Privacy, in plain English
Last updated: October 2026
No stranger DMs · Site logins stay on your device · Real moderators
This page has two parts. The first is the short version, written for you. The second is for parents and schools, with every detail.
The short version (for you)
What we don't do
Re:Vault keeps your history in this browser, not on our servers. Other people on Re:Vault can't see the sites you open, and Study Hall can't show them, even by accident. There are two small exceptions in our server logs, explained in Server logs below.
Your stuff stays on your device
Your settings, favorites, history and open tabs are saved in this browser. If you sign in and press Back up, a copy goes to your Re:Vault account so you can restore it later. Logins and cookies for other sites stay in this browser and are never part of that backup.
Study Hall
Study Hall is our live study chat. Moderators can read everything posted there, and messages are deleted after 30 days. No one can message you privately, and there are no voice or video calls. We only keep an age range (like "13 to 17"), never your birthday. You must be 13 or older to use it. If you try to send sexual words in Study Hall, moderators can see that attempt for 30 days.
What others can see about you
In Study Hall: the name you pick, your messages and reactions, and a status like "Online", "In Math" or "Focusing" when someone opens your name on a message you posted in the last week. Never a site or a page. Your status is on unless you turn it off in the Study Hall menu with Show my status. With it off, you still count in a room's "focusing" number, but nothing shows it's you.
If something feels wrong
Report the message and a moderator will look at it. Once they have, Study Hall tells you so, without saying who or what was done. For anything urgent you can call or text 988, or text HOME to 741741 (US). If someone is in danger, call 911.
Downloading and deleting things
Study Hall: select your name, then "Download my Study Hall data" for a copy of your Study Hall data (your names, messages, reactions, votes, blocks, the reports you made, your settings and any timeouts or bans), or "Delete my Study Hall data". The download is made when you ask and never stored. Moderators' notes and the safety checks below are not in it. Things saved in this browser: Settings, then Privacy & data, then the clear and delete options. A backup saved to your account: email support@endiseducation.org and we will delete it.
For parents and schools: what Re:Vault collects
Re:Vault is a study browser and learning workspace. Below is what it stores, why, where and for how long.
| What | Why | Where it's kept | How long | Who can see it |
|---|---|---|---|---|
| Settings, favorites, history, open tabs, notes and study progress | So Re:Vault works the way the student set it up | In the student's browser only | Until the student clears it (Settings, Privacy & data) | Only the student, on that device |
| Logins and cookies for other sites | So a student stays signed in to the sites they use | In the student's browser only, never in an account backup | Until the student clears browsing data | Only the student, on that device |
| Account backup (optional) | To restore settings, favorites, history and tabs on another device | On our server, tied to the account | Until it is replaced or the student asks us to delete it | Only the signed-in student |
| Sign-in | Signing in is optional. It enables backups, reviews and Study Hall. Students can sign in with Google, Discord, an email link or a passkey, as each one is turned on | Our sign-in service keeps one id for each way a student signs in: the account number Google gives us, the Discord user id, or a passkey's public key. For an email link it keeps a one-way scrambled code made from the address (it can't be turned back into the address) and a hint like j•••@gmail.com. It also keeps a list of recent sign-ins (when, and which way) that the student can see in Settings. It does not keep email addresses, Discord names, profile pictures or IP addresses. Sign-in emails are sent through Resend, our email provider. Our server keeps the public name the student picks, their reviews and their backup | Each way to sign in: until the student removes it or deletes the account. Recent sign-ins: 30 days. Unused sign-in links and codes: about an hour | The public name and review counts are public; the rest only the student |
| Study Hall messages, reactions and poll votes | So other students can read and answer them | On our server | Messages 30 days. Reported or moderated messages are kept as evidence while reviewed and up to 180 days after (365 days if escalated). Poll results are counts only, shown once 3 people have voted. Your vote is recorded only so you can't vote twice, and nothing in Re:Vault shows anyone, staff included, who voted for what | Other Study Hall members and moderators |
| Study Hall profile | To run the chat safely | On our server | Chosen name changes 90 days; the rest goes after a year without using Study Hall | Moderators see the chosen name and age range, never the email address |
| Age range (under 13, 13 to 17, 18 and over) | Study Hall is for ages 13 and up | On our server, worked out from a birth month and year entered once; the date itself is never stored | As long as the Study Hall profile | Moderators |
| Messages with sexual words that our filter stopped | So moderators can spot someone pushing sexual talk in a chat for students | On our server: the account, its Study Hall name, the room, the time and the text. Never an IP address. Study Hall checks a message in your browser before sending it; when that check stops one with sexual words, the browser sends it to our server for this list (only those, never other stopped messages). Swearing and slurs are blocked without keeping anything | 30 days, or until the review ends if the account is under review (a ban, a timeout or an escalated report) | Moderators |
| Other messages our filters stopped | So moderators can spot harassment or someone asking for personal details | On our server. Blocked phone numbers, emails and addresses are never kept | 14 days | Moderators |
| Reports | So a moderator can act on them | On our server, with the messages around the reported one. A short excerpt (up to 300 characters, plus up to 3 earlier messages) is posted to a private moderator channel on Discord | Up to 180 days after they are resolved (365 if escalated). Discord keeps its copy until a moderator deletes it | Moderators |
| Visit counts | So we know how many people use Re:Vault and which features help | Totals per day on our server (see Analytics below). Your browser keeps one small note of when it was last counted, except in incognito or with history off | Daily totals 400 days | The owner, as totals only |
| Online count | To show "about 150 students on Re:Vault" | A random id, not tied to a person, in our server's memory | 150 seconds after the last check-in | Nobody sees the ids. The status page shows the total; the start page rounds it and hides it when it is small |
| Focusing count | To show "about 15 people focusing" and run the shared focus timer | Which Study Hall accounts joined a focus block, in our server's memory only, never saved | Until the end of that focus block and its break | Study Hall members see how many are focusing in each room. The start page rounds the total and hides it under 5 |
| Forum posts, book votes and reviews | To share study resources and ratings | On our server. Book votes are counts only | Forum posts and reviews until removed | Everyone (they are public) |
| Error and health reports | To notice when part of Re:Vault breaks | A random id and a short reason or setting, in our server's memory | 5 minutes | The Re:Vault team, as totals on the status page |
How browsing works
Pages open inside Re:Vault tabs. Their traffic travels through our servers so they can open inside Re:Vault. For secure (https) sites, which is almost all of them, that connection is encrypted from the student's browser all the way to the site, so our servers can't read it. For a few sites that need it, Re:Vault uses a backup server connection, where our server fetches the page for the student. In both cases nothing about the pages is stored, except for what the server logs below record.
Most Re:Vault addresses use Cloudflare, which sees the same connection details any website host sees. A school network can see that a device is using Re:Vault.
Server logs
Like most websites, our web server keeps a standard log of requests to Re:Vault for 14 days: the IP address, the time, the Re:Vault address that was asked for and the browser type. We use it to keep the service running and to stop abuse. Two things in that log could show more than we would like, and we are changing both:
- Search suggestions: what you type in the search box is sent to our server to get suggestions from the search engine you picked, so it can appear in the log. You can turn suggestions off in Settings.
- The backup server connection: when a site uses it for a live connection, that site's address can appear in the log.
Our servers also keep short security logs of blocked connection attempts, such as attempts to reach private network addresses. Study Hall never stores IP addresses.
Study Hall, for parents and schools
How Study Hall is moderated
Study Hall is for ages 13 and up, and every member agrees to its rules first. Automatic filters stop slurs, sexual content, bullying and requests for personal details before they are posted, and they are built to stop anyone sharing a phone number, email, address or social account. Real people moderate it: any message can be reported, reports reach the moderators within a minute (including on a private Discord staff channel), and urgent reports, such as someone who might be in danger, are flagged first. Moderators can read everything posted, including edited and deleted messages. There are no private messages, no voice or video, and no list of who is online.
A message with sexual words is never posted. Moderators can see that someone tried to send it, with the text, for 30 days, and three tries within a day flag the account for a moderator to look at. Nothing happens to the account automatically. Swearing and slurs are blocked the same way, but nothing about them is kept.
Some messages are quietly shown to moderators, such as someone asking what grade a student is in, asking them to keep a secret, or offering gifts. From an account that is new or still on probation, that kind of message waits for a moderator: nobody else sees it until a moderator approves it, and the sender sees "Sent to a moderator first". From anyone else it is posted, and the sender gets a private reminder to keep personal details out of Study Hall. These checks run on our own server; no outside company or AI reads students' messages.
Automatic filters catch a lot, but not everything, and now and then they stop a harmless message. That is why every message can be reported. In rare, serious cases, such as a threat to someone's safety, the Re:Vault team may share the messages involved with the authorities.
Study Hall also keeps a nightly backup copy of its data for 7 days, so it can be restored after a failure. A deleted message is gone from those copies within about a week.
Deleting Study Hall data clears the student's messages, reactions, poll votes, blocks, read history and any stopped messages with sexual words. Anything under review is removed when the review ends, and records of timeouts and bans are kept. If a name change was less than 7 days ago, we keep only the date the wait ends, until that date.
Advertising & cookies
Ads help keep Re:Vault free. They appear only in a few labeled spots on Re:Vault's own pages (the start page and the Books and Worksheets lists), and never in games, books, the web pages you open, Study Hall, or the desktop's windows.
- Always labeled. Every ad carries an "Ad" label and a Report button. Reports go to the Re:Vault team with no personal details attached.
- Contextual only. Re:Vault gives ad partners no personal information: no account, no history, no favorites and no identifiers. Ads are requested as suitable for a teen audience.
- Your choice. Turn ads off any time in Settings, Focus & privacy, "Show ads". With it off, Re:Vault loads no ad code at all.
- Some ads come from Re:Vault itself (for example our Discord community). On a few approved Re:Vault sites, the start page may also show an ad from an ad partner. Partner ads run in a sealed frame that cannot see Re:Vault, your account or your other tabs, and it is loaded without your cookies. If you click a partner ad, the advertiser's own site and cookies apply. You may opt out of personalized advertising at Google Ads Settings or aboutads.info.
- Re:Vault counts, without any identifiers, how often an ad spot was shown, seen or reported, so we can catch broken or unwanted ads.
Analytics
Re:Vault counts visits with its own private counter, on our own server. It runs only on Re:Vault's own pages, never on the sites you open in Re:Vault. What it keeps is totals for each day, like "1,240 visitors, 300 opened Flashcards, 40 came from Discord". Daily totals are kept for 400 days.
- No cookies, and no ID for you or your device. Your IP address is used for a moment to count you once a day and look up your country (and US state), then thrown away. It is never saved.
- To count you once a day, your browser keeps one small note on your device: the day, week and month you were last counted, and the week of your first visit. It sends only yes or no ("first visit today?") and that week, which you share with everyone who started the same week. In incognito, or with history turned off, it keeps nothing.
- Also counted: which Re:Vault page or feature was used (for example a tool's name, a setting's name, a look's name, a Study Hall room), the website that sent you (just its domain, like google.com), your device type (system, browser, screen size range, touch or not), how fast pages load, and how many page errors happened. Never the sites you visit in Re:Vault, never anything you type or search.
We also use Google Analytics until October 29, 2026 while we finish moving to our own private counter. Until then:
- Google Analytics (GA4) sets its own cookies (such as
_ga) in your browser to tell visits apart. We do not use this to identify you personally. - You can opt out for all sites with Google's Analytics Opt-out add-on, or block it with most content/ad blockers.
Country and state come from a free offline table: IP Geolocation by DB-IP.
Fonts: Re:Vault's default font and many of its looks use free fonts from Google Fonts, so your browser downloads them from Google (fonts.googleapis.com and fonts.gstatic.com). Like any download, that request includes your IP address. Google Fonts sets no cookies, and we get nothing back from it. Study Hall uses its own copies of its fonts, so it never asks Google for one.
Children & schools
Study Hall is only for people 13 and older; anyone who enters a younger age can't join. The rest of Re:Vault is a general study tool. If you are using a managed or school device, follow your school's acceptable-use policy. Study Hall has no ads and no third-party analytics. Our own counter only adds one to a daily total for the room that was opened, never who opened it or what was said.
Contact
Questions, or want something deleted? Email support@endiseducation.org and a person will get back to you.