Privacy policy
Effective 15 November 2026 · Spill (spill.pratikpoddar.in) is operated by Tinkerer (Pratik Poddar), an individual based at 76, Vrindavan Vihar, Ajmer Road, Jaipur, Rajasthan 302019, India. Contact: pratik.phodu@gmail.com.
The short version
- Your chat export is read in your browser. Before anything is uploaded, phone numbers, emails, links, address-like text, long numbers and surnames are replaced with tokens, and names are cut to first names. You see a preview of exactly what is sent.
- The redacted chat is deleted from our servers as soon as your report is ready, and always within 24 hours.
- Your report (including the short quotes it cites) is kept for 30 days so you can reopen it, then deleted. You can delete it any time with one tap.
- We never sell your data and never use your chats to train AI models.
- You must be 18 or older.
What we collect
- Redacted chat text you choose to upload: first names, timestamps and redacted messages. Media files inside a .zip are never read or uploaded.
- Your report: statistics, AI-written text, and the specific quoted messages it cites (the “receipts”).
- Optional email, only if you ask us to email you when the report is ready. It is deleted right after that email is sent (or within 24 hours).
- Both Sides reactions: if someone you invite reacts to your card, their reaction (fair/partly/unfair, the bars they dispute, up to 600 characters of text), stored with your report.
- Analytics: privacy-friendly event counts (for example “report viewed”, “card downloaded”) with no cookies, no IP addresses, no user IDs and no chat content. We keep a salted, hashed form of IP addresses for up to 2 days only to rate-limit abuse.
How the AI part works
To write your report we send the redacted chat, in chunks, to an AI provider. Today this is Google's Gemini API. We use Google's paid API tier, under which Google does not use submitted content to improve its products. We do not use your content to train any model ourselves.
Other people in your chat
A chat includes other people's messages. Only upload chats you are part of, and think about whether they'd be comfortable with it. Shared cards show first names, numbers and roles only, never quotes. Both Sides lets the other person see the card and respond.
Where data is stored
Our app runs on Netlify and stores data in a Supabase Postgres database (United States region). Emails are sent through Resend. These providers process data on our behalf.
Sharing
We share data only with the providers above, to run the service, or if the law requires it. Public cards exist only if you tap “Copy share link”.
Your rights
You can delete your report at any time from the report page. For any other request (access, correction, deletion, complaint), email pratik.phodu@gmail.com. We'll respond within 30 days. You may also have the right to complain to your local data protection authority.
Children
Spill is for adults 18+. We don't knowingly process chats uploaded by minors.
Safety
If a chat shows signs of threats, coercive control or self-harm, the report drops its jokes and shows support resources. We don't report users or contact anyone.
Changes
We'll update this page and its date when this policy changes.