Last updated: May 2026
Spotss respects your privacy. This policy explains what data we collect, why we collect it, how we use it, and what rights you have.
Account data
Your email address and authentication credentials when you sign up. Passwords are stored as a secure one-way hash — we never have access to your password in plain text.
Profile data
Display name, username, bio, profile image, cover image, and social media links you add to your creator profile.
Content data
Guides, lists, places, spot descriptions, images, sponsor labels, affiliate links, and any other content you create and publish on Spotss. Content you publish is intended to be publicly visible.
Usage data
Anonymous interactions with public Spotss pages — such as clicks on map links, affiliate buttons, sponsor cards, and support buttons. These events are linked to your creator account so you can view basic analytics on your own pages. Individual visitors are not identified or tracked.
Technical data
Standard server log data including IP addresses, browser type, device information, and page requests. Used for security monitoring and debugging. Not linked to individual creator profiles.
Communication data
Any messages or emails you send to Spotss, for example when requesting support or exercising your privacy rights.
We use your data to:
We do not sell your data. We do not use your data for advertising.
Where GDPR applies, we process personal data on the following legal bases:
When you publish a creator page, guide, or place list, that content becomes publicly accessible on Spotss. Public pages may include your display name, profile image, bio, social links, places, descriptions, sponsor labels, affiliate links, and other information you have added. Only publish content you are comfortable sharing publicly. You can unpublish guides or contact us to remove content at any time.
Spotss uses essential cookies and similar technologies for authentication and session management — to keep you logged in to your dashboard. We collect basic analytics such as page views and click counts on public pages to show creators how their content performs. This data is not used to sell personal information or for advertising. If non-essential cookies or marketing analytics are introduced in the future, this policy will be updated and consent will be requested where required.
Spotss uses trusted third-party providers to operate the service. These providers process data on our behalf and are bound by appropriate data processing agreements.
Data may be stored or processed by our third-party providers in countries outside the European Economic Area, including the United States. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions applicable to our service providers.
We keep your personal data for as long as your account is active and as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements.
If you delete your account or request deletion, we will remove your personal data within 30 days, except where we are required to retain it longer by law. Any remaining personal data will be deleted no later than 7 years after account termination, in line with Dutch statutory retention obligations for administrative records. We will notify you before this deletion takes place.
Published public content such as guides and place lists may remain visible until deleted by you or removed by Spotss on request. Anonymised and aggregated analytics data may be retained beyond this period as it cannot be used to identify you.
Depending on your location, you may have the right to:
To exercise any of these rights, email hello@spotss.me. We will respond within 30 days.
Spotss does not yet offer automated account deletion in the product. To request deletion of your account and personal data, email hello@spotss.me from the email address associated with your account. We will confirm receipt and complete your request within a reasonable timeframe.
Spotss is not intended for anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have done so, we will take steps to delete it promptly.
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No internet service can be guaranteed 100% secure.
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. For material changes, we will notify registered users by email before the changes take effect.
Questions about this Privacy Policy or want to exercise your privacy rights? hello@spotss.me