The Fine Print

Terms of Service

1. Agreement

Spill & Steal (“the Service,” “we,” “us”) is an anonymous entertainment website where users trade short anonymous confessions. By using the Service — including submitting a secret or drawing one — you agree to these Terms. If you don't agree, don't use the Service.

2. You must be 18 or older

The Service contains user-generated content of an adult nature. You must be at least 18 years old (or the age of majority where you live) to use it. By submitting content you represent that you are 18 or older. We do not knowingly collect any information from anyone under 18; the Service is not directed to children under 13 within the meaning of COPPA.

3. Content is fiction until proven otherwise

Submissions are anonymous, unverified, and presented for entertainment. We make no claim that any secret is true, and you should assume any secret you read may be fabricated. Nothing on the Service is advice of any kind.

4. What you can't post

You agree not to submit content that:

• identifies any real private individual (names, handles, addresses, phone numbers, emails);
• is defamatory, harassing, or targets a specific person;
• sexualizes minors in any way (zero tolerance; reported to NCMEC as required by law);
• contains credible threats of violence, or confesses or plans serious crimes;
• promotes or solicits commercial sex, human trafficking, or illegal goods or services;
• infringes anyone's copyright, trademark, or other rights;
• contains spam, links, advertising, or malware.

We use automated filters and human review, and we may remove, demote, or refuse any content at any time, for any reason, without notice. Users can report any secret; reported content may be hidden automatically.

5. Your license to us

You keep whatever rights you have in the text you submit. By submitting, you grant us a perpetual, irrevocable, worldwide, royalty-free license to store, display, distribute, and adapt that text as part of operating and promoting the Service. Because submissions are anonymous, you understand we cannot attribute them to you.

6. Section 230 notice

Secrets are provided by users, not by us. To the fullest extent of 47 U.S.C. § 230, we are not the publisher or speaker of user-submitted content and are not liable for it.

7. No warranty

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE, OR THAT ANY CONTENT WILL REMAIN AVAILABLE.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE (AND OUR OPERATORS) WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY FOR ANY CLAIM WILL NOT EXCEED FIFTY DOLLARS (US $50). Some jurisdictions don't allow certain limitations, so parts of this may not apply to you.

9. Indemnity

You will defend and hold us harmless from claims arising out of content you submit or your breach of these Terms.

10. Termination & changes

We may block access, remove content, or discontinue the Service at any time. We may update these Terms; continued use after an update is acceptance. These Terms are governed by the laws of the State of California, USA, and disputes belong exclusively in the state or federal courts located in California.

Privacy Policy

What we collect (very little)

• The secret text you submit — stored anonymously with a content hash, vote counts, and a timestamp. It is not linked to your name, account, or identity (there are no accounts).
• Your IP address, transiently — read in memory only to rate-limit spam and de-duplicate votes. It is not written to our database and is never linked to any secret.
• Browser localStorage— a list of the secrets you submitted (so your “my secrets” page works) stays on your device only. We never see it. Clearing your browser storage erases it.
• Hosting logs — our infrastructure providers (Vercel; Supabase for the database) may process standard server logs (IP, user agent) to run their platforms, per their own privacy policies.

What we don't do

• No accounts, no names, no emails, no phone numbers collected.
• No advertising trackers, no analytics cookies, no cross-site tracking (no “sale” or “sharing” of personal information as defined by the CCPA/CPRA).
• We can't identify who wrote a given secret — by design.

Your choices & rights

California residents have rights under the CCPA/CPRA (know, delete, correct, non-discrimination). Because we hold no identified personal information, most requests are satisfied by design. To request deletion of a specific secret you submitted, email spillandsteal.legal@gmail.com from the device you used, including the secret's share link and, if available, the owner token shown on your “my secrets” page data. We honor Global Privacy Control signals by not selling or sharing data in the first place.

Retention & security

Secrets remain until removed by moderation or a verified deletion request. Data is stored with reputable US cloud providers using industry-standard security; no system is perfectly secure, and you submit at your own risk. If we ever materially change this policy, we'll update this page and its date.

DMCA / Copyright

If you believe content on the Service infringes your copyright, send a notice compliant with 17 U.S.C. § 512(c)(3) to spillandsteal.legal@gmail.com including: your signature, identification of the work, the URL of the allegedly infringing secret, your contact info, a good-faith statement, and a statement under penalty of perjury that you are authorized. We will remove content in response to valid notices and may terminate repeat infringers.

Reporting content

Every drawn secret has a Report button. For urgent issues (threats, minors, doxxing), email spillandsteal.legal@gmail.com with the share link. Content sexualizing minors is reported to the National Center for Missing & Exploited Children (NCMEC) as required by 18 U.S.C. § 2258A.