Privacy at Buba.
This notice describes the current version of Buba. It must be reviewed and completed with the operating company, contact address, retention periods, and applicable user rights before public launch.
Local previews
Saved favorites and companion drafts are stored in this browser’s local storage. Chat preview messages stay in page memory and clear when you leave the chat. No live AI provider receives these preview messages. You can clear local data using your browser’s site-data controls.
Website analytics
We use Google Analytics and PostHog to measure page visits and basic browser and device information. These services may use cookies or browser storage to recognize repeat visits. Analytics is enabled on production builds. We do not send chat message bodies, character backstories, or passwords as analytics events. Google Analytics receives visited URLs, which can include query parameters. PostHog session recording and automatic interaction capture are disabled, and its page URLs omit query strings and fragments.
Accounts and conversations
When configured, Firebase handles Google and email authentication. The server verifies your identity and sets an HTTP-only session cookie. Account records, age and terms acknowledgments, custom characters, conversations, and generated-image records are stored in the application database. Session cookies expire after five days.
AI services and images
Live conversations send your character description and recent conversation messages to the configured Google Gemini service. Image generation sends character details and your prompt to the configured Google Cloud image model. Do not include information you do not want processed by these services. Generated files use private Cloud Storage and are served only after an account ownership check.
Storage and access
This implementation does not provide end-to-end encryption. The application server and configured service providers process your inputs. Infrastructure encryption, access policies, backups, operational logging, and retention need to be configured and reviewed for deployment.
Before launch
A production operator must provide a reachable privacy contact and implement account access, export, deletion, and retention procedures. These operational processes are not yet available in this local version.