, which line of an email you opened, or whether you changed the title, question, or summary Rabbit wrote for a rabbit hole before you saved or shared it, never the words themselves, titles, addresses, or other people. A few are counted while you're signed out too, for your browser alone: landing on a page (never linked to your account, even when you're signed in), how long it took to show something, in ranges, opening a rabbit hole, walking through one as cards (opening them, and reaching the second page, the third or the end) and reading a page inside White Rabbit, starting to sign up, and a sign-in link that didn't work; and if the link that first brought your browser carried campaign tags (such as utm_source on an ad's link), we keep the site, campaign and ad they name, whether it had an ad's click marker (never the marker itself), whether White Rabbit opened inside another app's browser, and the kind of page, on your device, sending them with your visits and your sign-up (an email sign-up keeps them with your account's sign-up details until you finish setting up). Your browser replaces that id every 13 months, and we delete events after 13 months. There's no third-party analytics and no cookies, and it never includes your browsing.
• Rate limits: a record of when you post, comment, send, follow, like, report, and similar actions, kept only as long as needed to limit how fast any one account can act. A few requests that don't need an account, such as fetching site icons, are counted by IP address instead, and usage events sent while you're signed out by a scrambled form of it that's kept for a few minutes.
• Moderation records: reports about your content or account, with a copy of what was reported, and any action we take, such as hiding content or suspending an account. If a suspended account is deleted, we keep a one-way fingerprint (a SHA-256 hash, not the address itself) of its email address and of each sign-in account (such as Google) used with it, so a new account made with them stays suspended until the suspension would have ended. The same goes for an email address or sign-in changed or removed while the account is suspended. Fingerprints can't be turned back into the address, and only our systems read them.
• Presence: whether you're typing in a conversation, shown to the others in it while it happens; and, while you have a rabbit hole's board open and are signed in, that you're there and where your cursor is, shown to the others who have it open.
• Notifications outside the app: on each device where you turn on push, the address your browser gives us for delivering to it; when you last opened White Rabbit and when we last emailed you, so the daily email comes at most once a day, in your morning, an email about what happened while you were away comes only when you don't get the daily one (also at most once a day), and a recap once a week; when you last tapped Keep them coming in a daily email (see the daily email, below); your time zone, as your browser reports it when you open White Rabbit (like “Europe/Paris”), so the daily email comes around 8 AM where you are; in the EEA and the UK, when you said yes to the daily email; and a record of each email we send, so we stay within our daily sending limit. For each conversation with new messages you haven't read, we keep who wrote last and how many there are, never what they said, until you read, clear, mute, or leave it, so a push or an email can tell you. If you turn on Rabbit, we keep one note of how many new rabbit holes it last found, and in which browser (like “Chrome on your Mac”), never what they are, so a push or an email can tell you where to look. Each new count replaces it, and it's deleted when you turn Rabbit off or delete your history. When people or topics you follow share new rabbit holes, we keep one notification a day that says who shared the newest, how many there are, which ones, and which day it's for, so the app, a push (at most one a day, so we keep when the last one was), or an email beside your other news can tell you; never about private rabbit holes, and never if you turn it off.
• The daily email: starting October 15, 2026, each morning around 8 AM where you are, an email with that day's rabbit hole of the day: its title, description, first pages and picture, and who made it, with their name and profile photo, plus what happened while you were away when you've been away. It's on unless you turn it off, except in the EEA and the UK, where it starts only once you say yes in Settings → Notifications or on the notice in the app. It pauses after 30 days without you opening White Rabbit while signed in, so it doesn't go on to an inbox nobody reads. In the week before, it says so, with a Keep them coming link that keeps it coming for 30 days from your tap, without signing in; we keep when you last tapped it. Stop it with the link at the bottom of any daily email, which also stops emails about what happened while you were away; that page also offers to stop every email we send. We keep which date we last sent it for, and when. If you ask for it without an account (“Get tomorrow's rabbit hole by email”), the 6-digit code we email you makes a free White Rabbit account for that address, with a username like “reader_482913” and none of your email's own words in it, and the daily email on, because you asked for it; you can choose a name and username, or delete the account, anytime.
• Which push or email brought you back: the links in our pushes and emails carry a short tag saying which push or email it was and which line of it you opened (such as a comment, or the email's settings link). The tag is the same for everyone who gets that push or email, so it doesn't say who you are. When you open one, White Rabbit counts it as a usage event, linked to your account if you're signed in, and takes the tag off the address.
• Who shared a link: links to White Rabbit's rabbit holes, boards, topics, profiles, and invites that you copy or share while signed in end with your username, so if someone makes an account from one, White Rabbit can offer them the choice to follow you as they set up. You're told they joined only if they choose to follow you; otherwise nobody is told, and it's only counted. If you make an account from someone's link, we keep who shared it with your account, where only our systems read it (if you sign up by email, it's also kept with your account's sign-up details until you finish setting up).
• Capture settings: whether rabbit-hole detection is on, pauses, your Never analyze list, the categories you skip, and whether you turned Rabbit on and when you answered, saved to your account so they apply everywhere you capture.
• Safari history, if you connect Safari on a Mac through White Rabbit Helper, as described in Safari on a Mac.

Information collected automatically

• Device and log information: your IP address, browser and operating system type, the pages of the Service you request, and the date and time, recorded in our hosting providers' server logs.
• Cookies and local storage: a session cookie that keeps you signed in, and in your browser's storage your preferences (such as your theme), the random id for usage events, who shared the link that brought you to a tab, and the other small things listed in the Cookie & Storage Policy. Where ads appear, Google sets its own advertising cookies (see Advertising). We don't use third-party analytics cookies.

Information from others

Other people may mention you, send you messages, fork or relay your rabbit holes, add you to a conversation or a rabbit hole, send you an invite link, ask to join your rabbit holes or chats, with a note, block you, or report your content or account. If you make an account from a link someone shared, the link tells us who shared it. Sign-in providers send us the information described above when you choose to use them.

The White Rabbit extension is how the Service notices rabbit holes. Here is exactly what it does:

• What it records. Each web page you load in a normal browser window, and, from version 0.6.0 (not on Safari, which doesn't tell extensions about them), each new page a site opens in place without a full page load (a video, post or thread): its address (URL), title, domain, when you visited, how long you spent on it, and how you got there (the page or tab it opened from and the kind of navigation). From version 0.6.0, time counts only while the page is the tab in front and you're at the computer, or it's still playing sound while you're away and the screen isn't locked, so a tab left open behind others counts none (Safari can't tell when you're away, so there it counts while the page is in front); earlier versions counted until the next web page was recorded in that tab, or the tab closed, even while White Rabbit was paused or the tab showed a browser or file page in between. On Chrome, Edge, Brave, Opera, Vivaldi, Arc, and Firefox, it can also read the past week of your browser's own history, but only if you allow it: it asks in a window of its own when you turn on Rabbit, and never when it's added. Safari doesn't allow this.
• What it never records. Anything in private or incognito windows (it doesn't run there at all), and the text or content of the pages you visit. From version 0.6.0, it also never records White Rabbit's own pages, or pages that are clearly on your own computer or local network: localhost, local names (like printer.local or http://nas/), private addresses (like 192.168.1.1), and anything served on a port of its own (like a development server). A device on an ordinary web address can't be told apart and is treated like any other site. Earlier versions kept these in the extension's storage too; White Rabbit doesn't send them to Rabbit, and updating deletes them.
• What it drops before storing. Sites on your Never analyze list; sensitive categories (banking and money, health and medical, email, work tools, password managers, and adult sites, all excluded by default); sign-in, authentication, account, settings, checkout, cart, billing, and password pages; links that are themselves the way in to something private (shared documents and folders, meeting links, invites, and magic sign-in or password-reset links); and anything you visit while White Rabbit is paused. Every address it keeps is cleaned first: the part after # is removed, and so is any part of it that looks like a secret (sign-in and reset tokens, codes, keys, signatures, session ids, passwords, email addresses) or only tracks a click, and on White Rabbit's own pages, who shared the link and which push or email it came from. The app applies the same rules again when it receives anything.
• Where it's kept. In the extension's own storage in your browser, for a rolling seven days (and at most 3,000 page views). Older entries are deleted automatically.
• Where it goes. Only to a White Rabbit tab open in the same browser, and only when that tab asks for it. Your browsing is kept in that tab's memory and is not uploaded to our servers, with one exception you choose: Rabbit, which is off until you turn it on. White Rabbit asks once the extension connects, and you can answer in Settings → Capture & privacy too. If you turn it on, once a day, or sooner when a sitting you've finished looks like a rabbit hole, what AI processing lists, from pages you've browsed since it last looked (the first time, the last two days; after that, from where it stopped, up to the past week but never more than two days from before you turned it on; never full addresses, and nothing the rules above drop), passes through our servers to our AI provider, which finds the rabbit holes in it. It isn't stored there. A busy day, or catching up after days away, is read over more than one look, and a finished sitting that looks like a rabbit hole doesn't wait for the day's look: at most four looks in a day. If you turned Rabbit on before October 13, 2026, it still reads at most the last two days, until you turn it off and on again. Any White Rabbit page you have open on a computer while signed in can look, even in a tab you're not looking at, and only one tab in a browser looks at a time.
• What reaches our servers. Only a rabbit hole you choose to save or share, as you edited it, history files you deliberately import, and, if you turn on Rabbit, what AI processing lists and how many rabbit holes it found and in which browser, never what they are. The extension itself sends nothing to White Rabbit Entertainment or anyone else, and contains no analytics.

The extension asks your browser for these permissions: storage (to keep its record and, from version 0.6.0, how many rabbit holes Rabbit found, which White Rabbit tells it for its toolbar button), tabs and webNavigation (to see page loads, pages a site opens in place (not on Safari), which tab is in front, and which tab led to which), idle (from version 0.6.0, to stop counting a page's time while you're away from the computer: it only learns whether the computer is active, idle or locked, never what you type or click; not on Safari), history (to read the past week, except on Safari), scripting (to connect White Rabbit tabs that were already open when you installed it, and, on Chrome from version 0.6.0, to put its toolbar button's card on the page you pressed it on), and, on Chrome from version 0.6.0, activeTab (to show its toolbar button's card in the corner of the page you pressed it on, only then and only on that page; it reads nothing from the page). Versions before 0.6.0 also asked for alarms (to check for rabbit holes every few minutes and show a count on the toolbar button), and not for idle or activeTab.

You can pause the extension, change its rules, delete everything it recorded with Delete history in Settings → Capture & privacy, or uninstall it. Your browsing is never sold, shown to anyone, or used for advertising, feeds, or search, and it never reaches an AI unless you turn on Rabbit.

Safari on a Mac doesn't let a secure web page talk to an app on the same computer, so the extension's approach can't work there. Instead, you can connect Safari by installing White Rabbit Helper, a small menu bar app. It works differently from the extension in one important way: what it reads is saved to your account.

• How it's installed. You choose to add White Rabbit to Safari and run a one-line install command in Terminal. The command checks that the Helper it downloads is signed by White Rabbit and notarized by Apple before running it. It carries a pairing code, valid for 15 minutes, that the Helper trades for a device token, and the Helper shows the email of the account the code belongs to and asks you to confirm it before it connects. That token can only add pages to your own account.
• The access it needs. macOS requires you to grant the Helper Full Disk Access in System Settings before it can read Safari's history. The Helper uses that access only to read Safari's history database, and it reads from a copy so Safari is never disturbed.
• What it reads. Every five minutes while it's running, it reads new visits from Safari's history: each page's address (URL, without the part after #), title, and visit time. The first time, it reads the past seven days. It skips pages that failed to load and redirect steps. Safari keeps no history for Private Browsing, so none is ever read. If Safari syncs through iCloud, Safari's history includes visits from your iPhone and iPad, so those are included too.
• Where it goes. The Helper sends those visits to our servers over an encrypted connection (HTTPS). Before anything is stored, we apply your rules: rabbit-hole detection on or off, pauses, your Never analyze list, and your skipped categories. Sign-in and checkout pages and private links are dropped as well, and every address is cleaned of anything that looks like a secret, the same way the extension does it. What's left is saved as private captures, one per day, that only you can read. Days more than seven days old are deleted automatically.
• How it's used. Only to find rabbit holes for you. Like all your browsing, it's never shown to anyone, sold, or used for advertising, feeds, or search, and it never reaches an AI unless you turn on Rabbit.
• What stays on your Mac. The Helper keeps its device token in your Mac's keychain, where no other app can read or change it, and a note of which visits it has already sent in its own folder in your Library. It never sends the same visit twice.

The Helper runs until you quit it, and doesn't start when you log in unless you turn on Open at Login in its menu (it then also appears in System Settings → General → Login Items). The uninstall command turns that off. To stop it, select Disconnect next to a Mac in Settings → Capture & privacy, which retires that Mac's device token, or Disconnect all, which retires every one for your account. Delete history deletes the Safari history saved to your account. To remove the Helper and its data from your Mac, run the uninstall command shown when you disconnect. It also retires that Mac's device token and removes the Helper's Full Disk Access.

Provide the Service: accounts, rabbit holes, feeds, search, messages, and notifications

Information usedAccount, profile, content, messages, activity

Legal basis (EEA and UK)Performance of our contract with you

Tell you what happened while you were away: pushes you turn on, an email when you've been away, and a weekly recap

Information usedAccount, email address, notifications (including who wrote to you in a conversation, its name, and how many new messages, never what they said; and how many rabbit holes Rabbit found and in which browser, never what they are), your rabbit holes that aren't private, and public ones from people and topics you follow; never what you browsed or private rabbit holes

Legal basis (EEA and UK)Your consent for pushes, which you give by turning them on; our legitimate interests for emails, which you can turn off anytime

Send the daily email: the rabbit hole of the day each morning

Information usedAccount, email address, time zone, when you last opened White Rabbit or tapped Keep them coming, the day's public rabbit hole with its author's name and photo, and what an email about being away would list

Legal basis (EEA and UK)Our legitimate interests in telling members what's on White Rabbit each day, which you can turn off anytime; in the EEA and the UK, your consent, which you give by saying yes

Draw a picture for a rabbit hole of the day that has no cover uploaded to White Rabbit

Information usedIts public title and description

Legal basis (EEA and UK)Our legitimate interests in showing each day's rabbit hole with a picture

Let someone who makes an account from your link follow you, and tell you they joined

Information usedThe username in the link, who they are, and whether they chose to follow you

Legal basis (EEA and UK)Our legitimate interests in helping people find whoever brought them to White Rabbit; following you, and so telling you, is their choice

Choose what Discover shows you

Information usedYour Discover taste, and the public rabbit holes it ranks

Legal basis (EEA and UK)Our legitimate interests in showing you rabbit holes you'll find worthwhile

Detect rabbit holes on your device

Information usedBrowsing recorded by the extension, processed on your device

Legal basis (EEA and UK)Your consent, which you give by installing the extension and can withdraw by pausing or uninstalling it

Let Rabbit find rabbit holes in your browsing

Information usedWhat AI processing lists, once a day or sooner (at most four times a day)

Legal basis (EEA and UK)Your consent, which you give by turning on Rabbit and can withdraw by turning it off in Settings → Capture & privacy

Detect rabbit holes in Safari on a Mac

Information usedSafari history sent by White Rabbit Helper, and your capture settings

Legal basis (EEA and UK)Your consent, which you give by installing the Helper and granting it access, and can withdraw by disconnecting or uninstalling it

Provide Plus, take payments for it, and show you when it renews or ends

Information usedAccount, email address, your billing record, and what Stripe tells us about your subscription

Legal basis (EEA and UK)Performance of our contract with you

Provide AI features you ask for

Information usedThe rabbit holes involved, and your question; for Rabbit on boards, the board and your request

Legal basis (EEA and UK)Performance of our contract with you

Keep the Service safe, prevent abuse and fraud, and enforce our Terms

Information usedAccount, content, activity, device and log information

Legal basis (EEA and UK)Our legitimate interests in a safe and working Service

Show ads, through Google

Information usedThe page you're on, your IP address, browser and device information, and Google's cookies, which Google receives directly

Legal basis (EEA and UK)Our legitimate interests in funding a Service that's free to use; in the EEA, the UK, and Switzerland, your consent to Google's cookies

Communicate with you about your account, changes, and requests

Information usedEmail address, communications

Legal basis (EEA and UK)Performance of our contract, or our legitimate interests

Understand and improve the Service

Information usedUsage events (including which push, email, or shared link brought you back), and aggregated or de-identified information about how features are used

Legal basis (EEA and UK)Our legitimate interests in improving the Service

Comply with law and respond to lawful requests

Information usedAny information needed

Legal basis (EEA and UK)Compliance with a legal obligation

We don't use your personal information to make decisions that have legal or similarly significant effects on you based solely on automated processing.

Some features use AI models from Anthropic (Claude), OpenAI (GPT), or Google (Gemini): summaries of rabbit holes, answers to questions about them, Rabbit's replies when you mention @rabbit in a comment or a conversation, Rabbit on boards when you ask it there, and, if you turn it on, finding rabbit holes in your browsing. When you use one, we send the provider only the content needed for that request: the rabbit holes involved; for questions, your question; for @rabbit in a comment, the comment thread; for @rabbit in a conversation, the first names of the people in it and its recent messages (photos, files, and voice messages only as a note that one was shared); for Rabbit on boards, what's described below; and for finding rabbit holes, what's listed below. To explain how two pages in a public rabbit hole connect when nothing else does, the two pages' titles, sites and text our server reads from them (never anything about you, and never what anyone wrote about them), marked on screen as Rabbit's guess. For a private rabbit hole, only when someone on it taps Ask Rabbit. These providers act as our service providers (processors). We use them only under commercial API terms that don't permit them to use what we send to train their models.

Pictures for the rabbit hole of the day. When a rabbit hole picked as a rabbit hole of the day has no cover uploaded to White Rabbit, we send its public title and description to OpenAI or Google, which draws a small picture for it that we turn into pixel art. Nothing else is sent. The picture is kept privately and shown, in the daily email and the app, only while that rabbit hole may be, and it's marked as drawn by AI. When the pick has a cover its author uploaded, nothing is sent to an AI: we keep a copy of the cover at a fixed size, privately, to show in the daily email, and show it only while the rabbit hole may be seen.

Rabbit on boards. When you ask Rabbit on a board, by typing or speaking, we send OpenAI your request, your username, and what Rabbit needs to work on that board: its title (and, for a group chat's board, the chat's name); its items (their text, colors, sizes, and positions; on a big board, the ones you selected or have in view, all of its pages, and an outline of the rest); each page's title, site, description, and note, and who added it, by username; its rabbit hole's title, description, goal, topics, and summary, and Rabbit's notes on its pages; the titles of other rabbit holes and boards shown on it or that Rabbit looks up for you, never private ones; and your last few requests there and what Rabbit did. Images aren't sent. When you speak a request, the recording and up to 60 words from the board go to OpenAI to be turned into text; White Rabbit doesn't keep the recording. Rabbit's changes are made from your account, like your own edits, and you can undo them while the board is open.

Rabbit and your browsing

Rabbit finds rabbit holes in your browsing. It's off until you turn it on: White Rabbit asks once the extension or White Rabbit Helper connects, and you can change your answer anytime in Settings → Capture & privacy. What it reads is never used for ads, feeds, or search. While it's on:

• What's sent: Page titles and search queries, site names, which page led to which, and time spent, plus the titles of your rabbit holes (including private ones only you are on, unless you turned Rabbit on before October 20, 2026) and what Rabbit wrote for its own earlier suggestions.
• When: From browsing sittings you've finished: once a day, or sooner when one looks like a rabbit hole, at most four times a day.
• Never sent: Full addresses, the sites and categories you exclude, and incognito windows.
• To whom: Our AI provider, which can't use it to train its models.
• What it gets you: Suggested rabbit holes, private until you review them.

Rabbit's look sends the titles of private rabbit holes only you are on (ones you started that no one else is on), so it can tell when your browsing carries one on, but never the title of a private rabbit hole someone else is on, even one you started. If you turned Rabbit on before October 20, 2026, it sends no private rabbit hole's title until you turn it off and on again.

If no model is connected, or you choose, an engine that runs on your device writes summaries instead, without sending anything anywhere. AI insight about a rabbit hole is stored with it, so everyone who can see the rabbit hole sees the same insight.

Home's feeds show a small number of clearly labelled ads from Google AdSense. We ask Google for non-personalized ads only, so they're chosen from things like the page's content and your general location, not from a profile of you. We never send your browsing, private rabbit holes, or messages to Google or to advertisers, and we don't build advertising profiles.

When an ad loads, Google's AdSense script runs in the page, and Google receives your IP address, information about your browser and device, the page's address, and its cookies, which it uses to show, limit, measure, and protect ads, as described in How Google uses information from sites or apps that use our services. In the EEA, the UK, and Switzerland, Google asks for your consent to its cookies first.

Google's ad script never loads in a browser tab where the White Rabbit extension or White Rabbit Helper is connected, and the extension won't hand its record of your browsing to a tab where Google's script has loaded. In a tab where it has loaded, it stays until you reload or close the tab, and like any script in a page, it can technically see what the page shows, such as the rabbit holes and messages you open there, and what White Rabbit keeps in your browser's storage. See the Advertising Policy.

We disclose personal information only as follows:

• Other people, as you choose. Your profile is visible to everyone on the Service. Each rabbit hole is visible to the audience you choose. Messages are visible to the people in the conversation, and those in a group discussion open to anyone are visible to anyone signed in. Earlier versions of an edited comment are visible to anyone who can see the comment. Links you copy or share while signed in show your username to whoever opens them, and an invite link you make shows them your name and photo. When you ask to join, the people on it, or in it, see your name, photo, note, and when you asked. Who you block and what you report are never shown to the people involved.
• Service providers who process information on our behalf and under contracts that limit its use: Supabase (database, authentication, and file storage), Vercel (hosting and delivery), Stripe (payments for Plus: it takes your card and billing details on its own pages, under its own privacy policy, and we never see your full card number), and, for AI features and the rabbit hole of the day's pictures, Anthropic, OpenAI, or Google. When we turn on a check for automated sign-ups, Cloudflare (Turnstile) also looks at your browser on the sign-up and sign-in forms. Emails go out through our email delivery service, a mail server we send them through over SMTP. We put no tracking pixels of our own in our emails, but our email delivery service adds one and sends each link through its own address first, so it can count how many of our emails are opened and clicked; it counts them without tying them to who you are, so we see only totals. Past that, our links carry only the tag that says which email and line you opened (see Information we collect). Pushes go through your browser's own push service (from Google, Mozilla, Apple, or Microsoft), encrypted so that service can't read them.
• Google, for ads. When an ad loads, Google receives your IP address, browser and device information, the page's address, and its cookies, as described in Advertising. We ask Google for non-personalized ads, and to restrict how it processes data from people in US states with privacy laws.
• Link previews and pictures from other sites. When you paste a link into the composer or Save a discovery, or share a page to White Rabbit from another app, our server fetches that page to show a preview. Site icons, and pictures from other sites (a page's or a link preview's image, or an older cover linked from elsewhere), are fetched by our server too, so readers' browsers never contact those sites and the sites can't see who's looking or their IP address. These requests come from our server, not from your device, and don't include information about you. Our hosting provider keeps copies of those pictures for up to a week, so it doesn't fetch the same one again for every reader. When you read a Wikipedia page inside White Rabbit, our server fetches its text from Wikipedia and shows you a shortened copy, so your browser never contacts Wikipedia; our hosting provider keeps that copy for up to two days so it isn't fetched again for every reader. When a rabbit hole with Wikipedia pages is public, our server also fetches each page's short summary, its lead picture and that picture's licence from Wikipedia and Wikimedia Commons, and keeps them with the rabbit hole in place of the page's own preview. To show a short summary of a page that a public rabbit hole links to, our server also fetches that page's opening text and keeps a few sentences of it with the rabbit hole; our hosting provider keeps that answer for up to two days. When a page can't be read directly, our server may ask the site's own public embed service (such as YouTube's or X's) or the Internet Archive for its text. To show how two pages in a rabbit hole connect, our server looks up public facts about them on Wikidata, and may read the first page for the sentence that links to the second.
• Legal and safety reasons. When we believe in good faith it's required by law or legal process, or needed to protect the rights, property, or safety of our users, the public, or us, including to detect and prevent fraud, abuse, and security issues.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this policy's protections.
• With your consent, or at your direction.

We don't give personal information to data brokers, and apart from Google's ad script as described in Advertising, we don't let advertisers collect it through the Service.

White Rabbit Entertainment does not sell personal information, and does not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA), and has not done so in the past 12 months. We don't sell or share the personal information of anyone under 16. We don't process personal information for targeted advertising or for profiling that produces legal or similarly significant effects. The ads we show through Google are non-personalized, and we ask Google to restrict how it processes data from people in US states with privacy laws.

We may keep information longer where the law requires it, to resolve disputes, or to enforce our agreements, and then only for as long as needed.

We protect personal information with measures appropriate to its sensitivity, including encryption in transit (TLS), database access rules that let each person read only what they're allowed to see (row-level security), private storage for message attachments (with short-lived access links) and for cover images (which only people who can see the rabbit hole can open), pictures from other sites fetched through our server, which passes on only genuine images, signed device tokens for White Rabbit Helper that can only add to your own account and that you can retire at any time, and restricted access to administrative keys. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If we learn of a breach that affects your personal information, we'll notify you and the authorities as required by law.

• Choose who sees each rabbit hole, and set your default in Settings.
• Pause, limit, or turn off rabbit-hole detection, add sites to Never analyze, disconnect White Rabbit Helper, and delete your history in Settings → Capture & privacy.
• Choose which AI model writes insight for you, in Settings.
• Turn push on this device, new rabbit holes from people and topics you follow, the daily email, emails when you've been away, and the weekly recap on or off in Settings → Notifications, or stop an email with the link at its bottom, which also offers to stop every email. Mute a conversation (press and hold it in Messages, or right-click it on a computer) to stop pushes and emails about its messages.
• Turn off an invite link you made where you copied it: People → Invite people on the rabbit hole, or Add people in the discussion's Details. Whoever started a rabbit hole, or looks after a discussion, can turn off every invite link to it from People or Details.
• Mark a post Not interested in Discover, or reset what Discover has learned in Settings → Capture & privacy.
• Learn about or report an ad with its AdChoices icon, manage Google's use of your information for ads in Google's My Ad Center, and, in the EEA, the UK, and Switzerland, change your answer about Google's cookies with the link Google shows on pages with ads.
• Cancel Plus, update your card, or see past invoices with Manage billing in Settings → Plans. After Plus ends, Billing history there still shows your past invoices, and Stripe emails you a receipt for every payment.
• Delete any rabbit hole, comment, or message you sent, or your whole account in Settings.

See Privacy controls in the user guide for where each one lives.

Depending on where you live, you may have the right to:

• know and access the personal information we have about you, and get a copy in a portable format;
• correct inaccurate personal information;
• delete your personal information;
• object to or restrict certain processing, including processing based on our legitimate interests;
• withdraw consent where we rely on it, without affecting processing before you withdrew it; and
• not be discriminated against for exercising these rights.

To make a request, email contact.whiterabbt.com@gmail.com from the address on your account, and tell us what you're asking for. Many requests you can also make yourself in Settings. We'll verify your request by confirming it came from your account's email address, and may ask for more information if needed. We'll respond within the time the law requires: generally 45 days under U.S. state laws and one month under the GDPR, which may be extended where the law allows. There's no charge, unless a request is manifestly unfounded or excessive.

If we deny your request, we'll explain why. Where the law gives you a right to appeal, reply to our response within 60 days and ask us to reconsider; we'll answer within the time the law requires.

If you're a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the CCPA), gives you the rights described in Your rights: to know, access, correct, and delete personal information, and to not be discriminated against for exercising them. This section provides the additional disclosures the CCPA requires.

Personal information we collect

In the past 12 months, we collected the following categories of personal information. We collected them from you, from your device, from sign-in providers you chose, and, for Plus, from Stripe, for the purposes described in How we use information. We disclosed each category for a business purpose only to the service providers described in How we disclose information, and to other users as you directed. We sold or shared none of them.

Identifiers

ExamplesName, username, email address, IP address, account identifiers

Disclosed for a business purpose toHosting, database, and authentication providers; our email delivery service, for the emails we send you; Stripe, for Plus (email address and account identifier); Google, for ads (IP address and cookie identifiers)

Customer records

ExamplesName and email address; for Plus, your billing address and your card's brand and last four digits, which Stripe keeps

Disclosed for a business purpose toHosting, database, and authentication providers; our email delivery service, for the emails we send you; Stripe, for Plus

Commercial information

ExamplesYour Plus subscription: its status, price, and when it renews or ends

Disclosed for a business purpose toStripe, which processes payments for Plus

Internet or other electronic network activity

ExamplesUse of the Service, including which push, email, or shared link brought you back; rabbit holes' Trails you choose to save or share; imported history files; Safari history, if you connect White Rabbit Helper. (Browsing recorded by the extension stays on your device, except what AI processing lists, once a day, if you turn on Rabbit, and how many rabbit holes it found and in which browser.)

Disclosed for a business purpose toHosting and database providers; AI providers, for rabbit holes you allow, for a rabbit hole's or a chat's board when someone who can edit it asks Rabbit there, and, if you turn on Rabbit, the browsing it reads; our email delivery service, for how many rabbit holes Rabbit found and in which browser, in an email to you; Google, for ads (the pages of the Service where ads load)

Audio and visual information

ExamplesPhotos, videos, and voice messages you send; recordings of spoken requests to Rabbit

Disclosed for a business purpose toStorage and hosting providers; OpenAI, for recordings of spoken requests to Rabbit, which are turned into text and not kept

Inferences

ExamplesTopics you're curious about, based on the rabbit holes you share and follow

Disclosed for a business purpose toHosting and database providers

Sensitive personal information

ExamplesAccount login credentials; the contents of your messages and of your chats' boards

Disclosed for a business purpose toAuthentication, database, and storage providers; AI providers, for a conversation where someone mentions @rabbit, and for a chat's board when someone in the chat asks Rabbit on one

Sensitive personal information

We use sensitive personal information only to provide the Service you request, to keep it secure, and for other purposes the CCPA permits. We don't use it to infer characteristics about you. Because of this, the right to limit its use doesn't apply.

Sale, sharing, and opt-outs

We don't sell or share personal information, so there is nothing to opt out of. We still honor opt-out preference signals, as described in Do Not Track and Global Privacy Control.

Authorized agents

You may use an authorized agent to make a request for you. We may ask the agent for signed proof of their authority, and ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.

Shine the Light

California Civil Code Section 1798.83 lets California residents ask what personal information a business disclosed to third parties for their own direct marketing purposes. We don't disclose personal information to third parties for their direct marketing purposes.

Users under 18

If you're a California resident under 18 and have an account, you can remove content you posted by deleting it in the Service, or ask us to remove it by emailing contact.whiterabbt.com@gmail.com. Removal doesn't ensure complete or comprehensive removal, for example where others have forked or copied the content, or where we must keep it by law (California Business and Professions Code Section 22581).

Residents of Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, and other states with comprehensive privacy laws have rights similar to those described above, including rights to access, correct, delete, and port their personal information, and to opt out of sale, targeted advertising, and certain profiling. We don't sell personal information or use it for targeted advertising or such profiling. To exercise your rights, or to appeal a decision about a request, follow the steps in Your rights. If we deny your appeal, you may contact your state's attorney general.

We don't track you across other websites or over time for advertising, and we ask Google for non-personalized ads only, so a browser's Do Not Track signal doesn't change how the Service works. We treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of the sale and sharing of your personal information, for that browser and, if you're signed in, for your account, although we don't sell or share it in the first place.

If you're in the European Economic Area (EEA) or the United Kingdom, White Rabbit Entertainment is the controller of your personal information. We process it on the legal bases listed in How we use information. You have the rights described in Your rights, including the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time.

You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We'd appreciate the chance to address your concerns first, so please contact us.

If you're in Canada, we handle your personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (Law 25). By using the Service, you consent to the collection, use, and disclosure described in this policy, and you may withdraw consent at any time, subject to legal and contractual restrictions. You may access and correct your personal information as described in Your rights. Our person responsible for privacy can be reached at contact.whiterabbt.com@gmail.com.

If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

The Service isn't directed to children under 13, and we don't knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we'll delete it and close the account. If you believe a child under 13 has given us personal information, contact us at contact.whiterabbt.com@gmail.com.

We're based in the United States, and our service providers may process information in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal information from the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on an adequacy decision where one applies.

We may update this policy from time to time. If we make material changes, we'll tell you in the Service or by email before they take effect. The effective date at the top shows when it last changed.

For questions about this policy, or to make a privacy request, email White Rabbit Entertainment, Attn: Privacy, at contact.whiterabbt.com@gmail.com.