Privacy policy

Operator and scope

Alex Pavel operates Slapz and handles privacy questions at streetslapz@gmail.com. This policy covers the app, website and related support. It is a privacy notice, not a waiver of rights or consent to optional processing.

Information we use

We process email addresses, account and sign-in identifiers, profile names and pictures, age ranges and country information, policy acknowledgements and acceptance history, photos and crop selections, upload locations, trails, votes, comments, likes, saves, reports and settings. Information comes from you, permitted device functions, sign-in providers and other users' interactions or reports. Authentication providers may supply a name, email and provider identifier.

Photos, locations and public contributions

Posting uses the device location you permit or the map point you select and can involve precise coordinates. Map positions are rounded but can still identify a location to within a few metres; they are not an anonymity measure. Protected source coordinates have restricted access.

Other users may see approved original photos as well as crops, captions, public profiles, map positions and shared contributions. Originals may contain more than the selected slap, and multiple slaps can share an image. Cropping does not make the background or original private.

Buildings, faces, signs, timestamps and other details can reveal people or places without exact coordinates. Others may recognise, copy or screenshot visible material. Check the whole photo and avoid private information, vulnerable people and sensitive places. We cannot promise that copies made by others disappear when a post is removed.

Public website showcase

Visitors do not need an account to see featured approved trail names, cropped artwork previews and aggregate slap and like counts on slapz.au. This showcase does not provide account details, location coordinates or original photo downloads. The artwork itself may still identify a place or person. Brief caching can delay removal from previews, and screenshots or copies made by others may remain. Contact us about privacy, safety or rights concerns.

Why we process information

We provide accounts, maps and trails; compare designs; show contributions; handle reports, moderation, appeals, security, rights requests and deletion; maintain acceptance records; and operate and improve Slapz. We do not sell personal information or use it for targeted advertising. Without information required for an account or upload, that feature may be unavailable.

Usage analytics and diagnostics

Share usage analytics is enabled by default for new accounts. Turn it off in Profile, Settings, Privacy. Product events can include account and device identifiers, app version, platform and activity. Turning it off stops optional usage reporting, not processing required to provide and protect Slapz. Accepting the terms does not prevent changing this choice.

Operational error reporting is separate and may occur before sign-in. It is designed to collect redacted errors, operations, timing, platform and app or OS versions rather than credentials, request payloads, photos or location. Server error reports expire after 30 days; unsent device reports expire after seven days.

Service providers and overseas processing

We use Supabase for accounts, databases and images, Google Cloud for image safety and matching, Google Maps for maps, Expo for app delivery, Vercel for the website and administration, Resend for emails, and Sentry for diagnostics. Providers receive information needed for their services and may process it outside Australia. Apple and Google also handle information for their sign-in or app-distribution services. Contact us about destinations relevant to your data.

Safety review and lawful disclosures

Authorised personnel and providers may review relevant uploads, reports and account information to investigate abuse, protect people, resolve rights complaints and operate Slapz. We may preserve or disclose relevant information where required or authorised by law, including valid court orders, legal obligations and lawful responses to serious safety threats. We assess the basis and scope of requests and limit disclosure to what is justified.

We do not promise that accounts or uploads cannot be identified through legal process. A property owner's or complainant's request does not itself entitle them to another user's email, source coordinates or account records. Where practicable and lawful, we explain an affected disclosure to the user; restrictions or urgent safety concerns may prevent notice.

Security and retention

We use access restrictions and other technical and organisational safeguards appropriate to the service, but no system is completely secure. Keep account access private and contact us about suspected exposure. We assess incidents and make notifications required by law.

Information is kept while reasonably needed to provide Slapz, handle requests or meet security, dispute-handling and legal obligations. Account information, acceptance history and contributions are subject to account deletion. Shared contributions may be anonymised; limited safety records and deletion receipts may remain for justified purposes.

Backup copies may remain after deletion until removed through backup management. They are not active public profiles. If a backup is restored, deletion decisions must be reapplied before deleted material is made available again. Contact us about applicable retention arrangements; backups do not justify keeping deleted profiles publicly visible.

Access, correction and deletion

Request access to or correction of your information, or delete your account in the app or by email. Use your account email where possible. We may request proportionate information to verify identity or authority, but do not ask you to send passwords or verification codes. If a lawful exception limits a request, we explain the reason where permitted. Shared trails may remain with your identity removed.

Privacy complaints

Email streetslapz@gmail.com with the concern, affected account or content identifier and a safe reply address. Avoid unnecessary sensitive material. We assess complaints, seek relevant information and explain the outcome or next steps. If more time is needed, we will let you know. You may contact the Office of the Australian Information Commissioner or another competent regulator where its jurisdiction applies. This process does not limit statutory rights or deadlines.

This website and changes

The public website has no advertising trackers or marketing analytics. Hosting providers process connection information and security logs to deliver and protect it. Administrator sign-in uses session storage; public policies do not require an account. Material handling changes will be reflected in a new dated policy and communicated where required. Optional permissions and analytics choices remain separate from acknowledgement of this notice.

Contact

Slapz is operated by Alex Pavel. Contact streetslapz@gmail.com for support, privacy or safety concerns.