Privacy policy
Updated: October 2026
SPOTTED is built to know as little about you as possible. Here’s exactly what’s stored, who sees what, and how to delete it. Data controller: the SPOTTED team.
What we store
Your profile: first name, age, photo, a short line on how to spot you, and the openness you chose.
Rough location: only while the app is open. It’s rounded to about 100 m before it’s saved, and your exact location is never stored. We also store when you were last active.
Activity: likes, waves, blocks, reports and chat messages.
Technical: an anonymous device ID, your interface language and, if you turned on notifications, your push subscription address.
What we don’t store
No full name, email, phone number or password.
No background location tracking, no selling data, no targeted ads.
Who sees what
People nearby (or at the same event) see your profile while it isn’t hidden. Nobody sees your location.
A like stays completely private unless it’s mutual.
Messages are visible only to the two people in a match. Notifications never include message text.
People you block can’t see you anymore.
Service providers
Data is stored with Supabase (database and photos) and the site is hosted by Vercel. Servers may be outside Israel.
Notifications go through your browser’s push service (Apple, Google or Mozilla).
How long
A profile that hasn’t been active for two hours stops appearing to others. The data itself is kept until you delete your account.
Harassment reports are kept after deletion, to keep users safe.
Your rights
Delete: profile menu → “Delete account”. This permanently removes your profile, photos, likes and messages.
To see your data, correct it, or ask anything: spottedisrael1@gmail.com
Age and updates
The service isn’t for anyone under 18. Profiles of minors will be deleted.
If we change this policy, we’ll update the date here.