Privacy Policy

The Privacy Policy of LAPLACE Live!

Effective Date: Nov 1, 2023

1. Introduction

Welcome to LAPLACE Live! (aka. laplace.live). We are committed to respecting your privacy and protecting your personal information. This Privacy Policy outlines the types of information we may collect from you or that you may provide when you visit laplace.live and our practices for collecting, using, maintaining, protecting, and disclosing that information.

2. Information We Collect

LAPLACE does not require traditional user registration. We collect and process the following types of information:

2.1 Analytics Data

Plausible Analytics: We use a self-hosted Plausible instance to collect anonymized data about visitor behavior. This includes page visits, visit duration, browser information (OS, User-Agent, screen resolution), and interaction events. No personally identifiable information is collected through Plausible. For more information about Plausible's privacy practices, please visit https://plausible.io/privacy.

2.2 AI Chat Feature

Conversation Data: When you use our AI Chat feature, we collect and process your chat messages, conversation history, uploaded images (automatically resized), session IDs, and selected AI models.
Optional Login Sync: You may optionally provide a Bilibili login sync token via our browser extension to access enhanced features. The token is encrypted and stored locally in your browser. When used, it is sent to our servers to access Bilibili livestream data on your behalf. For detailed information about how Login Sync works, security considerations, and risks, please visit: LAPLACE Login Sync Documentation.
Data Sharing: AI chat conversations are transmitted to third-party AI service providers (OpenAI, Anthropic, and others via OpenRouter) to generate responses. These providers may have their own data retention policies.
Research and Transparency: AI conversations may be stored server-side for research purposes and transparency. Some conversations may be made publicly available as outlined in our security page.

2.3 User-Generated Content

Cycle Contribution System: You may voluntarily submit information about VTuber schedules including UID, period start date, period length, cycle length, and source URLs. This data is submitted anonymously with Cloudflare Turnstile bot protection. Turnstile collects browser fingerprinting data as described in Cloudflare's Privacy Policy.
Superchat FoS Content: You may create superchat messages which are stored locally in your browser (IndexedDB) and processed through our API for AI moderation.

2.4 Real-Time Features

PartyKit: Our homepage features a real-time interactive canvas powered by PartyKit. We collect ephemeral data including cursor positions, pointer types (mouse/touch), connection IDs, and country codes (from Cloudflare). This data is stored temporarily in memory and deleted when you disconnect.

2.5 Local Storage

Browser Storage: We store data locally in your browser using localStorage and IndexedDB (Dexie) including: user preferences (theme, audio settings, UI state), AI chat history, login sync tokens and history, search history, favorites and lists, and cached media metadata.
Data Control: All locally stored data remains on your device and can be cleared through your browser settings or our app interface at any time.

2.6 AI Voice Chat Feature

Voice Audio Streaming: When you initiate a voice call with the AI assistant, your microphone audio is captured via WebRTC and streamed in real time to our self-hosted voice bot backend (LAPLACE Eidolon). The audio is transcribed in real time, processed by an LLM, and the response is synthesized back to speech and played in your browser.
Speech-to-Text (STT): Voice audio streams are sent to Soniox for real-time transcription. See Soniox's Privacy Policy.
Text-to-Speech (TTS): AI-generated text responses are sent to Fish Audio for voice synthesis. See Fish Audio's Privacy Policy.
WebRTC Networking: Establishing the audio connection exchanges ICE candidates (including local and public IP addresses) between your browser and our backend. When a direct peer-to-peer connection cannot be established (e.g., behind symmetric NAT), traffic may be relayed via Cloudflare Realtime TURN servers, which receive the IP addresses of the connecting peers.
Connection Rate Limiting: Voice connection attempts are rate-limited to protect the service from abuse. Anonymous visitors are limited by a per-IP sliding window, so your IP address is processed when you start a voice session. Signed-in viewers are identified by the Bilibili UID resolved from their Login Sync token (see Section 2.2) and are not subject to the anonymous limit.
Long-Term Memory (Mem0, logged-in only): When you use voice chat as a signed-in viewer (via Login Sync, see Section 2.2), the bot may automatically extract and store long-term memories about you (e.g., preferences, recurring topics, things you have mentioned) via Mem0, keyed on your Bilibili UID. Each logged-in viewer has their own private memory namespace; anonymous voice chats are not stored in Mem0. You can list and bulk-delete your memories at any time through in-app controls or by contacting us. See Mem0's Privacy Policy.
Audio Quality Setting: Your browser may include an audio quality preference (e.g., best / medium / low) in the connection request, used to adjust the Opus encoder bitrate for the session. This preference is processed transiently and is not stored server-side.
Custom Backend Endpoint: You may optionally point voice chat at your own self-hosted LAPLACE Eidolon backend. The URL is stored locally in your browser (see Section 2.5). When it is set, your microphone audio, transcripts, and conversation data are sent to that endpoint instead of ours, and this Privacy Policy does not govern how the operator of that endpoint handles them.
Conversation Storage: Voice conversation transcripts may be retained server-side for research, persona refinement, and transparency, subject to the same policy as text AI chat (see Section 2.2).

2.7 Site Search

Search Queries: The site-wide search and command palette send the text you type to our own search endpoint, which matches it against an index of our documentation and site pages built at deploy time. Queries are processed to return results and are not shared with third-party services.

3. How We Use Your Information

Analytics: To understand visitor interactions, improve content, enhance user experience, and optimize site performance.
AI Chat: To provide AI-powered chat responses, maintain conversation context, prevent abuse, and improve AI model quality through research.
AI Voice Chat: To transcribe your voice, generate AI responses, synthesize speech, route WebRTC audio, and (for logged-in viewers) maintain per-viewer long-term memory so the assistant can recall prior context across sessions.
User Contributions: To aggregate and display community-contributed data (e.g., VTuber schedules) and moderate user-generated content.
Real-Time Features: To enable interactive experiences on our homepage canvas.
Site Search: To match your query against our documentation and site index and return relevant results.
Language Preference: To display the site in your preferred language across visits.
Security: To prevent spam, abuse, and harmful content through bot protection (Cloudflare Turnstile), content moderation, and rate limiting.

4. Third-Party Services

We share data with the following third-party services:

Plausible Analytics: Self-hosted analytics (privacy-focused, no PII collected)
AI Providers: OpenAI, Anthropic, OpenRouter, and other AI model providers receive chat messages and conversation history
Soniox: Speech-to-text provider receives streamed voice audio during AI voice chat (see Soniox's Privacy Policy)
Fish Audio: Text-to-speech provider receives AI response text to synthesize into voice audio (see Fish Audio's Privacy Policy)
Mem0: Long-term memory provider stores extracted memories from AI voice chat for logged-in viewers, keyed on Bilibili UID (see Mem0's Privacy Policy)
Cloudflare: Turnstile bot protection receives browser fingerprinting data and country codes; Cloudflare Realtime TURN servers may relay WebRTC voice traffic and receive peer IP addresses (see Cloudflare's Privacy Policy)
PartyKit: Real-time service receives ephemeral cursor and connection data

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

5. Cookies and Tracking

We do not use traditional cookies for tracking. Our self-hosted Plausible Analytics may set minimal cookies for analytics purposes. All tracking is anonymized and privacy-focused.

We set one functional cookie, NEXT_LOCALE, to remember your interface language. It stores only a language code (such as zh-CN or en), lasts up to 12 months, and is written when you choose a language or open a URL carrying a ?locale= parameter. When no such cookie is present, we read your browser's Accept-Language header to select a language for that request; the header itself is not stored. This cookie is functional rather than tracking, and you can clear or block it through your browser settings at any time.

6. Data Retention

Local Data: Stored indefinitely in your browser until you manually clear it
Analytics Data: Retained according to Plausible's default retention policy
AI Conversations: May be retained server-side for research and transparency purposes
AI Voice Chat Long-Term Memories (Mem0): Retained for logged-in viewers until you delete them via in-app controls, or as governed by Mem0's retention policy
Language Preference Cookie: Up to 12 months from the last time it is set, unless you clear it sooner
Real-Time Data: Deleted immediately upon disconnection (ephemeral). This includes WebRTC voice audio streams, ICE candidates, and PartyKit cursor data — none of which are persisted server-side

7. Your Rights and Data Control

Access: You can view all locally stored data through your browser's developer tools
Deletion: You can delete local data through browser settings
Portability: Local data can be exported through browser tools
Voice Chat Memories (Mem0): Logged-in viewers can list and bulk-delete all long-term memories stored about them via Mem0 through in-app controls at any time. Deletion is irreversible and applies only to memories stored before the deletion request; if you wish to ensure no further memories accrue, end your current voice session as well
Language Preference: You can clear or block the NEXT_LOCALE cookie through your browser settings; the site then falls back to detecting a language from your browser on each request
Opt-Out: You can disable JavaScript, use browser privacy features, decline voice chat, refrain from logging in via Login Sync (which disables Mem0), or stop using specific features

8. Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, bot protection, content moderation, and secure API endpoints. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

LAPLACE is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Third-Party Websites

Our website may contain links to third-party websites or embed third-party content. We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies independently.

11. International Data Transfers

Your data may be processed and stored in different countries where our service providers operate. By using LAPLACE, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Changes will be posted on this page with a revised last updated date. Material changes will be prominently indicated. Your continued use of LAPLACE after changes indicates acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, your data rights, or wish to request data deletion, please contact us at s@laplace.live

Last updated on September 9, 2026