Privacy Policy

Effective date: June 23, 2026 · Last updated: June 23, 2026

Spilled RealiTea LLC operates a social platform for reality TV fans to share hot takes, discuss shows, and connect with other fans. This policy explains what information we collect, how we use it, and your rights over your data.

1. Information We Collect

Account information

Email address (required for registration and account verification)
Username (your public @handle)
First and last name
Password (stored as a one-way cryptographic hash — we cannot read it)
Phone number (optional)

Profile information

Profile photo (uploaded as an image)
Bio text
Privacy setting (public or private account)

Content you create

Posts, comments, and reactions in your feed and in Confessionals (rooms)
Polls you create and votes you cast
Live session data (the show or movie you declare you are currently watching)
Live chat messages sent while watching with friends
Links and embedded media you share (TikTok links, external URLs)

Social graph

Who you follow and who follows you
Follow requests you send or receive
Users you have blocked
Confessionals (rooms) you have joined
Shows and catalog items you have saved

Usage data

Server access logs (IP address, request path, timestamp, HTTP status code) retained for up to 90 days for security and debugging purposes

2. How We Use Your Information

Provide the service — create and maintain your account, display your content, and enable social features (following, reactions, live watch parties)
Email communications — send account verification, password reset, and content moderation notifications
Safety and moderation — review reported content, enforce our community guidelines, and investigate abuse
Security — detect and prevent unauthorized access, fraud, or misuse
Service improvement — understand how features are used to improve the app (using aggregated, non-identifiable data)

We do not sell your personal information. We do not use your data to serve third-party advertisements.

3. Information We Share

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Other users

Your username, display name, profile photo, bio, and public posts are visible to other users. If your account is set to private, your posts are only visible to approved followers.

Service providers

Railway — cloud hosting provider where the application and database run. Your data is stored on Railway's infrastructure.
Resend — transactional email provider used to send verification, password reset, and moderation emails. Resend receives your email address and the content of those emails.
TVMaze — public TV schedule API used to display show information. No personal data is sent to TVMaze.

Legal requirements

We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

4. Data Retention

We retain your account data and content for as long as your account is active. When you delete your account, we permanently delete your profile, posts, comments, reactions, messages, follow relationships, and all other data associated with your account. Deletion is irreversible.

Server access logs are retained for up to 90 days and then automatically deleted.

Content you reported to us (via the report system) may be retained in moderation records even after your account is deleted, solely for safety and compliance purposes.

5. Your Rights and Choices

Delete your account — You can permanently delete your account and all associated data at any time from within the app (Settings → Delete Account). Deletion is immediate and irreversible.

Change your password — You can update your password from within the app at any time (Settings → Change Password).

Edit your profile — You can update or remove your name, bio, and profile photo at any time from your profile settings.

Private account — You can set your account to private so that only approved followers can see your posts.

Block users — You can block any user to prevent them from interacting with you or seeing your content.

Access or export your data — To request a copy of your data, contact us at the email address below.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you may have additional rights under GDPR or CCPA, including the right to access, correct, or object to the processing of your personal data. To exercise these rights, contact us at the address below.

6. Children's Privacy

Spilled RealiTea LLC is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe we may have information from a child under 13, please contact us.

7. Security

We take reasonable measures to protect your information, including:

Passwords are hashed using bcrypt and are never stored in readable form
All data is transmitted over HTTPS (TLS encryption)
Authentication tokens expire after 24 hours
Email verification is required before account access is granted

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Third-Party Links

Spilled RealiTea LLC allows users to share links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal information to them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email or an in-app notice. Your continued use of spilled after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Spilled RealiTea LLC
Email: support@spilledrealitea.com