1The short version
StampStory has no accounts, no server, and no analytics. The countries you mark, your name, your avatar and your theme live on your phone and nowhere else.
The only thing that ever leaves your device is a purchase receipt, and only if you buy Gold. If you never buy anything, the app sends nothing at all.
2Who we are
StampStory is made by Itay Blokh (shoopi), an independent developer based in Singapore. For anything in this policy, or to make a request about your data, email stampstory-support@shoopi.dev.
3What stays on your device
All of this is written to your phone's local app storage. It is never transmitted, and I have no way to read it.
| What | Why it exists |
|---|---|
| The countries you marked | The whole point of the app |
| The day you marked each one | So the app can tell you what is new since your last visit. You are never asked for a date |
| Your name | Printed on the passport card and its machine-readable strip |
| Your avatar and theme | How your passport looks |
| Whether Gold is active | An offline copy of your purchase status, so the app works without a connection |
| Whether you finished onboarding | So it is not shown twice |
4What leaves your device
Two things, and no more.
- Purchases. Buying or restoring Gold goes through Apple or Google, and through RevenueCat, which validates the receipt on my behalf. RevenueCat receives an anonymous identifier it generates for that install, the store receipt, and basic device and app version information. It does not receive your name, your countries, or anything else from the app. RevenueCat's own privacy policy applies to that data.
- The image you share. When you tap Share, the passport image is handed to your phone's share sheet and goes wherever you send it. That is your action and your choice of destination; it does not pass through me.
5What the app never collects
- No account, email address, phone number or password
- No location. The app never asks for it and cannot read it
- No contacts, camera, microphone or photo library reads. If you choose Save Image in the share sheet, iOS asks your permission and the app writes that one image; it never reads your library
- No advertising identifier and no tracking across apps, so no App Tracking Transparency prompt
- No usage analytics, crash SDK or heat maps
6What this website collects
These pages are served from shoopi.dev, which uses Vercel Analytics and Speed Insights. Those measure page views and load performance in aggregate and do not use cookies to identify you or follow you across sites.
7Legal bases
If you are in the EEA or the UK: processing a purchase is necessary to perform the contract you enter when you buy Gold (Article 6(1)(b) GDPR). Validating receipts to stop fraudulent unlocks rests on legitimate interests (Article 6(1)(f)). Everything else never reaches me, so there is nothing to have a basis for.
9How long things are kept
- On-device data: until you delete it in the app or delete the app itself.
- Purchase records: kept by RevenueCat, Apple and Google for as long as they need to honour a restore and to meet their own tax and accounting obligations.
10Your rights and your choices
Deleting the app removes everything StampStory stored on your phone. There is no server-side copy to request, correct, or export, because there is no server.
For the purchase record held on my behalf, you can ask me to access or delete it. Email stampstory-support@shoopi.dev from the address you use with your store account and tell me what you need. If you delete the purchase record, restoring Gold may no longer work.
If you are in the EEA or the UK you also have the right to complain to your local data protection authority.
11Children
StampStory is not directed at children under 13, or under the age of digital consent where you live, and does not knowingly collect anything from them. There is nothing to collect: the app has no account and no messaging. If you believe a child has bought Gold, contact Apple or Google for a refund and email me.
12Security
Your travel data never travels, which removes most of the risk. Purchase traffic to the stores and to RevenueCat is encrypted in transit. No system is perfect, and I will not pretend otherwise.
13Changes to this policy
If the app starts doing something new, this page changes before that version ships, and the date at the top moves. Material changes will also be noted in the app's release notes.
14Contact
stampstory-support@shoopi.dev - I read everything and aim to reply within a few days.