Privacy notice

Last updated [set this date before launch]

Before you publish this site: the operator's legal entity, registered address and ICO registration number need to go in below, and this notice should be read by someone qualified. It is a complete and honest description of what the software actually does, but it is not legal advice.

Who we are

SprueTube is operated by [LEGAL ENTITY], [REGISTERED ADDRESS]. For anything about your data, email privacy@spruetube.app.

What we collect

  • Your account. Email address, a hashed password (we never see the original), display name and username.
  • Your date of birth. Collected once to check you are 13 or over. It is never shown on your profile.
  • What you post. Text, photos, videos, comments, likes, follows, saved posts.
  • Technical data. IP address and browser user-agent against your login sessions, for security and abuse prevention.
  • Reports. If you report something, we keep the report, what you said, and what we decided.

We do not sell personal data and we do not run third-party tracking beyond the advertising described below.

Why we are allowed to hold it

  • Contract: your account and your posts — we cannot run the service without them.
  • Legal obligation: the age check, and keeping moderation records.
  • Legitimate interests: preventing abuse and spam, and keeping the site up.
  • Consent: personalised advertising, where it applies. You can withdraw it at any time.

Advertising

Ad slots are labelled as advertisements. Where Google AdSense serves an ad, Google may set cookies and process data under its own privacy policy; you can control this at Google Ad Settings. Where we serve our own promotions, we count impressions and clicks in aggregate and nothing is tied to your account.

Who else sees your data

  • Cloudflare — hosting, database, image and video delivery. Our infrastructure provider.
  • Google — advertising, and sign-in if you choose it.
  • Apple — sign-in if you choose it.
  • Law enforcement — where we are legally required, or where there is a serious risk to someone.

How long we keep it

  • Account and posts: until you delete them.
  • Deleted posts: removed from the site immediately; purged within 30 days.
  • Login sessions: 30 days.
  • Moderation records: up to 2 years, because we may need to show what we did and why.

Your rights

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere. Email privacy@spruetube.app and we will respond within one month.

Deleting your account removes your profile, posts, comments and media. Moderation records about serious breaches are kept, because deleting them would defeat the point of having them.

If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

A session cookie keeps you signed in — the site does not work without it. Advertising cookies are only set where an ad network serves an ad, and only where you have agreed to it. We do not use analytics cookies.