Privacy policy
Last updated: 18 October 2026
This explains what data CreateSpreadsheet.lol handles. We keep it to the minimum the Service needs.
What you give us
When you create a catalog we store: the address you choose, an optional catalog name, and the shopping agents and affiliate codes you enter. This information is public: it is shown on your catalog page and in its link addresses. We also store a one-way hash of your private edit link so we can recognize it; the link itself is not stored.
Abuse prevention
To limit spam we derive an anonymous identifier from your IP address (a keyed hash, shortened) and store it with the catalog. We do not store your IP address itself, and the identifier cannot be turned back into it.
Cookies and local storage
We store your language choice in your browser (local storage and a functional cookie) and remember that you saw the tutorial. If you create a catalog, your private edit link is also remembered in this browser (local storage), and a functional cookie holds it for 10 minutes right after creation so it can be shown to you. We do not use advertising or tracking cookies.
Anonymous statistics
We keep simple first-party statistics about catalog pages: page views, opens of the Buy window, clicks on a shopping agent, the referring website (host name only) and your country. To count unique visitors we derive an anonymous identifier from your IP address and browser that changes every day and cannot be reversed. We do not store your IP address, we do not use cookies for this and we do not track you across days or other websites. We also use Vercel Web Analytics (our hosting provider), which measures page views in aggregate without cookies. Statistics are visible only to the Service owner.
Admin access alerts
If you try to sign in to the Service owner's admin area with Discord, your Discord ID, name and e-mail address, your IP address and browser are sent as a security alert to a private Discord channel of the Service owner when access is denied. We do not store them in our database. Regular visitors of catalogs are not affected.
Service providers
The Service is hosted by Vercel and uses Supabase as its database. They process technical request data (such as IP address and browser details) on our behalf to run the Service.
Leaving the Service
Buttons in catalogs take you to third-party shopping agents. Their own privacy policies and cookies (including affiliate tracking cookies) apply there.
Retention and your rights
Catalogs are kept until they are removed. If you are in the EU/EEA you have the usual data-protection rights, including the right to complain to your supervisory authority.
Children
The Service is not directed at children.
Changes
We may update this policy and will change the date above when we do.