Privacy Policy

1. Who we are

SpillSpoil is a social platform at spillspoil.my.id. This policy describes the information processed when you use the website and application. For questions about your information, contact info@spillspoil.my.id.

2. Information we process

The information processed depends on the features you use:

• Account and profile information: username, display name, email address, profile photo, biography, and account verification details.
• Authentication information: a password hash for password-based accounts, session records, and email verification codes. If you sign in with Google, we receive your Google account identifier, name, email address, and profile photo.
• Content and activity: posts, uploaded images and videos, comments, follows, likes, bookmarks, and notifications.
• Messages and chat information when you use messaging.
• Information you provide when contacting us, including your email address and the contents of your request.

3. How information is used

Information is used to create and authenticate accounts, display profiles and posts, provide feeds and search, deliver messages and notifications, verify email addresses, and respond to support requests. It is also used where needed to maintain the service, investigate misuse, or comply with applicable legal obligations.

4. Sharing and visibility

Your profile, posts, media, comments, and social interactions may be visible to other members through the application. Messages are delivered to the participants in the conversation. Do not post information you do not want other people to see or share.

Service providers process information needed to deliver features. These include Google for optional sign-in, UploadThing for uploaded media, Stream for chat, and Upstash QStash for processing email-verification delivery tasks. Infrastructure and email providers also support the operation of the service. Their processing may take place outside your country.

Information may also be disclosed when required by applicable law or when necessary to address abuse or protect the service and its users.

5. Cookies and preferences

SpillSpoil uses a session cookie to keep you signed in. Google sign-in uses temporary cookies to validate the sign-in request. The application may store your display-theme preference locally in your browser. You can remove stored data in your browser settings; deleting session cookies will sign you out.

6. Storage and security

Account information and content are stored to operate the features you use. Retention can vary by data type, provider, and applicable legal requirements. Deleting a visible post does not necessarily mean that every associated file, backup, or provider record is immediately removed.

Passwords for password-based accounts are stored as hashes. Access to account features requires authentication. No method of online storage or transmission can guarantee absolute security. Do not share your password or verification codes.

7. Your choices and requests

You can edit available profile fields and account settings, and delete your own posts and comments using the application. To request access, correction, a copy of your information, or account and data deletion, email info@spillspoil.my.id. We may need to verify that the request comes from the account holder.

Available rights and any exceptions depend on applicable law. Tell us the type of request and the account it concerns; do not include your password. You may also contact the relevant authority about a privacy concern.

8. Updates and contact

We may update this policy as the service changes. The date above identifies the latest revision. Questions about this policy, including concerns about a child’s information, can be sent to info@spillspoil.my.id.