Stampo Legal

Stampo — Privacy Policy

Effective date: 2026-07-17

This policy describes what Stampo (the “Service”), operated by its individual developer, collects and how it is used. Stampo is a personal postcard-collecting app; the short version is: we store your postcards so we can show them back to you, and nothing else.

What we collect

Data	Why	Where it lives
Email address	Your sign-in identifier	Microsoft Azure (Cosmos DB)
Password	Sign-in	Stored only as a bcrypt hash — we cannot read it
Display name (optional)	The “Hello” greeting on your map	Azure (Cosmos DB)
Postcard photos	The point of the app	Azure (Blob Storage, private container)
Postcard details (sender, caption, location you pin, dates)	Shown on your map	Azure (Cosmos DB)
Invite code you used	Registration bookkeeping	Azure (Cosmos DB)

What we do NOT collect

• No analytics, tracking, or advertising identifiers
• No location tracking — the only locations stored are the pins you place by hand on postcards; the app never reads your device’s GPS
• No contacts, no photos beyond the ones you explicitly pick
• No marketing email — your email address is used solely to sign in

How your data is used

Solely to operate the Service: authenticate you and store, process, and display your content back to you. Your postcards are visible only to your account. We do not sell, rent, share, or monetize your data, and we do not use it to train anything.

Storage and security

• Data is stored in Microsoft Azure (region: US West). Azure acts as our hosting provider and processes data on our behalf.
• Passwords are hashed (bcrypt); sessions use short-lived signed tokens stored in your device’s Keychain.
• Photos live in a private container; the app accesses them through short-lived signed links.
• No system is perfectly secure; keep your own copies of photos you care about.

Retention and deletion

• Your data is kept while your account exists.
• Deleting a postcard deletes its record; you may request deletion of your entire account and content at any time (see Contact), which removes your data from the live stores.
• The Service may be discontinued at any time (see the Terms of Service); stored content may be deleted with it.

Children

The Service is invite-only and not directed at children under 13. Do not use the Service if you are under the age where you can consent to this policy in your jurisdiction.

Third parties

The only third party handling your data is Microsoft Azure (hosting). There are no analytics SDKs, ad networks, or data brokers. Apple may process standard App Store install/crash data under its own policies.

Changes

Material changes to this policy will be reflected by updating the effective date above. Continued use after a change constitutes acceptance.

Contact

Questions, or an account-deletion request: contact the Developer at the address published on the App Store listing.