Privacy Policy

1. Introduction

SpicySnaps ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name
• Age verification status (boolean only)
• Account creation date

2.2 Order Information

When you make a purchase, we collect:

• Shipping address
• Payment information (processed securely by Stripe)
• Order history

2.3 Content Protection Data

To protect creator content from theft, we may collect:

• IP Address Hash: Your IP address is immediately hashed (one-way encryption) and the original IP is never stored
• Device Category: General device type (desktop, mobile, tablet) - not specific device information
• Browser Family: General browser name (Chrome, Firefox, etc.) - not version numbers
• Timestamp: When the protection event occurred

3. How We Use Your Information

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Protect creator content from unauthorized use
• Investigate content theft when reported
• Improve our services and user experience
• Comply with legal obligations

4. Data Retention

We retain different types of data for different periods:

5. Your Rights

GDPR Rights (EU Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Export your data in a machine-readable format
• Right to Object: Opt out of certain data processing
• Right to Withdraw Consent: Change your privacy preferences at any time

CCPA Rights (California Residents)

• Right to Know: Learn what personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

6. Content Protection Features

To protect creators' intellectual property, we employ several security measures:

6.1 Visible Watermarks

Preview images display visible watermarks that are removed only after purchase. This protects creators while allowing customers to preview their potential purchase.

6.2 Forensic Watermarks

Invisible watermarks may be embedded in images to track unauthorized distribution. This helps identify the source of leaked content without affecting image quality. Watermarks contain anonymized data (hashed identifiers) that cannot be used to directly identify individuals without additional information.

6.3 Screenshot Detection

With your consent, we log attempts to copy or screenshot protected content. This data helps us:

• Deter content theft
• Investigate reports of unauthorized distribution
• Improve our protection measures

You can opt out of this logging through our cookie consent settings. Essential protection features (watermarks) remain active regardless of consent.

7. Cookies and Tracking

We use the following types of cookies:

• Necessary Cookies: Required for basic site functionality (authentication, shopping cart)
• Analytics Cookies: Help us understand how you use our site (requires consent)
• Protection Cookies: Support content protection features (requires consent for EU users)

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer.

8. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing
• Peecho: Print fulfillment
• Resend: Email delivery

Each of these services has their own privacy policy. We only share the minimum data necessary for them to provide their services.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted over HTTPS
• Passwords hashed using bcrypt
• IP addresses immediately hashed, never stored in plain text
• Regular security audits
• Access controls and authentication

10. Children's Privacy

SpicySnaps is an 18+ service. We do not knowingly collect information from anyone under 18 years of age. All users must verify they are 18 or older during registration.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as an email or in-app notification) and may request renewed consent where required by law.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights: