Privacy Policy

1. Information We Collect

• Account information — When you register, we collect your name, email address, and a hashed (bcrypt) version of your password. We never store your password in plain text.
• Uploaded content — Videos, music files, and cover images you upload are stored on Vercel Blob (a third-party cloud service).
• Activity data — Likes, comments, and follows you create are stored to operate the platform's social features.
• Profile avatar — Optional. Stored on Vercel Blob if you upload one.

2. How We Use Your Information

• To operate your account and provide platform features (login, upload, comments).
• To send you email notifications (likes, comments, follows) you've opted in to by participating.
• To send the site administrator alerts about new signups and uploads for moderation.
• To investigate reports of content that may violate our Community Guidelines.

3. What We Do NOT Do

• We do not sell your personal information to any third party.
• We do not run advertising networks or share data with advertisers.
• We do not use tracking pixels, third-party analytics scripts, or fingerprinting.
• We do not collect payment information — IntroSplash is free to use.

4. Cookies & Sessions

We use a single first-party session cookie (introsplash_session) to keep you logged in for 7 days. It is HttpOnly (JavaScript cannot read it), transmitted only over HTTPS in production, and marked SameSite=Lax to reduce cross-site request risk. We do not use tracking or advertising cookies.

5. Third-Party Services

• Vercel — Hosts the application and stores uploaded media. Subject to Vercel's Privacy Policy.
• Upstash Redis — Stores user accounts, content metadata, likes, comments, and follows. Subject to Upstash's Privacy Policy.
• Gmail / SMTP — Used to send notification emails. Email addresses are shared with Google's mail servers only to deliver those messages.

6. Data Retention

Your account and content remain until you request deletion. You can delete individual uploads from the Videos or Music pages. To delete your account entirely and all associated data, email us at jerryroldan@gmail.com. We will process deletion requests within 30 days.

7. Children's Privacy

IntroSplash is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.

8. Security

Passwords are hashed with bcrypt before storage — we cannot recover your plain-text password. The site is served exclusively over HTTPS. HTTP security headers (X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security) are enforced on every response. No system is perfectly secure; we encourage you to use a unique password and report any security concerns to jerryroldan@gmail.com.

9. Your Rights

Depending on where you live you may have rights under GDPR, CCPA, or similar laws, including the right to access, correct, or delete your personal data. To exercise any of these rights, email jerryroldan@gmail.com.

10. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top will reflect any changes. Continued use of IntroSplash after a change constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about this Privacy Policy? jerryroldan@gmail.com