Privacy Policy

1. Anonymity and Data Storage at Let’s Spill the Tea™ (LSTT)

Let’s Spill the Tea™ (“LSTT”) is an independently owned and operated platform created for the anonymous submission and viewing of short text-based content, proclaimed as including secrets, gossip, confessions, or humorous messages for entertainment. It is developed and managed by a single individual, referred to in this policy as “the platform owner.”

The platform is designed with anonymity in mind and as such requires no registration or need to publicly identify. This policy outlines how the platform handles data in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable privacy law.

2. Data Collection and User Privacy

LSTT does not collect personal data or attempt to identify users. Specifically:

• No names, email addresses, accounts, or logins are requested or stored.
• No IP addresses, cookies, or device data are collected or logged.
• All submissions are automatically filtered prior to storage to block harmful language and remove any personally identifiable information (PII).

Submissions remain anonymous throughout and are not linked to individuals.

3. Storage of Submissions

Submissions are saved to a secure, persistent database - hosted via MongoDB Atlas. This database means content remains available overtime for users to interact with, and allows the platform owner to periodically review content for moderation purposes.

Each submission includes:

• The anonymous text message,
• A timestamp, used solely to group and review content by week.
• A randomly assigned reference number, that's non-identifying and unlinked to a device or user.

These times stamps do not link any user, session, or identifying data, and are not visible on the site. Their sole purpose is to assist in the removal of inappropriate content that may bypass filters.

Only the platform owner has access to the database, which is secured and not connected to any external analytics, advertising, or profiling systems.

4. Use of Local Storage

To support the entertainment features and interactive elements associated with the platform, Lets Spill the Tea uses browser-based local storage. This includes:

• A visit counter (e.g., how many times a user has visited)
• A page key tracker (e.g., to access pages following a set of conditions)

These values are stored only in the user's browser. They are not transmitted, collected, or accessible to the platform owner, ad are not used to track or profile individuals.

Visitors have full control over this data - they may delete, reset, or manage local storage via their browser settings at any time. The platform owner has no access or visibility into this information.

5. Security and Accessibility

• All data connections are encrypted (HTTPS).
• No third-party tracking, advertising, or cookies are used.
• Access to submission data is strictly limited to the platform owner for filter improvement and moderation purposes.
• Submissions may be removed manually if they contain harmful or identifying material.

6. Moderation and Database use

Each submission is assigned a random, non-identifying reference number by our database. This reference ID is displayed publicly alongside submissions to support anonymous reporting and moderation. These IDs are not linked to any individual or device and serve only as a lookup tool for the platform owner.

7. Legal Compliance and Scope

LSTT is designed to operate outside the scope of most GDPR obligations, as it does not collect, process, or store personal data. Nonetheless, the platform is built in accordance with the following GDPR principles:

• Data minimisation: Only anonymous unlinked content is stored.
• Privacy by design: The platform architecture deliberately avoids personal data collection.
• Transparency: Users are clearly informed about how submissions are handled and stored.

8. Future Developments

If LSTT introduces new features in the future that involve the collection or processing of personal data - such as user profiles, comment functionality, or analytics tracking - this Privacy Policy will be updated accordingly. In such cases, appropriate consent mechanisms will be implemented in line with UK GDPR standards.

The platform will continue to uphold its commitment to transparency, privacy protection, and user anonymity.