Effective October 24, 2026
10-20 Labs LLC operates Va Squishy Drops and SquishyDrops. This policy explains the information used to provide the website, store sightings, account features, community discussions, and notifications.
Information you provide
- Account details: your username, email address, password hash, verification status, and account preferences. Passwords are stored as hashes, not readable passwords.
- Community content: sightings, status updates, comments, chat messages, replies, mentions, reactions, and photos you choose to upload.
- Profile and preferences: your avatar, followed stores, notification choices, and account changes.
Location and optional arrival features
The app uses location permission to help you browse nearby stores and check that a sighting is submitted near the relevant store. A sighting request includes a location sample, its accuracy, capture time, and location-source information. Location is checked on the server. An approximate report-origin location and area description may be retained for admin moderation. These report-origin details are not shown to other collectors.
You can separately enable arrival reminders and, when offered, arrival verification sharing. Reminders can use background location permission. Arrival verification sharing records an arrival at a store only after you choose that option. Turning on reminders does not automatically permit sighting updates after you leave a store.
You can change location permission in iPhone Settings and disable the optional arrival features in the app. A saved home area is used by the app to filter browsing.
What other collectors can see
Sightings appear as Anonymous to other collectors. This does not make the account anonymous to the service operator: authorized admins can identify the account behind a sighting to moderate abuse and inaccurate reports.
Comments, replies, mentions, reactions, and Squishy Chat are connected to your username. Uploaded community photos may be visible to other signed-in collectors. Do not post information or images you do not want that audience to see.
Device, notification, and service information
When you enable push notifications, the service stores an Apple device push token and your notification preferences so it can deliver relevant alerts. Requests also generate service information such as IP-based rate-limit records, session records, delivery results, and account activity used for security, troubleshooting, and administration.
The website stores your choice to dismiss the iPhone app suggestion in your browser. This website does not include advertising trackers. Hosting and email providers may process ordinary connection and delivery information needed to operate the service.
How the information is used
Information is used to create and secure accounts, verify email and location, publish community updates, deliver chosen alerts, support users, moderate content, prevent abuse, and maintain the service. Account details and precise location samples are not displayed in the public store directory.
Service providers and external links
Hosting, database, email, and Apple push notification services process the information needed for their roles. Apple Maps provides mapping and directions. If you follow a retailer, map, community, or App Store link, that destination’s privacy practices apply. We may disclose information when required by law or when reasonably necessary to protect the service and its users.
Retention
Accounts and preferences remain while the account is active. The service’s scheduled cleanup removes older sighting history and comments, generally after seven days once applicable sightings have expired. Squishy Chat generally retains seven days of messages and keeps at least the ten newest messages. Moderation, security, delivery records, and backups may have different retention periods. Deletion from active records does not mean a copy disappears immediately from every backup or another person’s saved copy.
Your choices and account deletion
You can update your email and profile, change notification preferences, manage location permission, block other accounts, and delete your account through the app’s Settings. Account deletion requires your current password. If you cannot sign in, use password recovery or contact support. Legal or security requirements may require retention of certain records.
Children and other people’s information
Do not post private information about another person, including children, or upload a photo you do not have permission to share. Contact us if you believe personal information has been submitted improperly.
Changes and contact
We may update this policy when the service or its data practices change. The effective date identifies this version. For privacy questions or account assistance, contact 10-20 Labs LLC through the support address below.
The support address will be published before the app’s public release. Account controls and deletion are available in the app’s Settings.