Privacy Policy

Effective May 12, 2026

The short version

SpotId only knows what you tell it. We do not track your location, monitor your movements, or sell your data. Everything on your profile is there because you chose to put it there. You can remove it at any time.

1. What Information We Collect

Information you give us directly

  • Account info: Name, email address, and password (stored encrypted)
  • Profile info: Bio, occupation, location, phone, website — only if you add them
  • Photos: Images you upload to your profile or listings
  • Daily tags: Hashtags you choose to publish each day
  • Closet listings: Items you list for sale with their descriptions and tags
  • Work listings: Services you offer with their descriptions and tags

Information we do NOT collect

  • We do not collect Your GPS location or device location — ever
  • We do not collect Your browsing history outside of SpotId
  • We do not collect Your contacts, address book, or social graph
  • We do not collect Device identifiers beyond what is necessary for session management
  • We do not collect Any biometric data

Technical information

Like all web services, we receive standard server logs including your IP address, browser type, and pages visited. This is used solely for security, debugging, and abuse prevention — never for advertising or profiling.

2. Location — A Critical Distinction

SpotId does not track your physical location. Any location information on your profile — a city, a venue, a neighborhood — is text that you typed yourself. We have no GPS, no geofencing, and no automatic location detection of any kind.

This is intentional and fundamental to the platform. You choose what location to share, when to share it, and when to remove it. If you tag yourself at Starbucks in Plano, it's because you typed those words. When you want to stop being findable there, you remove the tag or let your Daily Profile expire.

3. How Your Information Is Used

We use the information you provide to:

  • Display your profile to other users
  • Make your tags searchable within SpotId
  • Send you account-related notifications (password resets, etc.)
  • Enforce our Terms of Service and protect user safety
  • Improve the platform

We do not sell your personal information to anyone. Ever. We do not use your data for advertising, and we do not share it with third parties except as described in Section 5.

4. What Is Publicly Visible

The following parts of your profile are visible to all SpotId users when you publish them:

Your nameAlways (if set)
Your bio, occupation, location fieldAlways (if set)
Your profile photosAlways (if uploaded)
Your Daily Profile hashtags and noteOnly on the day you publish them
Your Closet listingsWhile marked active (not sold)
Your Work listingsAlways (while published)

Your email address and password are never visible to other users or shown publicly.

5. When We Share Information

We share your information only in these limited circumstances:

  • With your consent: When you publish it on your profile
  • Legal requirements: If required by a valid court order, subpoena, or law enforcement request
  • Safety: To prevent imminent harm to you or others, or to investigate serious violations of our Terms
  • Service providers: Third-party services strictly necessary to operate SpotId (e.g., hosting), under confidentiality agreements

6. Data Retention and Deletion

You may delete your account at any time. Upon deletion:

  • Your profile, photos, and listings are removed from public view immediately
  • Your data is permanently deleted from our systems within 30 days
  • Daily Profile data expires naturally at midnight each day regardless
  • Server logs are retained for up to 90 days for security purposes

7. Security

We take security seriously. Passwords are hashed using industry-standard bcrypt encryption and are never stored in plain text. Access to user data is restricted to authorized personnel only. We use HTTPS encryption for all data in transit.

No system is perfectly secure. If you discover a security vulnerability, please report it to us responsibly before disclosing it publicly.

8. Your Rights (CCPA / GDPR)

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Delete your information (right to be forgotten)
  • Object to or restrict certain processing
  • Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us. We will respond within 30 days.

9. Children's Privacy

SpotId is not intended for anyone under 18 years of age. We do not knowingly collect, maintain, or use personal information from children under 18. If we learn that we have inadvertently collected information from a minor, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes. Continued use of SpotId after changes take effect constitutes acceptance of the revised policy.