Privacy Policy

Account information. When you sign up we collect your email address, chosen username and display name, password (stored only as a salted hash), and any authentication identifiers from third-party sign-in providers you choose to use.

Profile content. Photos, avatars, story videos, background effects, room decor, skins, music selections, "Top Friends", bio, guestbook entries, comments, and any other content you upload to or display on your Space.

Social activity. Friends list, friend requests sent and received, guestbook posts, likes, comments, profile visits, and direct messages.

Device & technical data. IP address, browser type, operating system, device identifiers, push notification subscription tokens (when you opt in), crash logs, and basic usage analytics.

Cookies & local storage. We use cookies, localStorage, and IndexedDB to keep you signed in, remember preferences (including per-user Space customizations), and cache uploaded media on your device.

• Operate, maintain, and secure the Service.
• Display your profile, photos, music card, guestbook, and friends to people permitted by your privacy settings.
• Deliver friend requests, messages, guestbook activity, and other notifications, including push notifications to devices you've enabled.
• Personalize the experience (recommendations, "Explore", and similar features).
• Detect, prevent, and respond to fraud, abuse, and Terms violations.
• Comply with legal obligations and enforce our agreements.

Spaces is a social product, so much of what you create is intended to be visible to others. Your Space, photos, music selection, and guestbook are visible according to your privacy settings (Everyone, Friends Only, Friends of Friends, or Nobody, depending on the feature).

Direct messages are visible only to you and the recipient. Spaces personnel may access messages only when required to investigate abuse, comply with law, or operate the Service.

If you enable push notifications, your browser or operating system creates a subscription token that we store so we can deliver notifications about friend requests, messages, guestbook activity, and other events you choose. You can revoke push at any time in Settings or in your device's system settings.

We use vetted service providers for hosting, database, authentication, push delivery, analytics, and abuse prevention. These providers may process information on our behalf under contractual confidentiality and security obligations.

We do not sell your personal information. We do not share your content with advertisers for cross-context behavioral advertising.

We retain account and content data while your account is active. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where retention is required for legal, security, or fraud-prevention purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at the address below.

Spaces is not directed to children under 13 (or the minimum digital-consent age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children below that age. If you believe a child has provided us information, contact us and we will delete it.

Spaces is operated globally. Information may be processed in countries other than the one where you live, including the United States. We rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers where required.

We use technical and organizational measures including encryption in transit, hashed passwords, row-level database security, and access controls. No system is perfectly secure; please use a strong unique password and keep your devices protected.

We may update this Policy. We will notify you of material changes through the Service or by email. Continued use after the effective date constitutes acceptance.

Questions or requests: privacy@spaces.app.