Legal

Privacy Policy

Last updated 5 September 2026

Spilla is a fan app about reality television. It does not need to know much about you, and it is built that way on purpose: the shortest honest answer to “what do you collect?” is an email address, a handle, and whatever you choose to type into the app.

Who is responsible

Spilla is operated by Cowabunga Productions Sweden AB (company number 559070-3277), Hornsgatan 119, 117 28 Stockholm, Sweden. We are the data controller for the personal data described here.

Questions about this policy, or about your data, go to hello@getspilla.com — put PRIVACY in the subject line.

What we collect

Your account

When you sign up we store your email address and a securely hashed password. This is handled by our authentication provider; we never see your password in readable form.

Your profile

Your handle, and optionally a display name, a short bio, and the shows you mark as favourites. All of it is written by you, and all of it is visible to other people using the app.

What you do in the app

• Comments you post on episodes and posts
• Messages you send in groups, and which groups you belong to
• Votes in polls and in the daily battle
• Game progress: rounds played, correct answers, streaks
• Items you save or bookmark

A device identifier

The app generates a random identifier and keeps it on your device. It is used to stop the same phone voting twice in a poll. It is not tied to your hardware, not shared with anyone, and disappears when you uninstall the app.

What stays on your phone

Your language choice, the order you arrange your home screen in, when you last opened a tab, and unsaved profile edits are stored only in the app's own storage on your device. They are never sent to us.

Why we are allowed to process it

To give you the app you asked for

Account, profile, comments, groups, votes and game progress are processed to perform our contract with you (GDPR Art. 6(1)(b)).

To keep the app usable and safe

Abuse prevention, moderation, one-vote-per-device, and diagnosing faults rest on our legitimate interest in a functioning, non-toxic app (Art. 6(1)(f)).

To meet legal obligations

Where the law requires us to keep or produce something (Art. 6(1)(c)).

Who else sees it

We use a small number of processors, each bound by a data processing agreement and none of them permitted to use your data for their own purposes:

• Supabase — database, authentication and file storage. The Spilla database is hosted in the European Union (Ireland).
• Render — hosting for this website and our admin tools.
• Apple and Google — app distribution and, if you use it, sign-in.

Other people using Spilla see whatever you make public: your handle, display name, bio, favourite shows, comments, and messages in groups you join.

How long we keep it

• Your account and profile — until you delete your account.
• Comments and group messages — until you delete them, or until your account is deleted.
• Votes and game progress — until your account is deleted, after which vote counts remain only as anonymous totals that cannot be traced back to you.
• Moderation records — up to 12 months after the matter is closed, so that a banned account cannot simply return.

Your rights

If you are in the EU or EEA, the GDPR gives you the right to access your data, correct it, delete it, restrict or object to how we process it, and receive a copy in a portable format. You may also withdraw consent where we relied on it.

Write to hello@getspilla.com and we will answer within 30 days. You can delete your account from inside the app at any time — see Support for the steps. If you are unhappy with how we handled a request, you can complain to your national data protection authority; in Sweden that is Integritetsskyddsmyndigheten (IMY).

Children

Spilla is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, tell us at hello@getspilla.com and we will remove it.

Security

Data is encrypted in transit and at rest. Access to the database is restricted by row-level security policies, so one account cannot read another's private data, and administrative access is limited to the people who need it. No system is perfect; if a breach affects you, we will tell you and the relevant authority as the law requires.

Changes to this policy

If we change something material we will update the date at the top and, where the change affects you meaningfully, tell you in the app before it takes effect.