Privacy Policy
Version 1.0 · [EFFECTIVE DATE]
[DRAFT — NOT YET IN FORCE.] The technical detail below is accurate to what the software actually does. The bracketed items and the legal framing still need filling in and reviewing before this is published.
This describes what Spawnhall collects, why, who else sees it, how long it is kept, and what happens when you leave. It is written to be read rather than to be defensible.
Spawnhall is operated by [LEGAL ENTITY NAME] ([ADDRESS]). Questions: support@spawnhall.net.
The short version
- We collect what the app needs to work: an account, what you post, and what you choose to put on your profile.
- We do not record voice. Not for moderation, not optionally, not at all.
- We do not sell your data, and we do not use it for advertising.
- You can delete your account yourself, immediately, from inside the app. Your posts stay, with your name removed.
What we collect
Your account
Your email address, and a password we never see — it is hashed by our authentication provider before it reaches storage. Also your display name, and an internal handle generated at signup that is used in web addresses.
Your profile — all optional
A short bio, a location if you give one, an avatar and banner image, which platforms you play on, and any gamertags you add: PlayStation Network, Xbox, Steam, Nintendo, Discord, Twitch and YouTube.
Everything on your profile is public to signed-in members. Gamertags exist so people can add you, which means they can be seen by anybody who can see your profile. Do not put anything there you would not say to the room.
What you post
Threads, replies, chat messages, images and video you upload, reactions and likes, reputation given and received, and — where you edit a post — the previous version of the text.
Who you connect with
Follows, blocks and group memberships. Blocks are never shown to the person blocked.
Safety and moderation
Reports you file and reports that name you, including anything you write in the details; sanctions issued to your account and the reasons for them; and a record of actions moderators take.
We also keep short excerpts of text the filter refused to post. If a message is blocked, the message itself is never stored — but an excerpt is, so that moderators can see patterns rather than isolated incidents. This is the one place where something you typed but did not successfully post is retained, and we would rather say so plainly than bury it.
Voice rooms
We record no audio. What is kept is the fact of participation — which room, when, and moderation events such as being removed. Our voice provider processes the audio stream in order to carry it between participants and does not retain it.
Technical data
Our providers process IP addresses, device and browser information, and request logs, for security, abuse prevention and keeping the service running. We use no advertising trackers and no third-party analytics that profile you across other sites.
[If any analytics is added later, it must be described here before it ships.]
Why we hold it
- To provide the service — an account, your posts, your connections. Without this there is no app.
- To keep people safe — moderation, reports, sanctions, filter records, and preventing ban evasion.
- To meet legal obligations — where we are required to keep or produce something.
[For UK/EU users these map to the GDPR lawful bases of contract, legitimate interests and legal obligation. Confirm the mapping and the legitimate-interests assessment with your adviser.]
Who else sees it
We do not sell your data or share it for advertising. We use these providers to run Spawnhall, and each sees only what it needs:
- Supabase — database, authentication and file storage. Holds your account, profile, posts and uploads.
- LiveKit — carries voice audio between participants in real time. Not recorded, not stored.
- Resend — sends account emails such as confirmations and password resets. Sees your email address.
- Cloudflare — DNS and hosting for this website.
- Discord — only if you choose to sign in with Discord. We receive your Discord username, display name, avatar and email address, and nothing else. We cannot read your messages, see your servers, or post anything as you.
- Apple — only if you choose to sign in with Apple. We receive your name and an email address. If you use Hide My Email, that address is a forwarding one Apple generates for Spawnhall alone, and we never see your real address.
Signing in with Discord or Apple sends nothing back to them about what you do here. They confirm who you are; they are not told what you post, who you talk to, or when you are online.
We may also disclose information where the law requires it, or where it is necessary to protect somebody from serious harm.
[Confirm each provider's data-processing terms are signed, and where each stores data, before publishing. Add any provider added later.]
Where it is held
Our providers operate internationally, so your data may be processed outside your country, including in the United States. [Confirm the transfer mechanism relied on for UK/EU users — standard contractual clauses or equivalent.]
How long we keep it
- Your account and profile — until you delete it.
- Your posts — until they are deleted. Deleting your account does not delete them; see below.
- Moderation records — kept while they are useful for keeping people safe. [Set a defined period, e.g. 24 months, with your adviser.]
- Backups — deleted data persists in backups for a short period before ageing out. [State the provider's backup retention window.]
What happens when you delete your account
You can do it yourself, from You → Account deletion. It is immediate and cannot be undone. Here is exactly what happens.
Erased
Your account and login, your profile — bio, location, avatar, banner, platforms and every gamertag — your reputation, your likes and reactions, your follows, your blocks, your group memberships, your notifications, any reports you filed, your sanction history, and any voice rooms you created.
Kept, with your name removed
Threads, replies and chat messages you wrote stay, attributed to "Deleted user". This is deliberate. Removing them would remove the replies other people wrote inside your threads and the conversations they had around your messages, and those are not yours to delete. Records of moderator actions also keep their shape, with the person's identity removed.
If a specific post of yours needs to come down, delete that post before deleting your account, or ask us.
Kept, deliberately, after you are gone
If your account ever posted, we keep a one-way simplified form of your display name — lowercase, with lookalike characters folded together, so "ZESTY Steve" is kept as "zestysteve". Nothing else about you is kept with it, and it cannot be turned back into your name, your email or your account.
It exists so nobody can take a name that other people still associate with you and inherit that recognition. An account that never posted leaves nobody to mislead, so its name is released immediately.
If your account was banned
We keep a one-way keyed hash of the email address for as long as the ban lasts, so the same address cannot be used to sign up again. It is not reversible into your address, it is stored with nothing else attached, and it is deleted when the ban is lifted or expires.
Your sanction record itself is erased with your account, like everything else in the list above. This is the minimum that makes a ban mean anything once somebody has left.
Your rights
You can ask us to give you a copy of your data, correct it, or delete it, and you can object to some processing. Most of this you can do yourself: profile fields are editable in the app, and account deletion is a button. For anything else, email support@spawnhall.net from the address on the account.
[UK/EU users have rights under the UK GDPR and GDPR including complaint to a supervisory authority; California residents have rights under the CCPA/CPRA. Name the applicable authorities and add the specific disclosures each regime requires.]
Children
Spawnhall is not for under-13s and we do not knowingly collect their data. If you believe a child under 13 has an account, email us and we will remove it.
[Confirm the minimum age against COPPA, the UK Age Appropriate Design Code and any other market you launch in. Several jurisdictions set it higher than 13.]
Security
Access to data is enforced by the database itself rather than only by the app, so a modified or malicious client cannot read what it should not. Passwords are hashed, connections are encrypted, and the keys that could bypass those rules are never shipped inside the app.
No service is perfectly secure. If we discover a breach affecting you, we will tell you and the relevant authorities as the law requires.
Changes
If this policy changes materially, we will say so in the app before the change takes effect. The version and date at the top always reflect what is current.