Privacy

Your phone or browser gets a random id, so that each of your taps counts once. Each tap (a 👍 or 👎, whether it was on, a different time or price, a report of a photo) is kept with what it was about, the time and that id, and so are the places you save and the notifications you turn on. No name, no email, no location.

Your email address and your password, which is stored scrambled — we cannot read it. What you post: things to do, their prices, photos, replies. Which places you saved, and which of them you turned notifications on for. Which dishes you liked, from an older version of the app that no screen shows any more. Your phone or browser keeps you signed in, and when you ask us to email you a link (to confirm your address or reset your password) it keeps a random code that also goes into the link, so the app recognises the link when you open it.

If you turn on notifications for a place in the phone app, the app keeps a token that lets us send a message to that phone. The token goes to Expo's push service and on to Apple or Google, who deliver the message. We delete it when you turn off the last notification, when you sign out, or when the phone says it is gone.

Where you are. The app does not ask for your location; you move the map yourself. Which places you opened, or when — Spotson records none of it, though the companies that host it keep the usual server logs for a short while. To show what changed at the places you saved, the app keeps on your phone or in your browser what was there when you last opened Favorites, the times and prices included; it is never sent to us. Signing out clears it, and so does clearing the app's or the browser's data. The place and date inside a photo you add — the app removes them from the picture on your device before it is sent.

The things to do, prices, photos and replies you post. A 👍 shows only in a count, and a check as a count and a time, never with a name. Your email address is never shown to anyone.

Supabase hosts the database and the map, in the United States. GitHub serves the map's fonts and icons. Expo, Apple and Google carry notifications. Cloudflare runs a check that tells bots from people the first time you do something that counts (say you were there, save a place, turn on a notification), and when you sign in, sign out, close your account or reset your password. Cloudflare's own terms for that check are its Turnstile Privacy Addendum. Vercel serves the website. Nobody else. We do not sell what we keep, and we run no ad trackers and no analytics.

To close your account, press “Close my account” at the bottom of Account: your email and password stop working, and the places you saved and their notifications are deleted. What you posted, rated or checked stays, with no name on it. To see what we hold about you, write to hello@spotson.me.

Spotson is not for anyone under 13.

When this page changes, the date at the top changes.