Privacy at Smooth Spots.

Updated October 21, 2026. Smooth Spots is a directory by Winback Engine, currently in a private launch preview.

Saved studios

Saved places stay in this browser on this device. They are not synced to an account. Clearing browser storage removes them.

Requests and private status links

We store your name, email, studio details, role, message, consent choices, referral source, request reference and submission time to review and respond to claims, additions and corrections. Only approved business details appear publicly. Review notes and your personal contact details remain private.

Your private status link contains a secret token. Keep it private: anyone with the full link can see your request’s progress and, for approved owner claims, the studio’s activity counts. We store a hash of the token with the request. Confirmation emails in the private sending queue contain your full status link.

Requests, review history and confirmation records are retained during the pilot so the team can resolve issues and document approvals. You can ask for deletion at the address below. We will confirm that the request belongs to you and explain any records needed to document a published correction or ownership decision.

Optional Winback Engine interest

The assessment checkbox is separate, unchecked by default and never required for a free listing. If you opt in, the team records your consent and follow-up stage. The directory does not automatically enroll you in marketing campaigns or an external CRM.

Directory activity

We count searches, profile views and clicks on booking or contact links. Events contain the studio, selected area or service, result count, time, and a limited referral source and campaign label. We do not store raw search text, raw IP addresses, persistent visitor identifiers or advertising cookies in these events. Referral labels are kept in this tab’s session storage. Browsers that send Do Not Track and signed-in administrators are excluded. Events older than 90 days are deleted when new activity is recorded.

Providers and email

Sites hosting and Cloudflare provide the application and database infrastructure and may process technical request data to operate the service. Confirmation, sign-in and verification emails are sent from noreply@smoothspots.com using Cloudflare Email Service. If you choose phone verification for a studio claim, the code is sent by text or automated call to the studio’s published number through our telephony provider (Twilio). Replies and owner questions go to hello@smoothspots.com, hosted through Google Workspace.

Studio photos and logos are stored with the directory where available. External image fallbacks can contact the source image host. Booking, map and website links open external services with their own privacy practices.

Request protection

To limit repeated submissions, the app stores an hourly hash derived from the connecting IP and a request count. It does not store the raw IP in these counters. Expired counters are removed when new requests arrive.

Questions or deletion requests

Email hello@smoothspots.com and include your request reference, if applicable. Do not send your private status token in a public message.