Privacy Policy

Last updated: August 21, 2026

1. Introduction

This Privacy Policy explains how Post Something collects, uses, shares, and protects personal information when you use the service or take part in a challenge.

Post Something is operated from England and is the controller of the personal information described in this policy. Questions and privacy requests can be sent to [email protected].

2. Information We Collect

We may collect the following information:

• Account information: your name, email address, profile image, login-provider identifier, and other basic account information supplied by your chosen sign-in provider.
• Challenge information: your product name, product link, app logo where supplied, registered social handles, country of residence, challenge dates, status, progress, and outcome.
• Public post and review information: links to posts from your registered public accounts, public post content and metadata, publication times, qualifying-post records, review results, and notes relating to challenge decisions or disputes.
• Payment information: Stripe processes your payment details. We receive limited payment and billing information such as transaction identifiers, amount, currency, billing country, payment status, and refund status. We do not store your full card details.
• Communications and preferences: messages you send us, support and dispute correspondence, email preferences, reminder consent, and any optional permission to feature your app name and logo.
• Technical information: IP address, browser and device information, authentication events, essential cookie data, and security, diagnostic, and server logs generated when you use the service.

You must provide the account, challenge, eligibility, and payment information needed to enter a challenge. Without it, we cannot provide the service.

3. Where Information Comes From

We obtain personal information from:

• You, when you register, enter a challenge, contact us, or set preferences
• Your chosen sign-in provider, when you create or access your account
• Stripe, when it processes a payment or refund
• Publicly accessible posts and profile information from the social accounts you register
• Our hosting, authentication, database, and security providers when they generate operational logs

We inspect only public social content associated with the handles you submit. We do not ask for your social-platform passwords, log into those accounts as you, or access private posts.

4. How We Use Information

We use personal information to:

• Create, authenticate, secure, and administer your account
• Confirm eligibility and register your product and social accounts
• Process payments, cancellations, and refunds
• Operate the challenge and maintain your dashboard and progress
• Find and review qualifying public posts
• Identify failures, resolve disputes, and correct mistakes
• Send challenge, security, failure, cancellation, and refund messages
• Send optional signup reminders or promotional messages where permitted
• Feature an app name and logo in our marketing where separate permission has been given
• Prevent fraud, misuse, and security incidents
• Maintain, troubleshoot, and improve Post Something
• Meet legal, accounting, and regulatory obligations

5. Our Legal Bases

Under UK data protection law, we rely on different legal bases depending on why we use information:

• Contract: to create your account, take payment, run your challenge, check progress, communicate about the service, and issue refunds.
• Legitimate interests: to secure and improve the service, prevent abuse, maintain necessary records, resolve disputes, and understand basic service performance. We use this basis only where those interests are not overridden by your rights.
• Consent: for optional reminder or promotional emails where consent is required, and for optional use of your app name and logo in our marketing. You may withdraw consent at any time.
• Legal obligation: where information is required for tax, accounting, law-enforcement, regulatory, or other legal purposes.

6. How We Share Information

We do not sell or rent personal information. We share information only where needed with trusted providers that help us operate Post Something, including providers of:

• Payment and refund processing
• Website hosting, data storage, and security
• Account authentication
• Service and support communications

These providers receive only the information reasonably necessary to perform their services and process it on our behalf or under their own applicable terms and privacy policies. We may also disclose information where required by law, to protect legal rights or safety, to investigate misuse, or in connection with a genuine sale or transfer of the service. If we rely on consent for another disclosure, we will ask first.

7. International Transfers

Some service providers may process personal information outside the United Kingdom. Where data protection law requires it, we use providers and transfer mechanisms intended to provide an appropriate level of protection, such as recognised adequacy arrangements or contractual safeguards.

8. Data Retention

We keep account information while your account remains active. We ordinarily retain challenge records for up to 12 months after a challenge is completed, cancelled, or failed so that we can handle disputes, prevent abuse, and maintain accurate refund records.

If you ask us to delete your account, we will delete or anonymise personal information that we no longer need, normally within 30 days. We may retain limited information for longer where required for tax, accounting, fraud prevention, legal claims, active disputes, or other legal obligations. Provider backups and security logs may take additional time to expire through their normal retention cycles.

Marketing permissions are kept until withdrawn or no longer needed. If you opt out of emails, we may retain a minimal suppression record so that we remember not to contact you.

9. Security

We use reasonable technical and organisational measures intended to protect personal information, including access controls and established service providers. No online service or storage system can guarantee absolute security.

10. Emails and Marketing Permission

We send necessary service messages about your account, challenge, security, failure decisions, cancellations, and refunds.

Optional signup reminders or promotional messages will be sent only where permitted. You may opt out at any time by using the instructions in the message or emailing us.

Permission to feature your app name and logo is separate and optional. You may withdraw it by contacting us. We will stop new uses and take reasonable steps to remove the name and logo from marketing materials we control.

11. Cookies and Tracking

We use essential cookies and similar storage needed for login, authentication, security, and core service functionality. Our service providers may also use essential technologies when providing their parts of the service.

We do not currently use advertising cookies or third-party behavioural analytics that track you across other websites. If this changes, we will update this policy and obtain consent where required.

12. Your Rights

Depending on where you live and the circumstances, you may have the right to:

• Request access to and a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of information
• Restrict or object to certain uses
• Receive certain information in a portable format
• Withdraw consent at any time
• Opt out of direct marketing
• Complain to a data protection authority

These rights are not absolute and may depend on the legal basis and reason we hold the information. To exercise a right, email us. We may need to verify your identity before completing the request.

If you are in the UK, you may complain to the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first.

13. Automated Decisions

Software may assist us in finding posts or reviewing challenge progress, but we do not intend to make solely automated decisions that produce legal or similarly significant effects. You may contact us if you believe a challenge decision is wrong.

14. Children

Post Something is for people aged 18 and over. We do not knowingly offer challenges to or collect personal information from children.

15. Changes to This Policy

We may update this Privacy Policy as the service or law changes. We will update the date above and provide additional notice where a change is material or where law requires it.

16. Contact

Questions, privacy requests, and objections can be sent to [email protected].