You don't read the bylaws before you walk out — a coworker you trust says "we're meeting about the schedule, you in?" and you're in. RORBT is that, hardened. Everything below unlocks only when you actually want it.
That's the whole pitch. No dues, no titles, no telemetry. Like a union, except the cells are tiny, every role rotates, and the app genuinely does not know who the hell you are.
You don't need to read another word to use it. The rest of these tabs are here for when — and only when — you actually want them.
Transparency logs are end-to-end encrypted with a group key the platform never holds. Subpoena the box; you'll get noise.
Decentralized means exactly that. Take the app down and the org doesn't die — the rules live in the people, portable to any transport.
The oligarch class has money, lawyers, media, politicians, and law enforcement on retainer. What they don't have is a counter-force that can be bought in one backroom. Because there's no single leader to buy, orbits and assemblies have no single room where the whole movement gets sold.
Every quiet "fine, whatever" is a vote for the way things are.
Which side of the equation are you on?
We collect as little data as operationally possible. Only what you knowingly provide. Only for explicitly stated purposes. Every PII field is AES-GCM encrypted at rest with a rotatable key.
The one unavoidable exception is your phone number — an SMS one-time passcode can't be sent to a number we can't read. So it stays readable, but inside a store that's encrypted, sharded, and salted. Prying it loose would take a sophisticated, total compromise. Anything short of that means we mishandled it — and if we ever do, we'll hand you the brief on how to sue us and shut us down.
Surveillance capitalism is morally diseased. We don't participate.
No tombstones, no "archived" purgatory, no shadow copy for the lawyers. We leave no ghosts in the machine.
We interpret narrowly, fight overbroad demands, lawyer up at our own expense where feasible, and notify you unless legally gagged.
No "Log in with Google," no "Continue with Apple." Not because OAuth2 is broken — because we won't put Big Tech's tracking anywhere near our auth flow. A real email, a real password, and a one-time SMS code. Intentional friction.
Don't use a password you already know. Let your password manager spit out a random string of encrypted garbage. Store it. Guard it.
Corporations spent two decades stealing privacy to build their empires. It's our official position that it's time to take it the fuck back.