Privacy policy

2. Travel data on your device and account

The app stores these categories locally:

• Travel data: Manual and Verified visits, their dates and times, and how they were added. Verified visits also include the precise location and its accuracy.
• Saved places: the location and address details for a place you select or confirm, including its city, region, country, and continent. Search suggestions are not saved.
• Progress: collected Stamps, Goals, Travel Score, and related reward state.
• App state: your displayed account information, sign-in state, purchase access, and downloaded Stamp and Goal artwork.

We use this data to provide the features you request. Our legal basis is performance of our contract with you under Article 6(1)(b) GDPR. We do not use it for advertising.

For automatic backup and sync, Stamp Stat keeps an account copy of each confirmed visit. That copy contains the visit date, how the visit was added, any recorded coordinates, and the saved place and address details. Corrections and deletions also sync. We use this copy only to provide the app's features.

Pending Verified captures stay on the device until confirmed. Searches, suggestions, and details for a place you do not confirm are not added to the account copy. Stamps, Goals, and Travel Score are recomputed on each device; only the dates needed to preserve when a locally earned reward was first earned may sync.

Device backups

iOS may include the app's private data in an iCloud or computer backup when you enable device backups. Apple controls iCloud Backup under its own terms; you control backups on your computer. Deleting data in the app does not necessarily remove an older backup immediately. You can review and delete backups in your device, Apple Account, or computer settings. Downloaded artwork is marked to stay out of device backups.

Export and sharing

The app can create a travel-data export on demand. It includes visit dates, Verified visit coordinates and accuracy, confirmed countries, and reward information. It does not include saved place names or addresses. Anyone or any app you share it with can read its Verified visit coordinates.

When you ask to share an export, the app opens the iOS sharing menu. Stamp Stat does not keep a separate copy. iOS and the recipient you choose control any temporary or saved copies after that. Travel cards are also created on the device and leave the app only when you share them.

3. Account and sign-in

Stamp Stat requires an account. We process:

• an internal account identifier and account creation date;
• your email address, if available through your chosen sign-in method;
• whether the email address is verified and any linked Apple or Google sign-in;
• one-time codes or other authentication data needed for the sign-in method; and
• authentication events and normal network data, such as IP address, time, operation, and account identifier.

We use this information to create and operate your account, send sign-in codes, link sign-in methods that use the same verified email, keep you signed in, prevent duplicate accounts, diagnose failures, and protect the service. Account operation relies on Article 6(1)(b) GDPR. Security, abuse prevention, and reliability rely on our legitimate interests under Article 6(1)(f) GDPR.

Amazon Web Services processes account data for us. If you choose Apple or Google sign-in, that provider also processes the sign-in under its own privacy terms. Your travel history is connected to your Stamp Stat account, but Stamp Stat does not connect that account to your App Store purchase.

Your device keeps the credentials needed to keep you signed in until you sign out, delete your account, or the session is revoked or expires.

Service request logs

We keep a limited log of each request the app makes to our service, both place lookups and travel history sync. It records the type and result of the request, how long it took, an error category where applicable, and for sync the number of entries received and applied. It does not contain your account ID or sign-in information, search text, selected place, coordinates, address, or the content of your travel history. We keep this log for seven days for security, abuse prevention, cost control, and incident diagnosis based on Article 6(1)(f) GDPR.

Cloudflare and AWS may also create service, security, and billing records under their applicable terms and service settings.

4. Place and location requests

Manual place suggestions

After you type at least two characters, Stamp Stat sends the search text through Cloudflare to Amazon Location Service. Search suggestions are used only for that search and are discarded when you close it.

Manual place selection

When you select a suggestion, Stamp Stat asks Amazon Location for its place details and saves them with your visit on the device.

Verified visits

When you ask to verify a visit, iOS asks for permission to use your current location. The app uses one location reading that meets its accuracy requirements. It does not track a route or use your location in the background. It stores the reading on your device and sends the coordinates through Cloudflare to Amazon Location so it can name the place. A separate check on your device must agree before the visit is confirmed.

Cloudflare receives the request content, the information needed to verify that you are signed in, your IP address, and normal network information. Amazon Location receives only the search text, selected place reference, or coordinates needed for the request. We do not send Amazon Location your account identifier, email address, travel history, or the IP address Cloudflare sees.

We process each request at your direction to provide the requested feature under Article 6(1)(b) GDPR. You may refuse or revoke location permission in iOS Settings and still add Manual visits.

We log these requests the way we log every service request, as described under Account and sign-in.

Automatic failure diagnostics

When a place cannot be resolved or saved, Stamp Stat automatically records a failure report in Cloudflare Workers Logs to diagnose and fix the problem. Reports contain a random attempt ID, the reporting source, operation, failure stage and reason, and the app build and geography version when available. For empty or unusable results, unsupported countries, and geographic rejection or disagreement, reports may also contain the original request coordinates, GPS accuracy, valid provider coordinates, country codes and catalog IDs, result type, and indicators of which fields were present. Storage and resource-loading failures contain no location values. Network, authentication, and throttling failures contain no location values either. Reports exclude account, device and visit IDs, visit timestamps, place IDs, addresses, search text, credentials, and raw responses. Reports are kept for seven days, with no separate export or longer-lived copy. App reports are sent once on a best-effort basis and do not affect saved visits.

We use these reports to keep location features reliable under Article 6(1)(f) GDPR.

5. Artwork delivery

Amazon Web Services delivers some Stamp and Goal artwork from assets.stampstat.com. It receives network information such as your IP address, the request time, and the requested artwork file. The file can sometimes indicate an unlocked Stamp or current Goal. We use this processing to deliver the requested artwork under Article 6(1)(b) GDPR.

6. Purchases

Stamp Stat offers purchases and auto-renewing subscriptions through the App Store. Apple handles your Apple Account, billing, and payment credentials. Stamp Stat does not receive your full card or bank details.

The app receives the purchase status and any relevant expiry, billing-grace, or revocation date from Apple. It keeps this information on your device so your purchase can work offline. Stamp Stat does not receive the App Store receipt or transaction on its servers and does not connect the purchase to your Stamp Stat account.

Apple may make transaction, sales, tax, and financial reports available to us. We use purchase data to provide or restore your entitlement under Article 6(1)(b) GDPR and keep records required by tax, accounting, or other law under Article 6(1)(c) GDPR. Apple also processes purchase data for its own App Store purposes under Apple's privacy policy.

7. Website, support, and diagnostics

Website

Cloudflare delivers stampstat.com. It processes network information such as your IP address, the page requested, browser information, time, and security or delivery diagnostics. We use this processing to provide and secure the site based on our legitimate interests under Article 6(1)(f) GDPR: availability, abuse prevention, and reliable delivery.

Stamp Stat does not use website analytics, advertising trackers, or third-party embeds. We do not add analytics or advertising cookies. Cloudflare may use storage that is strictly necessary to deliver or protect the site.

Support and privacy requests

If you contact us, we process your email address, message, attachments, and correspondence in Google Workspace. We use this data to answer service requests under Article 6(1)(b) GDPR, handle other support, security, or legal-claim correspondence based on our legitimate interests under Article 6(1)(f), and meet privacy or other legal obligations under Article 6(1)(c). Do not send a password, sign-in code, precise location, or travel export unless we specifically need it to resolve your request.

On-device diagnostics

The app keeps limited diagnostic events on your device. They are designed not to contain travel details or precise coordinates, and Stamp Stat does not send them to its servers. Apple may receive device diagnostics if you choose to share them.

No advertising or automated decisions

The app has no advertising, mobile measurement, behavioural analytics, or cross-app tracking. We do not sell personal information or share it for cross-context behavioural advertising. We do not use personal data to make decisions that produce legal or similarly significant effects about you.

8. Recipients and international transfers

We use these recipients for the purposes above:

• Amazon Web Services: account and sign-in services, travel-history storage, place and location requests, security records, and artwork delivery.
• Cloudflare: website delivery, location and sync requests, security, and limited service logs.
• Apple: App Store distribution and purchases, optional Sign in with Apple, device backups, permissions, diagnostics, and sharing surfaces.
• Google: optional Google sign-in and Google Workspace for support and privacy correspondence.
• an app or person you choose through the iOS share sheet;
• professional advisers, courts, regulators, or authorities where necessary to comply with law or establish, exercise, or defend legal claims.

AWS, Cloudflare, and Google Workspace generally act as processors when handling data on our instructions. Apple and Google may also act as separate controllers for their account, store, device, or sign-in services. Their own policies cover that processing.

Stamp Stat stores account data and runs Amazon Location in AWS's Ireland region. This does not make all processing EU-only: Amazon Location requests may be processed by a geolocation provider outside that region. Cloudflare uses a global network. Apple, Google, and other providers may also process data outside the European Economic Area.

For restricted transfers, we use an adequacy decision where applicable or contractual safeguards such as the European Commission's Standard Contractual Clauses and additional safeguards where required. These safeguards are included in applicable provider data protection terms. You may request information about the safeguard relevant to your data at support@stampstat.com.

9. How long we keep data

Account-held travel history

Until you delete an entry, use Delete all travel data, or delete the account. A deletion marker remains, but not the deleted visit, so an offline device cannot restore the history.

Travel data and progress on your device

Until you delete an entry, delete all travel data, delete the account and local data, or remove the app and its data. Deletions from another device apply on the next sync. Apple controls iCloud copies; you control computer-backup copies.

Exports and travel cards

No app-owned prepared copy is retained. iOS and the recipient you choose control copies created through sharing.

Account and sign-in data

Your account remains until you delete it. Account and sign-in data on your device is removed when you sign out or delete the account. A session may also end if it is revoked or expires.

Service request logs

Seven days.

Account-linking logs

Seven days.

Purchase access

The purchase status on your device remains until it is replaced, cleared after the purchase ends or is revoked, or removed with app data. Apple controls its App Store records. We keep any accounting or legal records for the period required by applicable law.

Support correspondence

While the request is open, then only while needed to document the response, comply with law, or establish, exercise, or defend a legal claim. We delete it when those purposes no longer apply.

Provider service records

AWS, Cloudflare, Apple, and Google may keep separate delivery, security, billing, or transaction records for the periods in their applicable settings, contracts, and legal obligations. You can ask us for the current details that apply to processing on our behalf.

We may keep a limited record longer where a legal obligation applies or it is needed for an active legal claim. We restrict that record to the relevant purpose.

10. Your choices and rights

Controls in the app and iOS

• Export your local travel data as a file.
• Delete individual visits or use Delete all travel data to remove history from the account and this device. Other signed-in devices remove it on their next sync.
• Delete your account, its account-held travel history, and the local travel data on the device where you confirm deletion.
• Change current-location permission in iOS Settings.
• Sign out without deleting travel data stored on the device.
• Manage or cancel an auto-renewing subscription in your Apple subscription settings. Deleting your Stamp Stat account or the app does not cancel an Apple subscription.

Travel data stored locally on another device may remain after account deletion. The app on that device will return to sign-in, and the local travel data will no longer be accessible.

Data you need to provide

An account identifier and authentication data are required to use Stamp Stat. If you do not provide them, the app cannot sign you in. Current-location access is optional. If you refuse it, you cannot create a Verified visit but can still add a Manual visit.

GDPR rights

Subject to applicable conditions and exceptions, you may ask us to:

• give you access to personal data we control;
• correct inaccurate data;
• delete data or restrict its processing;
• provide portable data you gave us;
• object to processing based on legitimate interests; or
• withdraw consent where consent is the legal basis, without affecting earlier processing.

Email support@stampstat.com, preferably from the email shown in your account, and describe your request. We ask only for information needed to verify it. We respond without undue delay and normally within one month. Where the GDPR permits an extension, we will tell you why and when to expect a response.

These rights apply to the travel history held with your account, including access, portability, and erasure. The in-app export contains less information than the account copy and does not include saved place names, addresses, or coordinates for Manual visits. This does not limit your legal rights. Contact us to exercise a right or if the in-app controls do not work.

You may complain to the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany, or another supervisory authority available to you under the GDPR.

United States

Residents of US states may have additional rights where a state privacy law applies to Stamp Stat. Submit them through the same email address. We will not discriminate against you for exercising an applicable right. This policy identifies the categories we collect, the recipients, and how to review, correct, or delete data.

Stamp Stat does not let third parties track you over time across unrelated apps or sites for behavioural advertising. Because we do not conduct that tracking or sell or share data for targeted advertising, browser Do Not Track and Global Privacy Control signals do not change the service's behaviour.

11. Children

Stamp Stat is a general-audience travel app and is not designed for children. We do not ask for a date of birth or knowingly seek account or precise-location data from children. If you are a parent or guardian and believe a child has provided data, contact us so we can review and delete controller-held data where appropriate. Local travel data must be deleted on the child's device.

12. Security and policy changes

We use access controls, secure credential storage, encrypted connections, restricted service permissions, and logs that exclude sign-in credentials and limit location details to the selected failure diagnostics described above. No system is completely secure. Contact us if you think your account or data is at risk.

We will post the current policy and its effective date at this URL. If a change materially affects how we use personal data, we will provide any additional notice or choice required by law before the new practice begins.