Privacy Policy

Reddit / Devvit app — what data we handle

The Spectarama Reddit app (“the App”) is a Reddit Devvit application owned and operated by the same team as the spectarama.com website. The App is installed on the r/Spectarama subreddit and, when explicitly triggered by a moderator, posts curated Spectarama artwork from spectarama.com into r/Spectarama as native Reddit image posts.

Data the App reads

The App reads only the following data from the moderator and from the Reddit platform:

• Subreddit name (context.subredditName) — used to know which subreddit the App is currently acting on.
• Moderator click event — when a moderator selects a menu action, Reddit hands the App an opaque event ID and the action endpoint. No click event is persisted by the App; it is acted on once and discarded.

The App does not read, store, share, or transmit:

• Reddit users’ usernames (other than the App’s own service account’s), account ages, post history, comment history, voting records, saved content, subscription lists, or any other Reddit profile data.
• Reddit users’ direct or modmail messages.
• IP addresses, device identifiers, or browser fingerprints.

Data the App fetches

When a moderator clicks the “Propagate Spectarama queue” menu action, the App makes a single anonymous HTTPS GET from Reddit’s Devvit runtime to a publicly-readable JSON manifest stored in an Amazon S3 bucket operated by the Spectarama team (spectarama-reddit.s3.amazonaws.com/queue.json). Spectarama rewrites this manifest from its CMS whenever artwork is curated or published. The manifest contains only artwork metadata that is already public on spectarama.com:

• Artwork title and artist attribution
• A URL pointing to the artwork’s watermarked social-card preview image (publicly available, already used as the page’s <og:image>)
• The artwork’s public canonical page URL
• A post-flair label
• A boolean flag indicating whether the artwork is premium (login-gated)

No identifying information about the moderator who clicked, or any other Reddit user, is sent in the request. The S3 request is anonymous — no bearer token, no cookies, no headers carrying user data.

The App does not issue any “acknowledge” request back to the Spectarama side after posting. Spectarama instead reconciles state by reading Reddit’s own public listing of r/Spectarama posts to learn which artwork has been published.

Data the App writes to Reddit

For each pending image, the App uploads the preview image bytes to Reddit’s media CDN via Reddit’s standard media.upload API, then submits a native image post to r/Spectarama with the title, image, and flair from the queue payload. Posts are authored by the App’s service account, not by the clicking moderator.

Data we retain

On the spectarama.com side we retain, for each propagated artwork:

• The queue row’s status (pending / posted / failed)
• The Reddit post identifier (e.g. t3_abc123) and its permalink
• A timestamp of when the post was created on Reddit
• Free-text error detail when a post fails (to aid debugging)

We do not retain any Reddit user identity beyond the App’s own service account.

Third parties

The App’s communication path is:

moderator click  →  Reddit Devvit runtime  →  s3://spectarama-reddit/queue.json
                                              (public manifest published by us)
                                          →  Reddit (post creation; image bytes
                                              fetched server-side from spectarama.com
                                              by Reddit's media-upload service)

The App fetches data from one external service: an Amazon S3 bucket that we operate. Amazon S3 is Spectarama’s cloud-storage host; its provider is Amazon Web Services, Inc., subject to its own Privacy Notice. The App does not call any other third-party service.

Cookies and tracking

The App does not set cookies, use local storage, or run any tracking or analytics scripts inside its Reddit-rendered views.

Your rights

Removing the App from r/Spectarama (a subreddit moderator action) stops all App activity immediately. The S3 manifest may be emptied or deleted at any time from the Spectarama administrator dashboard, which yields an empty queue to the App.

Contact

For questions about the App’s data handling, contact privacy@spectarama.com.

Last updated: 2026-05-27.