Privacy Policy

Stickerbook Sky is women-owned! For any privacy-related questions, you can reach me at support@stickerbooksky.com.

Information You Provide

• Anonymous sessions. You can use Stickerbook Sky without creating an account. Anonymous sessions do not require any personal information — no name, no email, nothing.
• Account registration. If you choose to create an account (to access your inbox and receive responses), we collect your email address and a hashed password. We never store your password in plain text.
• Display name. You may optionally set a display name for your profile.
• Paper planes and responses. The text content you write in planes (up to 500 characters) and responses (up to 280 characters) is stored in our database.

Information Generated Automatically

• Sentiment labels. When you send a plane, we automatically detect a sentiment category (e.g., Hope, Joy, Gratitude, Longing, Grief, Anger, Neutral) to help organize planes in the galaxy. This is derived from your message content and is not shared with third parties.
• Points and sticker inventory. We track your point balance, transaction history, and sticker collection to power the in-app economy.
• Timestamps. We record when planes, responses, and accounts are created.
• Galaxy coordinates. Each plane is assigned random spatial coordinates for its visual position in the 3D galaxy. These are not tied to your real-world location.

Information Stored Locally on Your Device

The following are stored in your browser’s local storage and never transmitted to our servers:

• Theme preference (e.g., Cosmic Drift, Rainy Night)
• Sound preference (on/off)
• Splash screen display state
• Authentication session cookies

We use collected information solely for:

• Delivering core functionality — sending planes, receiving responses, managing your sticker inventory and points.
• Content moderation — analyzing message content for toxicity to keep the community safe and cozy.
• Error monitoring — diagnosing and fixing bugs to improve app stability.
• Anonymous analytics — understanding aggregate usage patterns (e.g., page views) to improve the experience.

We do not sell your data. We do not use your data for advertising. We do not build marketing profiles.

We use a small number of trusted third-party services to operate Stickerbook Sky:

• Supabase — Database, authentication, and real-time features. Data shared: email (if registered), hashed password, all user-generated content.
• Vercel — Hosting and anonymous analytics. Data shared: anonymous page-view metrics (no personal identifiers).
• Sentry — Error monitoring and performance tracking. Data shared: error reports, session replays on errors (may include user session context).

Each service operates under its own privacy policy and processes data in accordance with applicable regulations.

A note on Sentry: In production, Sentry may capture session replays when errors occur to help us diagnose issues. These replays may include on-screen content visible at the time of the error. Sentry does not have access to your password or authentication tokens.

• Paper planes expire after 90 days from creation. Expired planes are no longer visible in the galaxy but remain accessible to the original author in their inbox for personal reference.
• Account data is retained as long as your account is active.
• Anonymous session data is not persisted beyond the browser session.
• Error logs and analytics are retained according to the retention policies of Sentry and Vercel (typically 30–90 days).

We implement the following security measures to protect your information:

• Content Security Policy (CSP) headers restricting unauthorized script execution
• HTTPS enforcement with HTTP Strict Transport Security (HSTS)
• Clickjacking protection via X-Frame-Options
• Row-Level Security (RLS) on all database tables ensuring users can only access their own data
• Rate limiting to prevent abuse
• Password hashing — your password is never stored in plain text
• Permissions policy denying access to camera, microphone, and geolocation

You have the right to:

• Access your personal data by viewing your profile, planes, and responses within the app.
• Delete your account and all associated data by using the Danger Zone in your Settings. You may also contact us at support@stickerbooksky.com.
• Data portability — request a copy of your data in a standard format.
• Withdraw consent — you can stop using the service at any time. Deleting your browser data removes all local storage.

If you are located in the European Economic Area (EEA), you may also have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

Stickerbook Sky is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@stickerbooksky.com and we will promptly delete it.

Stickerbook Sky uses minimal cookies — only what is necessary for authentication sessions. We do not use advertising cookies, tracking pixels, or fingerprinting. Our analytics (via Vercel) are anonymous and do not track individual users across sessions.

We may update this Privacy Policy from time to time. If we make significant changes, we will notify users through the app or via email (for registered users). The “Last Updated” date at the top of this policy reflects the most recent revision.