Privacy Policy

DEJA is made and run by Track and Trestle Technology, LLC (“Track & Trestle”, “we”, “us”), a company in the United States. This policy covers the Throttle app, this website (dejadcc.com), the deja command-line tool and server software, the installer, and our support sessions. We wrote it from what our code actually does. If anything here doesn't match what you see, please tell us.

We collect what you give us, what your layout produces while DEJA runs it, and a little technical data.

DEJA is not directed to children under 13, and we don't knowingly let children under 13 create accounts. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

Guest mode lets a layout owner invite visitors — who may include children — to drive trains, read guest pages, or play a hunt with a room code, without an account. A guest never gives us their real name, email, or photo: they get a randomly generated nickname and an emoji avatar. Their pass is stored only on their own device and expires within 24 hours. Hunt progress stays on the guest's device. While a guest drives, the layout's members can see the guest's nickname and avatar on the throttle. We don't record guests' IP addresses in our app (our hosting provider keeps standard request logs, as for any visitor).

• to provide DEJA: sign-in, syncing your layout, sending commands to your server, sharing with members and guests;
• to keep it secure: preventing abuse, rate-limiting room codes, revoking servers;
• to fix and improve it: error reports, performance traces, replays, and feedback;
• to process donations and keep records we’re required to keep;
• to send news emails — only if you opted in;
• to answer you when you contact us.

We don't sell your personal information, we don't share it for advertising, and there are no ad trackers on DEJA. If you're in a place whose law requires a legal basis for processing, ours are: providing the service you asked for (contract), our legitimate interest in keeping DEJA secure and working, your consent (news emails), and legal obligations (payment records).

We use these service providers (“subprocessors”) to run DEJA. Each processes data for us under its own terms:

• Google Firebase (Authentication, Cloud Firestore, Realtime Database) — accounts, layouts, settings, commands, and logs.
• Vercel — hosts Throttle, this website, the installer, and our API; stores uploaded photos, sounds, and videos (Vercel Blob); provides privacy-friendly page-view statistics (Vercel Web Analytics, which doesn't use cookies); and routes AI requests (Vercel AI Gateway).
• An AI model provider — currently Anthropic (Claude), reached through Vercel AI Gateway — receives AI identify requests (the photo link and the text described above) to generate suggestions.
• Stripe — processes donations. Stripe receives your email, your account ID, and your payment details.
• Sentry — error reports, performance traces, session replays, and in-app feedback. When you're signed in, reports are tagged with your account ID, email, and display name so we can follow up.
• Google Fonts — Throttle loads fonts from Google, which receives your IP address and browser details when it serves them.
• Google Calendar — if you book a support session, the booking page collects what you enter there.

People you share with. Members of a layout can see the layout, including the owner's and members' email addresses and who holds each throttle. Approved community sounds can be heard by every DEJA user and carry your account ID (not your name or email).

Uploaded files are public links. Photos, sounds, and videos are stored at long, unguessable web addresses. They aren't listed anywhere, but anyone with the link can open the file, and the link includes your account ID. Small photos may keep their original metadata (such as where they were taken), so check your camera's location setting before you upload.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (this policy would still apply to your data).

The deja server runs on your machine and keeps its settings, a login token, and a log file in ~/.deja. That log can include the local network addresses of devices and apps that connect to it. It stays on your computer unless you choose to share it with us.

The CLI has no analytics or tracking and never checks for updates by itself. It contacts our installer to sign in and to download updates when you ask, and Google Firebase to run your layout. When you deploy firmware to a WiFi board, your WiFi network name and password are written into that board's firmware on your computer; we never receive them. Throttle's browser installer remembers your WiFi network name (not the password) in your browser.

DEJA doesn't use advertising or tracking cookies, and this website sets no cookies of its own. Throttle stores your sign-in session and your preferences in your browser's local storage — things like the selected layout, the email of the account that chose it, display settings, and dismissed tips. Guest passes and hunt progress are stored the same way on the guest's device. Clearing your browser's site data removes them. Embedded videos on guest pages use privacy-enhanced YouTube and Vimeo players.

• Account, profile, and layout data: until you delete it or ask us to delete your account.
• Commands: deleted automatically within about 24 hours. The command log: at most 24 hours. Serial output: about 10 minutes, and only while someone is watching.
• Sign-in requests from deja login: deleted when the login completes (or expires after 15 minutes).
• Guest passes: expire within 24 hours on the guest’s device.
• Uploaded files: until you delete them or ask us to. Some files may remain until we clean them up after you remove the item that used them — ask us and we’ll remove them.
• A community sound that was approved stays available after you delete it, so layouts already using it keep working — ask us if you need it removed entirely.
• Donation records: Stripe and we keep payment records as long as tax and accounting law requires.
• Error reports, replays, and logs at Sentry and Vercel: for those providers’ standard retention periods (generally 90 days or less).
• The public demo layout is wiped and reset every day.

• News emails are off unless you opt in. Turn them off at any time in your Profile in Throttle. We don't currently send marketing email through a third-party service; if we do, each email will have an unsubscribe link. Account and service emails (like password resets, sent by Firebase) don't depend on this setting.
• See and change your data — most of it is right there in Throttle: your profile, layouts, roster, members, and connected servers.
• Delete your data. You can delete layouts, rosters, sounds, and other items in Throttle, and revoke connected servers. To delete your whole account, contact us (section 13) from the email on the account — we'll delete your account, profile, and the layouts you own, and confirm when it's done. A self-service delete button is on our list.
• Donations — cancel a monthly donation at any time: from your Profile if you donated in the app, or from the link in your Stripe receipt email (or by contacting us) if you donated on dejadcc.com.
• Access, correction, portability, and objection — depending on where you live (for example, California, the EU, or the UK), you may have the right to get a copy of your data, correct it, have it deleted, or object to or restrict how we use it. Contact us and we'll respond within the time the law requires (usually 30 to 45 days). We won't treat you differently for using these rights. You can also complain to your local data-protection authority.

We use the security of our providers (encryption in transit and at rest), database rules that limit each account to its own data and the layouts it belongs to, signed and expiring guest passes, and revocable server logins. Login tokens on your computer are saved so only your user account can read them. No system is perfectly secure: keep your password and your computer safe, and tell us right away if you suspect a problem.

Track & Trestle is in the United States, and our providers store and process data mainly in the United States. If you use DEJA from elsewhere, your data will be transferred to and processed in the US, where data protection law may differ from yours. Where the law requires it, we rely on our providers' standard contractual clauses or similar safeguards for those transfers.

We'll update this policy when DEJA changes what it collects. We'll change the effective date at the top, and for material changes we'll give notice in Throttle or on this website before they take effect.

Track and Trestle Technology, LLC is responsible for your data. For privacy questions or requests, use Send feedback in Throttle (Settings › Get help) or the options on our Support page, and say it's a privacy request. Privacy and account requests are always free — you don't need to book a session. We may need to confirm it's really you before acting on a request.