spotsprigSubmit a product SPOTSPRIG / UPDATED OCTOBER 31, 2026
Privacy notice
Pre-launch draft. Operator information and service terms require owner approval before payments open. No real payment is available in this preview.
Collect what is needed to operate the board, handle payments and prevent abuse. Do not publish submitters’ contact details.
Information and purposes
A submission stores product name, website URL, description, category, contact email, submission time and acceptance time. The product details become public only after review and verified payment. We store a one-way hash of the private management key, not the original key. Your browser may keep the key in session storage for this tab; clear it by closing the tab or clearing that site storage.
Payment records contain provider order and capture identifiers, amount, currency, status, time and verified event identifiers. PayPal handles the payment experience and its own account or card information. We do not request or store card numbers or PayPal passwords. The PayPal SDK is loaded only when an approved listing’s owner opens an enabled checkout.
Security and measurement
Rate limits use a keyed hash of the connecting IP address for limited time buckets. Expired buckets are cleaned opportunistically; the operator should perform daily cleanup. The server and hosting provider can retain normal security access logs. Outbound click totals are coarse event counts, not unique people. No marketing analytics or advertising cookies are installed by this version. Administrator login uses a necessary secure session cookie.
Providers and retention
Hosting is intended for Hostinger; payment processing is intended for PayPal. Each provider processes information under its own terms and privacy notice. Their actual services and processing locations must be confirmed by the operator before launch. Published product content remains while listed. Unpaid submissions should be deleted after 90 days; private contact and technical records should be removed when no longer needed. Required payment or tax records follow the operator’s verified local retention duties. These are operator procedures, not an automated deletion feature in this release.
Contact the operator to request access, correction, removal or account-key assistance. We may need evidence of product ownership before disclosing or changing private information. Avoid sending sensitive documents until a suitable secure method is agreed. Mandatory local rights and complaint mechanisms continue to apply.