Electric Monsters

Legal

Privacy Policy

Last updated September 2026

This Privacy Policy describes personal data involved in the Electric Monsters website and Companion app as they work today. It is written for humans, not as a fake corporate binder. If a detail is unknown or still maturing, it is marked honestly rather than invented.

Who is responsible

Electric Monsters is a private project. The person running it — and the controller for personal data in the ordinary GDPR sense — is Jakob Rohde Gellett, reachable at info@electric-monsters.com.

Electric Monsters is not a registered company. There is no CVR number, no ApS, and no corporate registered office to publish here.

What data we handle

Depending on how you use the project, data may include:

  • Account: email address, password hash (not your plaintext password), display name, Monster ID, avatar image, bio, and member rank
  • Garage & gallery: bike/garage information you add; gallery images stored as WebP with thumbnails
  • Community: chat and moments content, reactions, rides, events, check-ins, QR / scan-meet related activity, and Journey milestones
  • Auth support data: for verify / reset flows, auth_tokens.request_ip may store an IP address associated with the request
  • Website contact: name, email, optional phone, and message when you use a contact form
  • Session: the EMSESSID cookie described in Cookies & local storage
  • On-device website preferences: localStorage / sessionStorage keys such as em-bg-audio-muted and em-fps-probe (stay on your device)

We do not invent additional secret profiles for advertising. No marketing analytics tags were found in the current codebase search.

Photos of identifiable people

Photos, avatars, and similar images can be personal data when a person is identifiable — including other Monsters, bystanders, or anyone recognisable in a shot you upload. If you upload such images, you are responsible for having a good reason to share them (for example permission, or another lawful basis that fits your situation). The same idea applies across gallery photos, avatars, chat images if used, event shots, and ride snapshots.

User content you publish

Content you put into profiles, bios, garage notes, chat, moments, galleries, events, and rides is visible according to how those features work. Electric Monsters does not pre-approve every upload. When problematic content is reported or otherwise becomes known, it may be reviewed and removed or restricted. Use Gallery Report where available, or email info@electric-monsters.com. Deletion of an entire account remains manual by email, as described below.

Website

The marketing site may receive contact-form submissions and may use browser storage for audio mute and a short FPS/performance probe. Hosting is with Simply.com in Denmark / the EU. Project email is handled via Simply SMTP.

Email from Electric Monsters is transactional in the current product sense (for example account verify / reset related mail, and replies when you write to info@). This page does not describe a marketing newsletter list or advertising email programme. If that changes later, this policy should be updated to match reality.

Companion app

The Companion stores account and community data needed to operate identity, chat, galleries, rides, events, and related features. Login uses the EMSESSID cookie (HttpOnly, Secure, SameSite=Lax, path /app, about 30 days). App JavaScript in the current implementation does not use localStorage or sessionStorage for those features.

Mr. Jakob (AI) and the OpenAI API

Mr. Jakob (AI) is an AI-based conversational chatbot operated as part of the Electric Monsters Companion App. It uses the OpenAI API to generate conversational responses. It is an AI persona — not the real human Jakob Rohde Gellett, not an employee, not a lawyer or adviser, not customer service, and not an authorised spokesperson for the project. It may be inaccurate or make mistakes.

Keep the entities distinct: the Mr. Jakob (AI) persona in the App is not the same thing as the OpenAI API, which is not the same thing as the Electric Monsters operator (Jakob), which is not the same thing as the human Jakob in ordinary life.

Electric Monsters operates the Mr. Jakob (AI) feature inside the App. OpenAI is the underlying API provider — a third-party service provider / processor for that generation step — not the operator of the Electric Monsters App.

How a message flows

  1. You send a message in the Electric Monsters App.
  2. The Electric Monsters server processes the conversation for the feature.
  3. Relevant message content is transmitted from the Electric Monsters service to OpenAI’s API (api.openai.com) for processing and response generation.
  4. OpenAI returns an AI response to the Electric Monsters service.
  5. Electric Monsters displays that response in the App as Mr. Jakob (AI).

When you communicate with Mr. Jakob (AI), relevant message content is transmitted from the Electric Monsters service to OpenAI’s API for processing and response generation. This means that interactions with Mr. Jakob (AI) involve a third-party service provider and may involve processing of data outside the EU/EEA.

This page does not claim exact OpenAI retention periods, “zero retention,” or that conversations are or are not used for OpenAI training. Those details depend on the project’s OpenAI API account configuration and on OpenAI’s own current API / privacy terms, which are not restated here. For OpenAI’s current documentation, see OpenAI’s public privacy and API data pages (for example via openai.com/policies) — and treat those as OpenAI’s documents, not as Electric Monsters legal text.

For review: Formal transfer safeguard paperwork (for example standard contractual clauses or equivalent documentation) is not invented here. International transfer for the AI chatbot happens in practice today; documenting and tightening transfer safeguards is part of how the project should mature. If you need detail before using AI chat, email info@electric-monsters.com.

Fictional profiles and Inner Circle

Some profiles and characters you may see — including Fuse, Torque, Riot, Switch, Nox and other Inner Circle figures — are fictional or project-created. Their names, Monster IDs, bios, photos, garages, and chat may be invented or AI-assisted. They are not real human members simply because they appear in the app. That distinction matters so you do not treat fiction as another person’s personal data file.

Why we use the data

In plain language: to create and secure your Monster account, run community features you choose to use, reply to messages you send, keep the service working, and improve reliability. Soft legal framing: processing is done as needed to provide the service you ask for, to pursue the project’s legitimate interest in operating a small community platform, and — where you contact us or opt into features — in line with that interaction.

For review: Exact Article numbers and a full records-of-processing schedule are not fabricated in this version.

Who else sees it

Beyond Jakob operating the project:

  • Simply.com — hosting and email (DK/EU)
  • OpenAI — third-party API provider when Mr. Jakob (AI) is used, as described above (OpenAI is not the App operator)

Other Monsters can see the profile and community content you publish (display name, Monster ID, avatar, bio, gallery posts, chat/moments you share, and similar public or community-visible fields). Do not post secrets you do not want the Pack to see.

We do not list extra processors we do not actually use.

International transfers

Hosting and ordinary email stay with Simply in the DK/EU context described above. The notable non-EU transfer in the current product is transmission of relevant Mr. Jakob (AI) message content to the OpenAI API. See the AI section and the “For review” note on safeguards.

How long we keep it

Data is kept as long as needed to operate the service and your account, and to handle abuse, security, or legal claims when that becomes necessary. There is no invented multi-column retention schedule in this version.

Deletion: There is no self-service account delete in the Companion yet. To request deletion, email info@electric-monsters.com. Deletion is handled manually. Gallery reporting exists for content flags; that is separate from full account deletion.

Your rights

Depending on applicable law (including GDPR if it applies to you), you may ask for access to your personal data, correction of inaccurate data, and deletion. Use info@electric-monsters.com and say what you need. Jakob will work through requests in good faith as a small private operator.

You also have the principle of complaining to a supervisory authority. In Denmark that is Datatilsynet. This page does not invent a special internal appeal tribunal or fake procedure numbers — if you believe your rights are not respected, you can contact Datatilsynet through their public channels.

Security

Reasonable technical measures are used for a project of this size (HTTPS, hashed passwords, HttpOnly session cookie, and similar basics). No system is perfect. If you find a security issue, please email info@electric-monsters.com rather than posting an exploit in chat.

Changes

This policy will be updated when the product or the facts change. The “Last updated” line at the top is the cue. Continued use after changes means you should re-read the parts that matter to you; questions and corrections are always welcome at the same inbox.

Also see Cookies & local storage and Terms & Conditions.

← Back to Legal hub