Privacy policy

Sploot ("we", "us") is a free surf-learning community operated by the Sploot team. For questions related to this policy or your personal data, write to us at privacy@sploot.it.

For users in Brazil, we act as data controller ("controlador") under the LGPD (Lei nº 13.709/2018). For users in the European Union / UK, we act as data controller under the GDPR.

• Account data: email address, display name, preferred language.
• Tool answers: the questions you answer in Board Matcher and the Surfer Quiz, plus the results we generate.
• Community content: posts, spots, photos and turtle reactions you share in The Line-up.
• Waitlist: the email you optionally leave to be notified about upcoming features.
• Technical data: IP address, device type, browser, and a minimum of cookies for session and preferences.

We do not intentionally collect sensitive personal data (race, religion, health, biometrics). Please don't include any of that in your posts.

• To run your account and log you in (contract / execução de contrato).
• To generate your board recommendation, quiz result and glossary answers (contract).
• To show your posts to other members (contract).
• To notify you about a specific feature you asked about via the waitlist (consent).
• To keep the service safe, fix bugs, prevent abuse (legitimate interest).
• To comply with legal obligations when they apply.

We share the strict minimum with service providers who help us run Sploot:

• Cloud infrastructure and database: to host the app and store your data.
• Google Sign-in: if you choose to log in with Google.
• AI providers: to generate the plain-language explanations in Board Matcher, the Living Glossary and the daily prompt. We send only what's needed for that specific answer, and we don't send your email or your name.
• Email delivery: to send you the magic link when you sign in.

We do not sell your data. We do not share it for third-party advertising.

Some of our providers are located outside your country (typically in the EU or the US). When that happens, we rely on the safeguards allowed under LGPD (Art. 33) and GDPR (Standard Contractual Clauses).

• Account and profile data: while your account is active, plus up to 30 days after deletion for backups.
• Tool results and community posts: until you delete them, or your account.
• Waitlist entries: until the feature launches, or until you unsubscribe.
• Technical logs: up to 6 months, then anonymized or deleted.

You can access, correct, export or delete your data anytime by writing to privacy@sploot.it from the email of your account. If you're in Brazil, see our LGPD page for the full list of rights. If you're in the EU/UK, you have equivalent rights under GDPR Articles 15-22.

We use only what's necessary: a session cookie so you stay logged in, and a preference cookie for your language. No third-party tracking or advertising cookies. If we ever add analytics, we'll ask first.

Sploot is not directed at children under 13 (or under 16 in the EU). If you believe a child has created an account, write to us and we'll remove it.

If we make meaningful changes, we'll notify you by email and update the date at the top of this page. Small edits happen quietly.

privacy@sploot.it for anything privacy-related. For everything else, hello@sploot.it.