Privacy Policy

1. About Let’s Spill the Tea^® (LSTT)

Let’s Spill the Tea^® (“LSTT”) is an independently owned and operated platform for submitting and viewing short, anonymous text posts, such as secrets, gossip, confessions or humorous messages, for entertainment. It is developed and run by a single individual, referred to in this policy as “the platform owner”.

LSTT is designed around anonymity: there is no registration and no need to identify yourself. This policy explains what data the platform handles and how, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What We Collect, and What We Don’t

LSTT does not ask for personal data and does not try to identify its users. Specifically:

• No names, email addresses, accounts or logins are requested or stored.
• The platform does not set cookies, and does not record IP addresses or device information alongside submissions or reports.
• Submissions are checked automatically before they are saved. Any submission that appears to contain a phone number, email address, UK postcode or banned slur is rejected and not stored.

Like every website, LSTT relies on a hosting provider (see section 6) to deliver pages to your browser. To do this, the hosting provider necessarily processes technical connection information, such as your IP address and basic request details, and may hold it briefly in its own service logs for security and reliability. The platform owner does not use see or have access to this information, nor can identify visitors and does not combine it with submissions.

Automatic filters cannot catch everything, so please do not include anything that could identify you or anyone else.

3. What Is Stored

Accepted submissions are saved to a secure database hosted with MongoDB Atlas, so that content stays available for others to read and so the platform owner can review it for moderation. Each stored submission contains only:

• The anonymous text of the message.
• A timestamp of when it was saved, used to group and review content by week.
• A unique internal ID, generated automatically by the database. It is not linked to any person or device and is not shown on the site.

When you use the report button, a copy of the reported text and the time of the report are saved to a separate moderation list. Nothing about the person making the report is recorded.

Timestamps and IDs are not displayed on the site and are not connected to any user, session or device. Submissions are kept until the platform owner removes them, for example because they breach the Terms of Use. Reports are kept only for as long as they are needed for review.

4. Posts That Mention Other People

Submissions are anonymous for the person writing them, but a post could still refer to someone else. Please do not name or otherwise identify real people. If you believe a post identifies you or someone else, report it using the report button, or contact the platform owner (see section 8), and it will be reviewed and removed where appropriate.

5. Browser Storage

LSTT does not use cookies. It uses your browser’s session storage to hold a single temporary setting that controls the page transition animation. This setting stays in your browser, is never sent to the platform owner, and is cleared automatically when you close the tab.

You can clear browser storage at any time through your browser settings.

6. Where Data Is Hosted

LSTT uses the following service providers to run the platform:

• Render – website hosting, in Frankfurt, Germany.
• MongoDB Atlas – database hosting for submissions and reports, on Amazon Web Services in Frankfurt, Germany.
• GoDaddy – domain name registration and DNS.

Data is hosted within the European Economic Area, which the UK recognises as providing an adequate level of data protection. LSTT does not use any analytics, advertising or profiling services, and does not sell or share data with anyone else.

7. Security

• All connections to the site are encrypted using HTTPS.
• The site blocks third-party scripts, trackers and adverts by design.
• The database is password protected and only accepts connections from the platform’s hosting provider.
• Only the platform owner has access to stored submissions and reports, for moderation and filter improvement.

8. Your Rights and Contact

Because submissions are not linked to anyone, the platform owner cannot tell which posts were written by whom, and so cannot identify or retrieve data belonging to a particular person. You can still ask for any post to be reviewed or removed using the report button, or by contacting the platform owner at letsspillthetea@outlook.com.

If you are unhappy with how your data has been handled, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Legal Scope

LSTT is designed to keep personal data to an absolute minimum. It follows these UK GDPR principles:

• Data minimisation: Only anonymous text, a timestamp and an internal ID are stored.
• Privacy by design: The platform deliberately avoids accounts, cookies, tracking and analytics.
• Transparency: This policy explains how submissions are handled and stored.

10. Changes to This Policy

If LSTT adds features that involve personal data, such as user profiles, comments or analytics, this policy will be updated first, and appropriate consent mechanisms will be put in place in line with UK GDPR. The “last updated” date at the top of this page shows when it last changed.