⚠ Draft — placeholder, not legal advice. This page is scaffolding for SpoiledPotato's public beta. The outline below is non-binding and awaiting legal review — it is not the final privacy policy.

Privacy Policy

Last updated: Not yet published

The published policy will go here after review. The outline reflects what the beta actually collects and the processors it relies on — these must match the code and the Play data-safety declaration.

What we collect

Account: email address and a password (stored only as a hash)
Age gate: birthdate given at registration
Content: reviews, comments, and the video/thumbnails you upload
Playtime: session data used to verify and rank reviews (incl. the launcher's passive capture, which is opt-in)

Processors we share data with

Resend — transactional email (e.g. password reset)
Cloudflare — API hosting and media storage (R2)
Neon — database hosting

Retention

Disposable data (spent auth tokens, old notifications) is pruned on a schedule; see the retention policy. Backups have their own stated window.

Deleting your account

You can delete your account in-app or at /delete-account. Deletion removes your content and personal data; a minimal, PII-scrubbed record may remain to keep references intact. [Confirm exact tombstone wording with legal.]

Children

Not directed to children under 13; no under-13 accounts (COPPA).

Contact

[Contact address — TBD]