Privacy policy
Smashy is a free community site for Super Smash Bros. players. This page explains, in plain words, what we collect, why, who else is involved, and how you can delete it. We don't sell your data, and we don't show ads.
Who can use Smashy
Accounts are for people 13 and older. When you join we ask for your birthdate to check this; if you're under 13 you can still browse as a guest, but you can't make an account. If we learn that someone under 13 made an account, we delete it.
What we collect
- Sign-in: your email address (if you sign in with an email link) or your Discord account ID and email (if you sign in with Discord).
- Your birthdate: kept private. Nobody else sees it; we use it to check your age and to apply teen protections.
- Your profile: your tag, @handle, the games you play, your mains, your city, bio and crew or college if you add them, whether you're looking for a doubles partner, and your profile picture if you upload one (checked automatically, like post photos).
- What you post: posts, replies, photos, reactions, likes, reposts, highlights, upvotes, comments on clips and sets, clips you share to Reels, and messages in Play lobbies.
- Who you follow, who you block or mute, the posts and clips you save, your muted words, and the scenes you join. Blocks, mutes, muted words and saved items are private to you.
- Poll votes: which choice you picked, so you can only vote once. Others only see the totals, never who voted for what.
- Events you're going to (“I'm going”): private. Others see how many people are going and which of the people you follow each other with (in your age group) are going. We use it to send you a reminder the day before.
- Invites: which invite code you joined with, and the codes you make for friends (so admins can see who invited whom during the beta).
- Your settings, like which notifications you want.
- Messages: your direct and group messages (text and photos) and reactions, kept until you or a moderator deletes them. Only the people in the chat can read them. Smashy staff look at a message only if someone in the chat reports it (the report includes the few messages before it). “Typing…” and “Seen” are sent live to the people in the chat and aren't stored.
- Your start.gg link, if you connect it: your start.gg player ID, tag and results, used to show your tournament history and sets. If you don't have a Smashy picture yet, we copy your start.gg profile picture (after the same safety check); you can change or remove it any time.
- Reports you send about posts, clips or chats, and moderators' decisions.
- Error reports: when a page breaks, we record the error message and the page address so we can fix it. They don't include your account or what you typed.
- On your device only: your theme choice and which Reels clips you've watched (so you see new ones first) are kept in your browser, not on our servers. We use one cookie to keep you signed in, and one to remember your age check while you join. No tracking or advertising cookies.
Teens (13 to 17)
- Teen accounts are always protected: you approve who follows you.
- Teens' profiles and posts are only visible to people who are signed in, never to guests or in link previews.
- Posts with phone numbers, emails or social handles are blocked for teens, to keep contact on Smashy.
- Teens can only message other teens (13 to 17), and adults only adults. Anyone you don't follow each other with can send one message request, which you can accept, delete or block.
- Every uploaded photo, in posts and in messages, is checked automatically before anyone can see it (see below).
Photos
When you add a photo to a post, we make a smaller copy and remove the hidden information inside the file (like camera details and the GPS location phone photos often include). The copy is checked by Google Cloud Vision's SafeSearch to block adult, suggestive or gory images; Google processes the image for that check. Photos in messages are kept private: only people in that chat get a link, and it expires after an hour. Post photos are stored with a long random file name. Like any image on the web, someone who has a photo's exact address can open it, so only post photos you're OK sharing.
Who else is involved
- Supabase stores Smashy's database, photos and sign-ins.
- Our hosting provider runs the website and keeps short technical logs (like errors).
- Discord, if you sign in with Discord.
- start.gg and parry.gg provide tournament, bracket and results information.
- Google Cloud Vision checks uploaded photos.
- YouTube plays YouTube Shorts in Reels (through its privacy-enhanced player). YouTube's use of data is covered by the Google Privacy Policy; by watching, you agree to the YouTube Terms of Service. Smashy uses YouTube API Services to find Shorts.
- Twitch plays Twitch clips and streams, under Twitch's own privacy policy.
These services only get what they need to do their job.
What's public
An adult's profile, posts, photos and highlights can be seen by anyone, including guests and search engines. A teen's are visible only to signed-in Smashy users. Your birthdate, email and reports are never public.
Getting a copy of your data
Go to Profile → Download my data for one file with everything Smashy keeps about your account.
Deleting your data
You can delete any post at any time. To delete your whole account and everything in it, go to Profile → Delete account. It happens right away. Scenes and rulesets you started stay up (other people use them) without your name, and clips you shared that were approved for Reels stay up without your name.
Questions
Write to smashy.help@gmail.com. If we change this policy in a meaningful way, we'll say so on Smashy first.