Privacy Policy

Who operates Sprayline

Sprayline operates the Sprayline website and mobile application. Privacy questions and requests can be sent to spraylinesupport.wwuos@simplelogin.com.

Information we collect

• Account information: email address, username, password hash, account role, policy acceptance time, and account creation time.
• Gym activity: gym memberships and roles, route descriptions, grades, hold positions, labels, setter attribution, sends, and invitation redemption records.
• Uploaded content: wall images and related upload attribution.
• Flags and support: route flags, selected reasons, optional descriptions, and messages you send to support.
• Technical and security data: IP address and request details processed in server logs and rate-limit counters. The website uses session and CSRF cookies; the mobile app stores its authentication token in platform secure storage. These are used for login and security, not advertising. Sprayline does not use advertising SDKs or third-party analytics.

How we use information

We use this information to authenticate accounts, provide gym and route features, display appropriate attribution, review route flags, support users, secure the service, and comply with legal obligations. We do not sell personal information and Sprayline has no ads.

When information is shared

Usernames and gym content are visible to members of the relevant invited gym. Account email addresses are limited to that gym's administrators. We use infrastructure providers where needed to operate support and the service; they process data on our behalf. We may disclose information when legally required or when necessary to protect users, the public, or the service. We do not share data with advertisers.

Retention and account deletion

Account information is kept while your account is active. When you delete your account, Sprayline deletes your email, username, password hash, memberships, invite redemptions, personal sends, and active access. Gym-owned routes and wall images may remain so the shared gym history is not damaged; their attribution is changed to an anonymous deleted-user label. Flags you submitted may remain without a link to your account so gym administrators can complete their review. Residual copies may remain temporarily in restricted disaster-recovery backups until those backups are overwritten.

You can delete an account in the app or at sprayline.app/account-deletion. A sole gym administrator must first appoint another administrator so the gym is not left unmanaged.

Your choices and rights

You may request access to, correction of, or deletion of your personal information, and may object to or restrict certain processing where applicable. Contact us from the email address associated with your account. You may also complain to your local data-protection authority.

Age requirement

Sprayline is for people age 16 or older. If you are under the age at which you can agree to these terms independently where you live, you must have permission from a parent or legal guardian. We do not knowingly collect account data from children under 16. Contact us if you believe a child under 16 has an account.

Security and changes

We use measures such as encrypted transport, hashed passwords, access controls, and restricted authentication tokens. No online system is completely secure. We may update this policy; the effective date above identifies the current version, and we will provide any notice required by applicable law.