Privacy Policy

When you choose a photo, Stamply reads available GPS data in your browser and compares it with a bundled list of destinations to suggest a place. The app does not send coordinates to an external geocoding service. If you save the stamp, coordinates and the destination details you keep are stored with the stamp so it can be displayed later.

Stamply uses browser storage for guest drafts and cached collections, and Supabase for authenticated accounts:

• Guest use: Guest stamps and drafts are stored in your browser's localStorage and sessionStorage. Clearing site data removes these local copies.
• Signed-in accounts: Supabase provides authentication, database, and photo storage. Account records and photos are associated with your account and protected by owner access rules. Stamply also caches profile and stamp data in your browser; signing out does not necessarily clear those cached collections. Photo files uploaded to the account may retain the original file's embedded metadata.

You can make privacy requests by emailing privacy@stamply.app. We may ask for reasonable information to verify that you control the account before acting.

• In-app removal: You can delete a stamp from your collection in the app. This removes its database entry, but the app does not currently guarantee that the related uploaded image file is also removed from storage.
• Account and file deletion: The app does not currently provide a self-service account deletion control. Email us to request deletion of account records and stored image files. Some information may remain in provider backups or security logs according to their retention cycles, or where retention is required by law.
• Exports and privacy rights: The app offers visual PNG exports; these are not a complete machine-readable account-data export. Depending on the laws that apply where you live, you may also request access, correction, deletion, a copy of your data, restriction or objection to certain processing, or withdrawal of consent where processing relies on consent. You may also have the right to complain to a privacy regulator.

The app currently uses these providers and external services:

• Supabase: Authentication, database, and photo storage for signed-in accounts. The project region is selected in the Supabase project configuration.
• Google: Google sign-in and Google Fonts used to display the site. Google receives the requests needed for those services.
• Unsplash: Demonstration images load from Unsplash. Your browser contacts Unsplash when those images are displayed.
• Sharing services: If you choose a social sharing option, your browser opens the selected third-party service. Its own privacy terms then apply.
• Site hosting and delivery: The provider selected to host and deliver Stamply may process request and security logs, including technical connection information. The exact provider and region depend on the deployment configuration.

We use account and stamp information to provide authentication, save and display your collection, process photo features you request, provide exports, maintain security, respond to support requests, and meet legal obligations. Where applicable law requires a lawful basis, providing the account and requested collection features is based on providing the service you request; protecting and maintaining the service is based on our legitimate interests; and retaining or disclosing information when legally required is based on legal obligations. Stamply currently does not use analytics or advertising tools.

We keep account and collection data while your account is active and until you delete it or request deletion, subject to legal obligations and provider backup or security-log retention. Information may be processed in countries other than where you live, depending on the regions and infrastructure used by Supabase and the site host. Contact us for information about the locations and transfer safeguards used for the deployed service. Where laws such as California privacy law apply, you may also request information about categories collected or disclosed and exercise applicable rights to opt out of sale or sharing. Stamply does not sell or share personal information for cross-context behavioral advertising.

Stamply is a general-audience service and is not designed for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to Stamply, contact us so we can review and take appropriate steps.