Privacy Policy

• Accounts: your email, username, display name, account preferences, and identifiers received when you sign in with Google or Discord. PHOOM uses these provider identifiers to recognize your account. PHOOM does not receive your Google or Discord password.
• Creator content: page text, links, images, files, credits, schedules, and settings you provide.
• Messages and submissions: inquiry and commission details, contact information, attachments, guestbook entries, and support correspondence that you submit.
• Waitlist: the email address you provide and signup information needed to manage launch notifications.
• Subscriptions: plan, billing status, and payment-provider identifiers. Stripe processes payment details; PHOOM does not store your full payment-card number.
• Technical information: request and security logs may include IP address, browser or device information, and request timing. With analytics permission, PHOOM also records page visits and interactions, referring sites, campaign parameters, and a pseudonymous visitor identifier.
• Referrals: referral codes and account attribution when a signup follows a referral link or an eligible account supplies a code.

Published pages, creator-selected contact details, credits, and public guestbook entries can be viewed and copied by others. Search engines may index published pages. Only share information and files you have permission to publish.

Inquiries and commission requests, including the contact details and attachments you submit, are available to the receiving creator. They may reply through their own email service. Do not submit information you do not want that creator to receive.

Inquiries, commission requests, and guestbook entries that match abuse filters may be held and reviewed by PHOOM staff before they are delivered. Staff may decline to deliver a held message.

Creators may receive page and interaction statistics. A typed email address is contact information, not proof of account identity. Public account attribution uses an authenticated account where that feature is available.

Unpublished content is not listed as a published page. However, files delivered through shareable media URLs should not be treated as confidential storage. A recipient may retain copies of content or messages they have already received.

• Provide accounts, host creator pages, and deliver the messages and features you request.
• Manage subscriptions, billing, referrals, and launch notifications.
• Respond to support and privacy requests and send service-related notices.
• Understand page and feature usage when you allow analytics.
• Prevent abuse, investigate errors, protect accounts, and meet applicable legal obligations.

Where data-protection law requires a legal basis, processing depends on the purpose: providing the service you request, your consent for optional analytics, legitimate interests such as security and support, or legal obligations. Your available rights depend on where you live and the processing involved.

PHOOM uses browser cookies and local storage for different purposes:

• Service and security: sign-in sessions, request protection, and recovery from loading errors. Blocking required storage may prevent sign-in or other requested features from working.
• Preferences: your theme and analytics choice. The theme cookie can last up to one year. Local preferences remain until replaced or cleared in your browser.
• Optional analytics: PHOOM page, showcase, link, and commission-interaction tracking and Vercel Web Analytics run only after you allow analytics. PHOOM's phoom_vid cookie can last up to one year and distinguishes visits using a pseudonymous identifier.
• Referral attribution: following a referral link may set a phoom_ref cookie for up to 180 days to connect a later signup with the referral. This is separate from the optional analytics choice.

You can use PHOOM without allowing analytics. Reopen Cookie settings below to change your choice. Rejecting analytics stops future optional tracking and removes PHOOM's visitor cookie from this browser. It does not erase events already received or control independently operated third-party embeds. Choices apply to this browser and site; another device or domain may ask again.

You can also clear or block cookies and site storage in your browser, including referral attribution and saved preferences. Essential security and service processing continue regardless of your analytics choice.

PHOOM uses providers to operate the service, including Vercel for hosting and optional web analytics, Neon for databases, UploadThing for uploads and file delivery, Stripe for payments, Resend for service email, and Cloudflare for delivery or security services. Google and Discord process sign-in through their own services. Support email is handled through our email provider.

Information is shared with the providers needed for the relevant function. It may also be disclosed when required by law, to address abuse or protect rights and safety, or as part of a business transfer. PHOOM does not sell your personal information.

Creators may include content from services such as YouTube, Twitch, Spotify, Apple Music, or other supported providers. Loading an embed or following an external link can send information, including your IP address and browser details, to that provider. Its own privacy policy and storage practices apply.

Some embeds load automatically when a creator page opens, before you press play. PHOOM's analytics controls do not block a third party's embedded player or website. Browser privacy controls or content blockers may offer additional restrictions.

Account and creator content are kept while needed to provide the service. Retention also depends on the type of information, support needs, security investigations, billing obligations, and applicable law.

To request account or other data deletion, contact privacy@phoom.page. Deletion requests are reviewed and processed through support; sending a request does not instantly remove an account. We may need to verify ownership and explain any information that must be retained.

Removing active records does not immediately remove every backup, provider log, cached copy, or copy held by a message recipient. Backup and provider retention follow the applicable operational schedules. Ask us for the retention information relevant to your request. Billing or security records may need to remain for legal or safety reasons.

Depending on applicable law, you may be able to request access, correction, deletion, a copy of your information, restriction of processing, or to object to certain uses. You can withdraw optional analytics permission at any time without affecting processing that occurred before withdrawal. You may also have the right to complain to your local data-protection authority.

You can download a copy of your account data from Settings in your dashboard. For other requests, or if the download does not work, contact privacy@phoom.page with the request and enough context to locate the relevant account or submission. Do not send passwords or payment-card details. We may request proportionate identity verification before disclosing or changing private information.

PHOOM uses account authentication and access controls to limit access to private information. Providers also operate infrastructure security controls. No website or storage system can guarantee absolute security.

PHOOM and its providers may process information in countries other than your own, where privacy laws may differ. Contact us if you need information about the providers or transfer arrangements relevant to your data.

PHOOM is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

Changes to this policy will be reflected in the date above. Significant changes may also be communicated through the service or by email where appropriate.

For questions about this policy or your information, contact privacy@phoom.page. For general product help, visit Support.