Privacy Policy

1. Overview

Stamport is a digital passport. You collect stamps, and you keep stubs of the things you've been to, been at, watched, listened to and read. Your friends can see your passport and react to what's in it. This Privacy Policy explains what the Stamport iOS and Android apps, the stamport.com website and related services do with your information.

Stamport is run by Nikiforos Staveris, in Greece, who is responsible for your information (the data controller). Questions and requests about privacy can be sent to info@stamport.com.

2. Who Can See What

Stamport has three audiences. Here is what each can see:

• Only you: your email address, sign-in details, the codes printed on your tickets, your list of blocked accounts, your notification settings, and your activity (the reactions people leave on your passport).
• Your friends: your whole passport, including every stamp and stub, its details, captions, ratings and reviews, the photos on your place stubs, and the reactions on them. Friends can also see which of their other friends have kept the same event, place, film, album, song or book. People only become your friends when you accept their request, or they accept yours.
• Anyone signed in to Stamport: your profile card. That is your username, profile photo, bio, the social handles you add (Instagram, music, Letterboxd, Goodreads), your passport cover and page designs, and up to three stamps or stubs you choose to feature on the card. People can find your profile by searching for your username, unless you turn off Let people find me in Settings, and by scanning your profile code or opening your profile link, which work either way. Anyone you block can't see your profile, find you in search or send you a friend request.

3. Information We Collect

Your account

• Account details: your email address, user ID, username, sign-in method (email, Google or Apple), email verification status and account dates. If you sign in with Google or Apple, that service may give us your email address and name.
• Profile: your profile photo, bio, social handles, cover colour, page designs and featured stamps or stubs.

Your passport

• Stamps: the stamps you collect, when you got them, and where they sit in your passport.
• Ticket stubs: when you add a ticket, Stamport reads the PDF on your phone. The PDF itself is never uploaded. What is kept is the event name, venue, date, start time and seats as you confirm them, plus the ticket's code (such as its barcode or QR code). The code is stored separately and only you can see it. It never appears on your stub for friends or on your profile card.
• Place stubs: when you share a photo into Stamport, your phone reads the date, time and location stored in the photo. On an iPhone, the location is sent to Apple Maps to suggest the names of places nearby, and your phone's own map service may turn it into a town name. What is kept is the place name you pick, its town and country, the date and time, and the location rounded to about a kilometre and a half. Before the photo is uploaded, your phone makes a smaller copy and strips all its metadata, so the exact location in the original never leaves your phone.
• Film, music and book stubs: when you share a link from Letterboxd, Apple Music, Spotify or Goodreads, your phone looks up that link's public page to find the title, who made it, and the year. For a Letterboxd diary entry, it also reads that member's public Letterboxd feed to find the rating, review and date. What is kept is the title, creator, year, the date you watched, listened or read, the link, and any rating, review or caption you add or bring with it.
• Captions you write on your stubs.

To print every stub of the same event, place, film, album, song or book in the same colours, Stamport keeps a shared record of each one (its name and details, never anyone's ticket code or photo) along with a list of who has kept it. That list is visible only to the people on it and to their friends.

Friends and reactions

• Friends: your friend requests (sent and received), your friends, and the accounts you block.
• Reactions: the emoji reactions you leave on your friends' stamps and stubs, and those your friends leave on yours.
• Searches: the usernames you search for are used to return results and are not stored.
• Reports: if you report an account, we keep who sent it, who it is about, the reason you give and when.

Your device

• Notification token: if you allow notifications, we store a token for each of your devices so we can send them.
• App integrity: Firebase App Check uses Apple App Attest or Google Play Integrity to confirm that requests come from a genuine copy of the Stamport app.
• Usage data: Firebase Analytics records how features are used, such as collecting a stamp, saving or sharing an image, and opening the passport. Some events include a stamp ID or where an action started. The Firebase SDK also collects app, device and app-instance information.
• Service logs: our servers log actions such as keeping a stub or sending a friend request, with your user ID, so we can find and fix problems.
• Stored on your phone: your preferences, cached images, and the event names you have corrected, so the app loads faster and reads your next ticket better.

Support

The email address, message and attachments you send to info@stamport.com, and the email address and message you send through the form on stamport.com.

The website

If you allow it, stamport.com uses Google Analytics to understand how pages are visited. Nothing is loaded until you choose, and you can change your choice any time from Cookies at the bottom of the site. Google Analytics sets cookies and collects information such as the pages you view, your browser and device type, and your approximate location from your IP address.

4. What Stamport Does Not Collect

• Stamport never asks for your location. The only location it reads is the one stored in a photo you choose to share into it.
• Stamport does not read your photo library. It sees only the photos you share into it or pick yourself.
• Stamport does not read your contacts.
• Your ticket PDFs never leave your phone.
• The motion sensor used to tilt stamps in the light is read on your phone and never sent anywhere.
• Stamport does not send your content to AI services.

5. How We Use Information

• Create and secure your account, verify your email address and send password-reset emails.
• Store your passport and keep it in sync across your devices.
• Show your passport to your friends and your profile card to other people, as described in Section 2.
• Handle friend requests, friendships, blocks and reactions.
• Send notifications when a friend adds something to their passport, reacts to yours, or sends or accepts a friend request.
• Print stubs of the same thing in matching colours and show you which friends kept the same one.
• Check that usernames are allowed and available.
• Review reports, enforce our Terms of Service, and protect people and Stamport from misuse.
• Understand how features are used, find problems and improve Stamport.
• Reply to messages sent to support or through the website.

Where European data-protection law applies, we use your account, passport, friends and reactions to provide the service you signed up for. We use security, safety, service logs and product analytics for our legitimate interests in keeping Stamport safe, working and improving. We send notifications only with your permission, which you can withdraw at any time.

6. Data Sharing & Third Parties

We do not sell or rent your personal information and do not use it for advertising. Information is shared only as described below:

• Other Stamport users: your friends and other people see what is described in Section 2.
• Google Firebase and Google Cloud: sign-in, database, file storage, server functions, notifications, App Check and analytics.
• Google and Apple: when you sign in with them, and Apple and Google deliver notifications to your devices.
• Apple Maps and your phone's map service: receive the location of a photo you share into Stamport to suggest place and town names.
• Letterboxd, Apple, Spotify and Goodreads: receive a request from your phone for the public page of a link you share into Stamport. Like any website, they see your IP address when they answer.
• Formspree: receives what you send through the form on stamport.com, stores it and forwards it to us by email.
• Apps you share to: when you share a stamp or stub to Instagram, Messages or another app, that app receives the image.
• Legal and safety disclosures: we may disclose information when the law requires it, or when necessary to protect the rights and safety of Stamport, its users or others.

Service providers may use your information only to provide their services to Stamport, under their agreements with us and applicable data-protection law.

7. Device Permissions & Controls

You can manage permissions in your device settings. Some features stop working when a permission is off:

• Camera: scan friends' profile codes.
• Photos: choose a profile photo, scan a code from a picture, and save stamps and stubs to your library.
• Notifications: receive friend activity, reactions and friend requests. You can also turn friend activity off in Stamport's settings.
• Motion: make stamps tilt and catch the light. You can turn this off in Stamport's settings.

8. Data Retention

Your account, profile and passport are kept while your account exists. Deleting a stub deletes it along with its ticket code and photo.

Deleting your account from Settings deletes your sign-in account, profile, username, passport, ticket codes, stub photos, profile photos, reactions you left, friendships, friend requests, blocks and notification tokens. You are removed from every shared keepers list. The shared records of events, places, films, albums, songs and books stay, without you on them.

Some information is kept after you delete your account:

• Reports you made, or that were made about you, are kept as long as needed to keep Stamport safe.
• Service logs are deleted automatically after about 30 days.
• Analytics data is kept under our Google Analytics retention settings and may remain in aggregated reports.
• Support emails and messages sent through the website are kept as long as needed to handle the request.

Deleting your account can't remove copies that you, or friends who saw your passport, saved or shared outside Stamport.

9. Your Choices & Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to the processing of, or get a copy of your personal data. You may also have the right to withdraw consent and to complain to your local data-protection authority. In Greece, that is the Hellenic Data Protection Authority (dpa.gr). You can:

• Change your email address, username, profile photo, bio and social handles in the app.
• Choose which stamps or stubs appear on your profile card, or feature none.
• Delete any stub, and take back any reaction you left.
• Remove friends, and block or report accounts.
• Turn friend activity notifications off.
• Delete your account through Settings → Account → Delete account.
• Ask for access, correction, deletion or a copy of your data by emailing info@stamport.com. We may ask you to confirm the account is yours.

10. Security

Stamport uses Firebase Authentication, encrypted connections, App Check, and database and storage rules that decide who can read what. Deleting your account requires a recent sign-in. Please use a strong password, keep your device updated, and contact us if you think someone else has accessed your account.

11. Children's Privacy

Stamport is not for anyone under 16, or under the minimum age in their country if that is higher. We do not knowingly collect personal information from children below that age. If you believe a child has created an account, contact info@stamport.com and the account and its data will be deleted.

12. International Data Transfers

Stamport's server functions run in Europe (Belgium). Google, Apple and the other providers listed in Section 6 may process information in other countries, including the United States, under their terms and data-transfer safeguards such as the European Commission's Standard Contractual Clauses.

13. Changes to This Policy

We may update this Privacy Policy as Stamport changes. When we do, we will update the date above and, for significant changes, tell you in the app or by email.

14. Contact Us

If you have questions about this Privacy Policy or how we handle data, email us at:

Email: info@stamport.com