Privacy policy

Who we are

Stillfeed is operated by [Legal entity name], [Registered address] ("we", "us"). We are the controller of the personal data described here.

For any privacy question or request, write to hello@stillfeed.app.

The short version

Three promises shape everything below:

• Only visuals are hidden. The extension changes what is drawn on the page. It never calls YouTube, Instagram or TikTok APIs, never scrapes content and never likes, follows or messages on your behalf.
• Browsing stays on your device. The pages you visit, the videos you watch and the URLs you open are not collected or sent anywhere.
• Sync is limited and optional. If you create an account, only your settings and daily totals per platform (time spent and items blocked) are synced.

What the extension keeps on your device

The extension stores the following in your browser's local storage so its features work:

• Your settings: which surfaces are hidden, limits, schedules, focus and strict mode.
• Daily time totals per platform, used for daily limits and your statistics. These are counts of seconds, not a history of pages or videos.

The extension may download an updated list of page rules (CSS selectors and path patterns) from our server. That request is anonymous and carries no account or browsing data. Rules are data; no remote code is executed.

If you create an account

An account is optional and is only needed for sync and Pro. When you sign in we process:

• Your email address, and if you use Google sign-in, your Google account ID and email.
• A record for each device you connect: a name, the browser or platform, and when it last synced.
• Your settings, with a revision number used to merge changes between devices.
• Daily totals: date, platform, device, seconds spent and the number of items blocked.

We do not receive the content you watch, your feeds, your contacts or your messages on any platform.

On Firefox, the browser also asks for your consent before the extension sends any of this data.

Accountability partner (Pro)

If you invite an accountability partner, we process:

• Their email address, which you give us, to send one invite and, once they accept, your unlock requests.
• Each request: its type (ending strict mode early or removing the partner), the reason you write (up to 280 characters), when it was made and when it is approved automatically.
• Their answer (approve or decline) and when it was given.
• Whether each email could be delivered.

Your partner doesn't need an account and never sees your screen time, settings or usage. In our emails and on the invite and request pages, they see only a partly masked version of your email address (such as ka•••@g•••.com), your request and your reason. They can stop our emails with one click; your requests are then approved automatically after 24 hours.

Your partner's email address reaches us from you, so they are a third party to your account. The invite email and the invite page tell them who we are, why we email them, what we keep and how to stop it (GDPR Art. 14). Only invite someone who expects to hear from you.

Weekly summary email (Pro)

The weekly summary is off unless you turn it on in your dashboard. If you do, we use:

• Your email address and language.
• Your time zone, so the email arrives on Monday morning your time.
• Your streak, how many days you stayed within your limits, time measured under your limits and any new badges, all calculated from the daily totals you already sync.
• A record of which weeks were sent, so the same summary never arrives twice.

The summary contains no ads and no links to the platforms. Turn it off in your dashboard, or use the one-click unsubscribe link in every email.

Payments

Pro subscriptions are sold by our payment provider, Lemon Squeezy, which acts as the Merchant of Record. Lemon Squeezy collects your payment details, handles taxes and invoices, and processes that data under its own privacy policy. We never see your full card number.

From the provider we receive and store your subscription ID, customer ID, plan interval, status and renewal or end dates, so we can unlock Pro on your account.

This website

We use only the cookies needed to keep you signed in and to remember your theme and language. We do not use advertising or cross-site tracking cookies.

Our hosting provider keeps short-lived server logs (such as IP address, time and requested page) for security and to keep the service running.

Legal basis (GDPR)

Where the GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b)) for your account, sync and subscription.
• Legal obligation (Art. 6(1)(c)) for records we must keep; billing records are kept by the Merchant of Record.
• Legitimate interests (Art. 6(1)(f)) for security logs and preventing abuse.
• Performance of a contract (Art. 6(1)(b)) for the weekly summary email: it is part of Pro and stays off until you turn it on in your dashboard. The switch is a preference you can change at any time, and every email has a one-click unsubscribe link.
• Legitimate interests (Art. 6(1)(f)) for processing your partner's email address, requests and answers so the partner feature you asked for works. Your partner can stop our emails at any time.

Service providers and international transfers

We share data only with providers that help us run Stillfeed:

• Supabase: database and sign-in (region: [Supabase region]).
• Vercel: website hosting (United States).
• Lemon Squeezy: payments, as Merchant of Record (United States).
• Google: only if you choose Google sign-in.
• Resend: sending emails such as partner invites, unlock requests and the weekly summary (United States).

Where data leaves your country, transfers rely on standard contractual clauses or an equivalent safeguard.

How long we keep data

• Account, settings and device records: until you delete your account.
• Daily totals: deleted automatically after about 13 months (400 days).
• To delete your account, email hello@stillfeed.app from the address on your account. Self-service deletion is not available yet. We remove your data within 30 days of your request.
• Backups roll over within [N days].
• Partner data (email address, requests, reasons and answers): while the partnership exists, and deleted with your account. A removed partner is deleted 30 days after removal, and an invite that was never accepted 30 days after it expires. Approved, declined or withdrawn requests are deleted 90 days after they close, once the strict mode session they concern has ended.
• Addresses that unsubscribed, bounced or complained are kept only as a one-way hash in a suppression list, so we never email them again. The list is kept only as long as it is needed to honour that opt-out.
• Records of which weekly summaries were sent: 120 days.

Your rights

You can ask to access, correct, delete, restrict or export your data, and object to processing based on legitimate interests. You can also complain to your local data protection authority.

Write to hello@stillfeed.app from the address on your account. We reply within 30 days.

Chrome Web Store user data

Stillfeed's use of information received from browser extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Daily time totals are used only for the user-facing limits and statistics described above. We do not sell data, use it for advertising, or transfer it to data brokers. People only access it with your consent, for security, or when the law requires.

Children

Stillfeed is not directed at children under 13, or under [16] where local law sets a higher age. We do not knowingly create accounts for them.

Changes to this policy

If we change this policy we will update the effective date above, and tell account holders by email before a material change applies.