3HITROCK / PRIVACY

Privacy and data

Updated 3 October 2026

3HitRock provides products, a community and optional AI services. This page explains what information these features use and the choices you have.

Your account and profile

Google sign-in is handled by Firebase Authentication. Your account identifier and Google account information are used to authenticate you. Your chosen display name, biography and profile photo are public. Your email is not shown in public community posts. Uploaded profile photos are resized before saving; the processed image does not retain the original photo metadata.

Community messages

Public messages, their replies and like counts are visible to other visitors. Replies to private messages inherit the same private access. You can remove your own replies; the team can moderate replies. Messages marked private, including voice recordings, are accessible to your account and the authorized team. Reports are reviewed by the team. A withdrawn post stops appearing publicly; withdrawal is not the same as deletion from our records.

AI processing

When enabled, questions go to OpenAI or Google according to the selected tool and disclosed provider settings. Image requests and any reference image go to Google. Cross-provider fallback is optional and is disclosed in AI Studio when enabled. Do not submit information you do not want the provider to process. We do not save prompt text, reference images or generated outputs in our application database. We retain account-linked usage, request status and credit records to operate quotas and resolve failures. Provider retention policies also apply.

Payments

When purchases are enabled, payment details are collected by the payment provider shown at checkout. The included checkout integration uses Stripe. We keep payment references, credit balances and transaction records; we do not store full card numbers. Available payment methods depend on the provider and country.

Advertising and cookies

When advertising is enabled on eligible public pages, Google and its advertising partners may use cookies, web beacons, IP addresses or similar identifiers to deliver, measure and, where permitted, personalize ads. Third-party advertising cookies may use visits to this and other websites. We do not attach ad clicks or views to credits, rewards or access to a feature.

Where required, a Google-certified consent platform asks for your advertising choices. Use its privacy options to change or withdraw consent. You can also manage browser cookies and visit Google My Ad Center for personalized advertising choices. Rejecting optional advertising consent does not remove account or community access.

Storage and service providers

Firebase hosts the app and stores account-related data. This may involve processing outside your country. Your browser stores the selected theme, language and a public offline app shell. Private messages, authentication tokens, AI responses and payment responses are excluded from the service-worker cache. Firebase Authentication separately manages the browser storage needed to keep you signed in.

Diagnostics and security

Our diagnostic report contains page types, app version, error categories and performance timings, without prompts, credentials or message text. Exporting this report is your choice. Server requests can produce operational logs. Optional signed-in client diagnostics are off by default; if enabled, the same limited categories are sent for troubleshooting. App Check may use Google reCAPTCHA Enterprise to help detect abuse once configured.

Control and retention

You can edit your profile, remove your photo, withdraw your posts and sign out. Data remains while needed to provide the service, handle support, prevent abuse or meet applicable obligations. Request access, correction or deletion through Contact. Requests are reviewed by the team; deletion is not automatic and some transaction or security records may need to be retained.

Third-party policies

Google Privacy Policy · How Google uses information from partner sites · OpenAI Privacy Policy · Stripe Privacy Policy