POLICY · PRIVACY NOTICE
Privacy Notice
1. This website
- This website collects nothing. It uses no analytics, advertising trackers, login SDKs, cookies, local storage or remote help requests. Every request stays on this origin.
- Help search runs in your browser. The problem-summary form prepares text inside the page; only your own Download or Copy action places a copy in your downloads folder or clipboard. Clear discards the page draft.
- The account page shows a portal link only when the owner configures one; the page itself stores nothing.
- If aggregate site measurement is ever added, it will be limited to necessary, non-identifying events with bounded retention, and this notice will be updated first. Drawings, prompt text, credentials and private projects are never captured.
2. Data that stays on your device
- Editable projects, their media, saved revisions, Recently Deleted projects and exports live in the app’s on-device storage. They are not uploaded by saving, opening, exporting or signing in.
- Spatter local memory preferences are off by default. When enabled they store only fixed choices (guidance level, animation focus), scoped to the account or guest on that device, excluded from device backup, and deletable with “Reset saved preferences”.
- Tool settings and the Studio toolbar position are remembered on the device.
- Uninstalling the app removes this data unless you kept a project backup in Files.
3. Data kept on the server
Only essential records are stored server-side when you use connected features:
| Category | Purpose | Retention |
|---|---|---|
| Identity and access | Sign-in with a configured identity provider, session restoration, server-authorized roles | While the account exists; owner-gated after deletion |
| Consent records | The version of the publishing terms you accepted and the destinations you selected per submission | While the related permission or publication exists; owner-gated afterwards |
| Votes | Authenticated, abuse-resistant War Room votes | Owner-gated |
| Billing metadata | Entitlement reconciliation when a verified billing configuration exists (none today) | Owner-gated; invoices follow the processor’s rules |
| Job metadata and temporary media | Staged upload copies and review/publishing jobs for videos you explicitly submit | Bounded; temporary media is deleted only after verified publication or documented expiry, never while it is your only original |
Server-side records never include editable projects, drawings or prompt text. Secrets stay server-side; no API key or token is embedded in the app or this website.
4. Submitting a video for review
- Submission uploads a private copy of one exported MP4 that you choose. Your original export and editable project are preserved on your device.
- The copy stays on your device for resume until you remove it with “Remove upload copy” or “Cancel upload and remove copy”.
- Uploading is unavailable until the private service and the current publishing terms are configured; the app says so instead of simulating success.
5. Providers
When configured, the service relies on: the identity providers offered at sign-in; a hosted database and storage backend for the records above; a payment processor for subscriptions (none configured today); and YouTube for official-channel publication you explicitly permit. Provider names, regions and data-processing terms will be listed here before this notice takes effect. Nothing is sent to an AI vendor from this website.
6. Your choices and rights
- Withdraw a permission: publication and marketing permissions are separate and revocable; see the publishing permissions draft.
- Export your work: use “Save Project Backup to Files” in the app for an editable backup, and the export panel for rendered output.
- Delete your account: the in-app “Delete account” control files a deletion request with a seven-day cooling-off period during which you can cancel it in the app. After that period the service removes the authentication identity, its sessions and related server records (retained moderation evidence is kept without your identity, as described above). Projects and originals on your devices are never stored server-side, so they are untouched. Deletion does not cancel a subscription; cancel it through the App Store or the billing portal. Where the deletion service is not yet configured the app says so and deletes nothing.
- Access and correction: owner-gated route; to be published with the contact details.
7. Children
The publishing flow records an audience classification (“Made for kids” or “Not made for kids”) for each submitted video. The minimum age for accounts and any parental-consent requirement are open legal items for this draft.
8. Changes
Each published version carries an identifier and effective date. Material changes to connected processing will be published before they apply, and the version in force at the time of a consent is recorded with that consent.
Source grounding for this draft: website/site.js, StickDeathInfinity/Views/Profile/ProfileView.swift, StickDeathInfinity/Views/Settings/SettingsView.swift, StickDeathInfinity/Services/Auth/AuthService.swift, StickDeathInfinity/ViewModels/SpatterAIViewModel.swift, AGENTS.md (server-side minimisation and retention rules).