← Back to CringeWall

Privacy Policy

Effective date: July 2026 — Version 1.1

Data controller: Sulu Estate LLC (“InfiniApps”), operator of CringeWall.

1. Summary

CringeWall is a public canvas. Anything you post — your pin text, any image, any link, the position you place it at, and your display name — is public by design and visible to anyone, including people without an account.

Beyond that, we collect the minimum needed to run the Platform: an email address to identify your account, the content you create, basic technical data, and anything optional you choose to add to your profile. We do not sell your personal data, and we do not use it for advertising or profiling.

2. What We Collect

Account data. Your email address and an account identifier. If you sign in with Google, we receive your email address and basic profile information from Google; we never receive your Google password.

Profile data (optional, provided by you). Username, display name, avatar image, bio, a link, gender, mood, and a free-text location such as a city or country. All of these are optional and all are public. You may edit or clear them at any time.

Content you create. Pins (text, images, links, canvas coordinates, chosen style), votes, saved pins, follows, world chat messages, and direct messages. Direct messages are private between participants but are not end-to-end encrypted — they are stored on our systems and may be accessed by us where necessary for moderation, safety, legal compliance, or technical support.

Legal and safety records. When you accept our Terms we record the date, the version accepted, and your IP address, as evidence of consent and age confirmation. We also record moderation actions such as reports, warnings, and bans.

Location. We do not collect precise GPS location. If you choose to add a location to your profile, we store the text you enter and may derive an approximate country and city from it, which may be shown publicly. You can turn location sharing off in your profile.

Technical data. Standard server logs held by our hosting provider (including IP address, browser type, and pages requested), a randomly generated session identifier stored in your browser, and basic usage events such as which parts of the app were opened. Where an error occurs, our error monitoring may record diagnostic information including the page, browser, and error details.

Push notifications (optional). If you enable them, we store the push subscription details issued by your browser so we can deliver notifications. You can revoke this at any time in your browser or device settings.

Payment data. The Platform is currently free. We do not collect or store payment card details. If paid features are introduced, payments would be handled by a third-party payment processor and we would update this policy first.

3. How We Use It

  • To create and operate your account and display your content
  • To run core features: the canvas, map, chat, messages, follows, votes, and notifications
  • To keep the Platform safe: moderation, spam and abuse prevention, rate limiting, and enforcing our Terms
  • To diagnose faults, monitor errors, and improve performance and reliability
  • To comply with legal obligations and respond to lawful requests

We do not use your data for behavioural advertising, and we do not sell or rent it.

4. Legal Bases (UK / EU users)

  • Contract — to provide the Platform you asked us to provide
  • Legitimate interests — to keep the Platform secure, prevent abuse, and improve reliability, balanced against your rights
  • Consent — for optional features you switch on, such as push notifications or sharing a location. You may withdraw consent at any time
  • Legal obligation — where we must retain or disclose data by law, including reporting child sexual abuse material

5. Who We Share It With

We use a small number of service providers (“processors”) who handle data on our behalf under contract. We do not sell data to anyone.

  • Supabase — database, authentication, and file storage
  • Vercel — application hosting, content delivery, and server logs
  • Cloudinary — hosting and delivery of uploaded images
  • Sentry — error monitoring and diagnostics
  • Google — only if you choose to sign in with Google
  • Push delivery services operated by your browser or device vendor, if you enable notifications

We may also disclose data where required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or the public.

6. International Transfers

CringeWall is operated from, and its data is primarily stored in, the United States. If you access the Platform from outside the United States, your data will be transferred to and processed there, and in other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. By using the Platform you understand that your data will be processed in these locations.

7. Retention

We keep account and profile data for as long as your account exists. Content you post is retained until you delete it or we remove it under our Terms.

When you delete your account, we delete or anonymise personal data associated with it within a reasonable period, except where we must retain it: consent and age-verification records, moderation and ban records (to prevent ban evasion), and anything required for legal claims or legal obligations. Backups and server logs are held for a limited period on a rolling basis and are overwritten in the ordinary course.

Content already shared, screenshotted, or indexed by third parties is outside our control and cannot be recalled by us.

8. Your Rights

Depending on where you live, you may have the right to: access a copy of your data; correct inaccurate data; delete your data; restrict or object to processing; withdraw consent; receive your data in a portable format; and complain to your local data protection authority.

If you are in California, you may also have the right to know what personal information is collected, to request deletion, and not to receive discriminatory treatment for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any right, contact infiniappsofficial@gmail.com. We may need to verify your identity before acting. We aim to respond within one month.

9. Cookies & Local Storage

We do not use advertising or third-party tracking cookies.

We use strictly necessary cookies to keep you signed in, and we store a small amount of data in your browser to make the app work: your last-used tab, a randomly generated session identifier, whether you have seen the intro, your “reduce motion” preference, and any unposted pin you wrote before signing in. You can clear all of this at any time by clearing site data in your browser, though doing so will sign you out.

10. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections, row-level database access controls, credentials handled by our authentication provider, and restricted administrative access.

No online service can be guaranteed completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities where required by law.

11. Children

CringeWall is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a minor has provided us with personal data, contact infiniappsofficial@gmail.com and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will make reasonable efforts to notify you in the Platform before they take effect. The effective date at the top of this page always reflects the current version.

13. Contact

Privacy questions, data requests, and complaints: infiniappsofficial@gmail.com