Privacy Policy
Last updated: September 14, 2026
Creator Shout ("we", "us") is a link-in-bio platform where creators sell ad space on their pages. This policy explains what data we collect, why, how long we keep it, and what control you have over it. Privacy contact: virtualboy38@yahoo.com (subject "Privacy request").
1. Data we collect
- Account data: your name, email address, and password (stored securely by our authentication provider, Supabase). We never see your password.
- Profile data: display name, bio, page slug, avatar, and page content you create.
- Social connections: when you connect a social account (for example YouTube, Instagram, TikTok), we receive an access token and basic profile data from that platform, including your username and follower or subscriber count. We store the token only so we can refresh your verified follower count.
- Page analytics events: when someone visits a Creator Shout page, we record the page viewed, ad impressions and clicks, the referring page, device and browser type, and approximate location (country and state or region). The visitor's IP address is truncated before storage (the last part is removed), so we never store a full IP address and cannot identify a visitor from it alone.
- Payment data: processed by Stripe. We do not store card numbers.
- Support and reports: messages you send us, including privacy requests and mutual reports between creators and advertisers.
We do not collect sensitive categories of personal data (such as health, biometric, or precise geolocation data).
2. How we use it
- To operate your account, your public page, and ad placements.
- To display follower counts that are verified through your connected social accounts.
- To provide per-ad analytics to creators and advertisers (impressions, clicks, country and state level geography).
- To send transactional emails and push notifications (account alerts, renewal reminders, bulletin posts). We use Brevo for email.
- To prevent fraud, enforce our terms, and keep the platform safe.
3. Who we share it with
We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share limited data only with the services that run the platform:
- Supabase: authentication, database, and backend infrastructure.
- Vercel: website hosting and serverless functions.
- Stripe: payment processing.
- Brevo: transactional email delivery.
- Social platforms: only the OAuth data exchange you explicitly authorize when connecting an account.
- Kit (ConvertKit): only if you connect it yourself for an email capture block; that list lives in your own Kit account.
Creators and advertisers who receive analytics about their pages are data controllers of their visitors' data; Creator Shout processes it on their behalf under our Data Processing Addendum.
4. Cookies and local storage
We use first-party cookies and local storage only. We do not use third-party advertising trackers.
- cs_consent (cookie and local storage, 12 months): remembers your analytics consent choice from the consent banner.
- Supabase auth session (local storage, until you sign out): keeps you signed in.
- cs_ref (cookie and local storage, 30 days): stores a referral code if you arrived through someone's referral link.
- Workspace preferences (local storage): remembers back-office UI settings such as dismissed items.
5. Consent
On your first visit we show a consent banner. Analytics events are blocked until you accept; declining (or ignoring) the banner means no analytics data is collected from your visits. Account features that need you to stay signed in still work either way.
Re-opens the consent banner so you can change your choice at any time.
6. Data retention
- Raw analytics events: kept for 13 months, then aggregated into anonymous totals and the raw rows are deleted. Aggregated totals contain no personal data and may be kept longer.
- Account and profile data: kept while your account is active, deleted within 30 days of a verified deletion request.
- Backups: copies in routine backups are purged within 90 days.
- Social access tokens: deleted when you disconnect the account, or when you delete your Creator Shout account.
- Push subscriptions: deleted when you unsubscribe or delete your account.
- Referral cookie: expires after 30 days.
7. Deleting your data
Signed-in shortcut: Checking your sign-in status…
This permanently deletes your Creator Shout rows: your pages, social connections, push subscriptions, bulletin reads, dismissals, and comments. It cannot be undone.
You are not signed in here. Sign in to the back office first, then return to this page, or use the email option below.
Email option: email virtualboy38@yahoo.com from your account email with the subject "Delete my account". We will delete your account, profile, pages, and stored tokens within 30 days and confirm by email.
- Disconnect a social account: go to Integrations in your back office and click Disconnect. This removes the stored tokens and follower count for that platform. You can also revoke access from within the social platform itself (for example, your Google account permissions page).
8. Your rights
Depending on where you live (including the EU/UK under GDPR and California under CCPA), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your personal data (see section 7).
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time (use Cookie settings above; withdrawing does not affect prior lawful processing).
- Opt out of sale or sharing: we do not sell or share personal data as those terms are defined by law, so there is nothing to opt out of.
- Non-discrimination: we will not penalize you for exercising these rights.
To exercise any right, email virtualboy38@yahoo.com with the subject "Privacy request". We respond within 30 days (up to 45 for complex requests, as the law allows). We may need to verify your identity first.
9. Children
Creator Shout is for users 18 and older. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.
10. Changes to this policy
We will post any changes here and update the date above. If a change materially affects your rights, we will notify you by email or in the app before it takes effect. Continued use of the service after changes means you accept the updated policy.