Manna Driven Investments LLC, doing business as SPOOLED ("SPOOLED," "we," "our," or "us"), operates the SPOOLED platform at spooled.com and the SPOOLED mobile application (collectively, the "Platform"). This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have with respect to your information. By using the Platform, you agree to the practices described in this policy.
CONTENTS
1. Information We Collect 2. How We Use Your Information 3. Affiliate Tracking and Commerce Data 4. PSI System and Behavioral Data 5. How We Share Your Information 6. Third-Party Services and Integrations 7. Cookies and Tracking Technologies 8. Data Storage and Security 9. Data Retention 10. Your Rights and Choices 11. Children's Privacy (COPPA) 12. California Privacy Rights (CCPA/CPRA) 13. International Users 14. Changes to This Policy 15. Contact Us| Category | Specific data | When collected |
|---|---|---|
| Account credentials | Email address, password (stored as encrypted hash — we never store plaintext passwords) | Email/password registration |
| Profile information | Display name, username/handle, profile photo, bio | Registration and profile setup |
| OAuth profile data | Name and email address as authorized by you through Google or Apple sign-in | OAuth registration/login |
| Vehicle information | Year, make, model, trim, mileage, modifications installed, performance specifications, build photos | Garage profile creation and editing |
| User-generated content | Forum posts, replies, photos, how-to guides, comments, direct messages, race results, show and shine posts, Car vs. Car content | Ongoing Platform use |
| Mod and fitment data | Parts installed on your vehicles, installation dates, community fitment ratings and reviews | Garage and mod logging |
| Community activity | Communities joined, forum subscriptions, content saves | Ongoing Platform use |
| Communications | Messages sent through direct messaging, support emails sent to thespooledapp@gmail.com | Messaging and support interactions |
| Onboarding responses | Vehicle preferences and interests indicated during new user onboarding | First-time sign-up flow |
| Referral information | Your unique referral code (derived from your handle), referral count, and the identity of the user who referred you (if any) | Account creation |
| Category | Specific data | Purpose |
|---|---|---|
| Device information | Device type, operating system version, unique device identifiers, browser type and version | Platform compatibility, security |
| Network information | IP address, approximate geographic location (city/region, not precise GPS), ISP | Security, fraud prevention, regional features |
| Usage data | Pages and screens viewed, features used, time spent, scroll depth, search queries entered, forum threads opened, mod detail pages viewed | Platform improvement, personalization |
| Interaction data | Posts liked, content saved, communities joined, users followed, guides completed, affiliate links clicked | PSI score calculation, affiliate attribution, feed personalization |
| Session data | Login timestamps, session duration, authentication events | Security, new-user detection for onboarding |
| Referral data | URL parameters including "ref" affiliate attribution codes present when you access a page; referral source code when you arrive via a user referral link (/join/ URL) | Affiliate revenue attribution; user referral tracking |
When you connect third-party services or authenticate through them, we may receive information from those services as authorized by you:
We use the information we collect for the following purposes:
When you click a product link on the Platform that carries an affiliate attribution, the following occurs: (a) a cookie or similar tracking technology may be set by SPOOLED or our affiliate network partner to record the click event; (b) a "ref" parameter identifying the originating content and creator may be appended to or embedded in the destination URL; (c) if you subsequently make a purchase at the retailer, the retailer reports the transaction to the affiliate network, which matches it to the recorded click event and reports a conversion back to SPOOLED.
This tracking typically persists for a cookie window of 30 to 90 days depending on the affiliate network and retailer. If you block cookies or use privacy features that prevent tracking, affiliate attribution may not function and commissions may not be correctly allocated.
Purchase confirmation data we receive from affiliate networks (order ID, purchase amount, attribution code) is used solely to calculate and validate affiliate commissions. We do not receive or store your name, payment method, shipping address, or other personal information from third-party retailers in connection with affiliate purchases.
If you participate in the SPOOLED affiliate program as a content creator, we maintain records of your affiliate click counts, conversion events, and calculated earnings. This data is accessible to you through your earnings dashboard and is used to calculate payouts. Earnings data is retained for a minimum of seven years for tax and accounting compliance purposes.
We are committed to compliance with FTC guidelines on endorsements and testimonials. Affiliate links on the Platform are identified with appropriate disclosures. Content creators who earn commissions through affiliate links are subject to SPOOLED's affiliate disclosure requirements as a condition of program participation.
The PSI reputation system processes behavioral signals from your Platform activity — including content you post, interactions you receive, guides you complete, forum contributions, and other engagement metrics — to calculate a numeric reputation score. This processing is automated and algorithmic.
PSI score data and the underlying activity signals used to calculate it are retained for as long as your account is active. Aggregated, anonymized PSI and engagement data may be used to improve the Platform's algorithms and community features. Individual PSI scores are not sold or shared with third parties except as needed to display leaderboard rankings within the Platform.
You may request information about the general categories of signals used to calculate PSI scores by contacting us. We do not provide granular breakdowns of individual score calculations, as this information is used in part to protect against gaming and manipulation of the system.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share your information in the following circumstances:
Content you post publicly on the Platform — including forum posts, how-to guides, build profiles, Garage information, comments, PSI tier, and profile information — is visible to all Platform users and may be indexed by search engines. You control what you make public.
We share information with trusted third-party service providers who assist us in operating the Platform. These include:
| Provider | Service | Data shared |
|---|---|---|
| Supabase | Database, authentication, and storage infrastructure | All Platform data including user accounts, content, and interaction data |
| Vercel | Web hosting and deployment | Web request logs, IP addresses |
| Expo / EAS | Mobile app build and distribution | App usage data, device identifiers |
| Apple | iOS App Store distribution, Sign In with Apple | App analytics (if enabled), OAuth profile data |
| Sign In with Google | OAuth profile data | |
| Affiliate networks (Skimlinks, Impact.com, ShareASale, others) | Affiliate tracking and commission calculation | Click events, attribution codes, anonymized purchase confirmation data |
All service providers are contractually required to use your information only as necessary to provide their services to us, are bound by confidentiality obligations, and may not use your data for their own marketing purposes.
Forum Legends have access to moderation tools that allow them to view flagged content and certain activity within their assigned Forums in order to perform their moderation duties. They do not have access to your private messages, email address, or account credentials.
We may disclose your information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or enforceable governmental request; (b) enforce these Terms or our Privacy Policy; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of SPOOLED, our users, or the public.
If Manna Driven Investments LLC is involved in a merger, acquisition, asset sale, financing, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will provide notice through the Platform or by email before your information is transferred and becomes subject to a different privacy policy, to the extent required by applicable law.
We may share your information for any other purpose with your explicit consent.
The Platform may contain links to third-party websites, products, or services including automotive retailers, parts manufacturers, and brand pages operated by Brand Partners. When you leave the Platform by clicking an affiliate or external link, you are subject to the privacy practices of the destination site, not this Privacy Policy. We encourage you to review the privacy policies of any third-party services before providing them with your information.
Brand Partners who maintain brand pages on SPOOLED do not receive your personal information through the Platform without your explicit consent. If you contact a Brand Partner directly through a link on their brand page, your interaction is governed by that brand's privacy policy.
We and our service providers use cookies, localStorage, session storage, pixel tags, and similar technologies to operate the Platform and track affiliate activity. These technologies serve the following purposes:
You can control cookies through your browser or device settings. However, disabling essential cookies will prevent you from using the Platform, and disabling affiliate tracking cookies will prevent affiliate commissions from being correctly attributed. Our Platform does not currently respond to "Do Not Track" signals, but we honor opt-out requests as described in Section 10.
All Platform data is stored on Supabase's infrastructure, which utilizes industry-standard security measures including encryption of data in transit (TLS) and at rest, access controls, and regular security assessments. Our Platform's backend is hosted in the United States.
We implement row-level security policies on our database to ensure that users can only access data they are authorized to view. Authentication credentials are handled by Supabase Auth and are never stored in plaintext.
Despite our security measures, no electronic transmission or storage system is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. If you believe your account has been compromised, contact us immediately at thespooledapp@gmail.com.
We retain your personal information for as long as your account is active or as needed to provide Platform services. Specific retention periods by data category:
| Data type | Retention period |
|---|---|
| Account information (email, handle, profile) | Duration of account + 30 days post-deletion |
| Public content (posts, guides, forum threads, garage profiles) | Duration of account; deleted or anonymized within 30 days of account deletion request |
| Direct messages | Duration of account; deleted within 30 days of account deletion request |
| PSI activity logs | Duration of account |
| Affiliate click and earnings data | Minimum 7 years for tax/accounting compliance |
| Referral attribution data (referral code, referred_by, referral count) | Duration of account; anonymized within 30 days of account deletion request |
| Security and fraud prevention logs | Up to 2 years |
| Aggregated, anonymized analytics | Indefinitely (no personal data retained) |
| Legal hold data | As required by applicable law or legal process |
When you request account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law, to resolve disputes, enforce our agreements, or maintain affiliate earnings records.
You may request a copy of the personal information we hold about you by contacting us at thespooledapp@gmail.com. We will respond within 30 days.
You can update your display name, handle, profile photo, and other profile information at any time through the Platform's settings. For corrections to information you cannot update yourself, contact us.
You may request deletion of your account and associated personal data by emailing thespooledapp@gmail.com with subject line "Account Deletion Request" from the email address associated with your account. We will process your request within 30 days, subject to the retention exceptions described in Section 9. Note that deletion of your account will result in loss of your PSI score, earned reputation, and any unpaid affiliate earnings below the payout threshold — these cannot be recovered.
You can manage push notification preferences in the Platform's settings at any time. You may not opt out of transactional/security emails (such as password reset and email verification) while you maintain an account, as these are necessary for account security.
You may opt out of affiliate tracking cookies by adjusting your browser or device cookie settings, or by using browser privacy features. Note that opting out does not remove your ability to click product links — it only prevents commission attribution. Our affiliate network partners may also offer their own opt-out mechanisms.
Where we process your data based on your consent, you may withdraw that consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. The Platform contains content related to automotive modifications and performance driving that is not appropriate for young children.
If you are a parent or guardian and believe that your child under the age of 13 has created an account or provided us with personal information, please contact us immediately at thespooledapp@gmail.com. We will take prompt steps to delete the account and all associated personal information. We comply with the Children's Online Privacy Protection Act (COPPA) and will not knowingly retain personal information from children under 13.
For users between the ages of 13 and 18, we recommend parental guidance given the nature of automotive content on the Platform, including content related to performance driving and vehicle modifications.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
To exercise your California privacy rights, contact us at thespooledapp@gmail.com with subject line "California Privacy Request." We will verify your identity before processing your request and respond within 45 days, with an extension of up to an additional 45 days where reasonably necessary.
Categories of personal information we have collected in the preceding 12 months: identifiers; personal records; commercial information (affiliate attribution and earnings); internet or other electronic network activity; geolocation data (city/region level only); audio and visual information (photos you upload); professional or employment-related information (vehicle modifications you perform); and inferences drawn from the above to create a user profile (PSI score).
The Platform is operated from the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer and processing. If you are located in the European Economic Area, United Kingdom, or Switzerland, please note that we transfer data to the United States on the basis of your consent provided when you create an account.
We may update this Privacy Policy from time to time as the Platform evolves and as legal requirements change. When we make material changes, we will notify you by posting a notice on the Platform, updating the "Last updated" date at the top of this page, and/or by email to the address associated with your account. Your continued use of the Platform after any changes take effect constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must stop using the Platform.
For questions, concerns, data access requests, or to exercise any of your privacy rights, contact us at:
Manna Driven Investments LLC, doing business as SPOOLED
thespooledapp@gmail.com
Vermont, United States
We will respond to privacy inquiries within 30 days.