Privacy policy

Who is responsible

Vertigo is the controller of your personal data. Write to contact@smashorpass.party for anything about your data. There are no accounts: we do not ask for your name or email to use the site.

What we collect and why

• Your lists, images, labels, tags and descriptions, to run the site. Only a hash of your secret edit key is stored, never the key itself.
• Your votes, to show what everyone chose. A vote is linked to a random voter code. If you pressed Accept on the cookie banner, that code is kept in a cookie. If not, it is derived from your network address, so the same person is not counted twice.
• A salted hash of your network address (IP address), to limit abuse such as spam and floods. The hash cannot be turned back into the address. Counters of these are deleted within a day.
• Reports and notices you send, with the details you type in them, to look at the content they are about. The notice form asks for a name and an email address, except for child sexual abuse material.
• Technical data such as your IP address, browser and the pages you open, which our hosting provider processes to deliver the site and keep it secure.

The legal basis is our legitimate interest in running a safe site (GDPR Article 6(1)(f)), our legal duties as a hosting service (Article 6(1)(c)) for notices and removals, and your consent (Article 6(1)(a)) for the optional voter cookie. See the cookie policy for everything stored in your browser.

Who receives it

• Cloudflare hosts the site, the database and the images, and runs the bot check (Turnstile). It processes your data on our behalf.
• OpenAI: images you upload are sent to OpenAI's moderation service to check whether they are allowed. Only the image is sent, not your name or edit key. We do not use it for anything else.

Some of these providers are outside the European Economic Area, so data can be transferred to other countries, with the safeguards the providers offer (such as standard contractual clauses). We do not sell your data, and there is no advertising on the site yet. If we add it, this policy and the cookie banner will change first.

How long we keep it

• Drafts: 30 days after the last edit.
• Published lists: 90 days after the last visit, with their images and votes. You get a warning in the editor 14 days before.
• Lists hidden because of reports and not yet reviewed: 180 days.
• Removed lists: the content is deleted at once. A short stub with the reason stays 30 days.
• Notices of illegal content: 365 days after they are decided.
• Cookies: see the cookie policy.

Your rights

Under the GDPR you have the right of access to your data, to correction, to erasure, to restrict or to object to how we use it, and to data portability. Where processing is based on consent, you can withdraw it at any time through “Cookie settings”. Because we do not know who you are, we may ask you to show that a list or vote is yours, for example with the edit key. You can delete your own lists yourself at any time. To use any right, write to contact@smashorpass.party.

You also have the right to complain to a data protection supervisory authority, for example in the country where you live or work.

Children

The site is not for anyone under 16. If you think a child has given us data, write to us and we will delete it.

Changes

We may update this policy. The date at the top shows the latest version.