Privacy Policy

Our privacy policy and how we use your data

Last updated: 2 July 2026

The short version

Your individual photos never leave your phone. Splat composes the video on your device and uploads only the finished MP4 and its thumbnail. We collect the minimum we need to run the service, we don't sell any of it, and you can delete everything at any time.

What we collect

  • Account data: email address, username, display name, and the year and month of your birth (never the day) — used only to verify you meet our 16+ requirement.
  • Your Splats: the finished videos and thumbnails you upload, their titles, and visibility settings.
  • Activity: likes, views served to you by the feed, reports you file, and accounts you block — needed to run the feed gates and safety features.
  • Technical basics: authentication tokens and timestamps for the one-per-day / one-per-five-minutes limits.

What we deliberately do not collect

  • The individual photos you pick — composition happens on-device.
  • Your full date of birth.
  • Location data, contacts, or advertising identifiers.

Content moderation

Every uploaded Splat is scanned automatically before it can appear publicly. Sampled frames are sent to a third-party image-moderation service (AWS Rekognition) for classification and are not retained by it. Flagged frames may be stored for human review.

Where your data lives

Data is stored in our Supabase-backed infrastructure. Videos are served through short-lived signed URLs — there are no permanently public file links.

Deleting your data

Deleting a Splat removes its video and thumbnail from storage. Deleting your account (Settings → Delete account) removes your profile, Splats, likes, views, reports, and files. This is irreversible.

Contact

Privacy questions: privacy@splat.example.com