Guides

Privacy Policy

Last updated

Stamp90 counts the days you spend in countries so you can stay within visa and tax-residency rules. This policy explains what we collect, why, who can see it, and how to delete it. Short version: without an account, your trips never leave your browser, and in the iPhone app we never receive your trips, places or photos. With an account on the website, we store your email and your trips so you can use them on any device. We never sell your data or show ads.

Who we are

Stamp90 is run by Stamp90.com. For anything about your data, email hello@stamp90.com.

Using Stamp90 without an account

The calculator, trip list, planner and calendar work without signing in. Everything you enter (trips, rules, settings, your light or dark theme choice) is saved only in your browser's local storage on your device. It is not sent to us. Clearing your browser data deletes it; use Settings → Save backup to keep a copy.

The Stamp90 iPhone app

The iPhone app has no account and no server of ours behind it. We never receive your trips, places, location readings or photos.

What stays on your iPhone

  • Your trips, trackers and settings are stored in the app on your iPhone. iOS includes them in your iCloud or device backup (if you have backups on), so they come back on a new phone. That backup is between you and Apple; we can't see it.
  • Location (only if you turn on Record my location): the app reads where your iPhone is when you open it and, with Always, when you've moved a few kilometres (iOS region monitoring, using cell towers and Wi-Fi rather than continuous GPS). For each reading it keeps the date and time, the country (in the US the state and nearest town), and the position with its accuracy, on your iPhone, to build your trips. The place is worked out on your iPhone with maps built into the app. You can see these readings in the location log you export. Turn recording off in the app, or in your iPhone's Settings, at any time.
  • Photos (only if you use Restore from your photos): the app reads each photo's date, location, file name, size and camera details on your iPhone, to rebuild your past trips and to leave out photos taken by other devices. It shows a day's photos when you tap that day. Your photos are never uploaded or copied, and the app never changes or deletes them.
  • Face ID (only if you turn on the lock): iOS checks your face; the app only learns whether it succeeded.
  • Alerts are scheduled on your iPhone from your trips; nothing goes to a server.
  • Files you import or export (backups, CSV files, reports, other apps' exports) are read and written on your iPhone. Exports and backups contain your trips and, if you record them, your location readings. You choose where they go with the share sheet.

What goes online from the app

  • Purchases: Apple processes payment; we never see your card. RevenueCat, our purchase provider, receives a random ID made by the app, your purchases and receipts, your device model, iOS version, language and IP address, to confirm and restore your unlock. No name or email.
  • The journey map shows Apple Maps. Apple receives the map area being shown, as with any app that shows a map, but no trips or dates. See Apple's privacy policy.
  • Guides and the tour video load from stamp90.com. Our host's standard logs may record your IP address; no analytics run on these pages inside the app.
  • Ratings and offer codes use Apple's own screens.
  • Emails you send us (Contact us, Something look wrong?) go from your own Mail app, with what you write and the iOS version we fill in.

The app contains no analytics, advertising, crash-reporting or tracking tools, and does not use the iPhone's advertising identifier. To delete everything, use Me › Reset all data in the app, or delete the app. Your purchase and the start of your free trial are kept on your iPhone through a reset, so you don't lose your unlock.

What we collect when you sign in

  • Your email address, to create your account and sign you in. If you use Continue with Google, Google shares your email address and a Google account ID with us. We never see your Google password.
  • Your trips and settings: countries, dates, notes you add, the rules you track and your counting options, so they are available on every device you sign in on.
  • Copies of reports and CSV files you download: when you download your travel report or CSV, we keep a copy (the data the report was made from, including the name you type on it, if any).
  • Sign-in codes we email you. They expire within minutes.
  • Technical logs: our servers record requests (time, IP address, the page or action) to keep the service secure and working. Logs are deleted after 90 days.

On the website we do not collect your passport details, your device's location, contacts or payment information, and we do not use advertising cookies.

If you join the waitlist

We store your email address, the date you joined and where on the site you signed up (for example the waitlist box or the report page), so we can email you when the Stamp90 iPhone app launches. We don't use it for anything else and we don't share it. To be taken off the list, email hello@stamp90.com and we delete it.

Analytics

We use Google Analytics to understand how many people visit Stamp90 and which pages they use, so we can improve it. It records pages viewed, approximate location (country or city, from your IP address), device and browser type, and how you arrived (for example from a search). We never send your email address, name or trips to Google Analytics.

When you first visit, a banner asks whether you accept analytics cookies. If you accept, Google Analytics sets cookies (named _ga) to recognise repeat visits. If you reject, no analytics cookies are set. Until you choose, analytics cookies are off for visitors in the EU, UK and Switzerland (Google receives only anonymous, cookieless signals) and on elsewhere. Your choice is saved in your browser, and you can change it any time with Cookie settings at the bottom of every page. You can also block analytics with your browser's privacy settings or Google's opt-out add-on.

Why we use it

  • To provide the service you asked for: sign-in, saving and syncing your trips, and making your reports.
  • Support, security and improvement: Stamp90 administrators can view account emails, saved trips and downloaded reports to help you when you ask, to investigate abuse or errors, and to understand how the product is used so we can improve it.
  • News you agreed to: if you join the list, a short email when the iPhone app launches. You can unsubscribe at any time.

Where the GDPR or UK GDPR applies, we rely on the contract with you (to provide the service), our legitimate interests (security, support and improvement), and your consent (product news).

Google user data

If you choose Continue with Google, Google shares your email address and basic profile information (name and Google account ID) with Stamp90. We use them only to create your account and sign you in. We do not request access to your Gmail, contacts, calendar, files or any other Google data. We do not sell Google user data, use it for advertising, or share it with anyone except the providers that run Stamp90 (listed below). You can remove Stamp90's access at any time at myaccount.google.com/permissions, and deleting your Stamp90 account deletes this data.

Stamp90's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who else handles your data

We use a few providers to run Stamp90. They process data only on our instructions:

  • Amazon Web Services (hosting, database, file storage, sign-in and email delivery), in the United States (us-east-1).
  • Google: Google Analytics on the website (see above), Continue with Google if you choose it, and Google Fonts, which loads the site's fonts.
  • RevenueCat (purchases in the iPhone app), in the United States.
  • Apple: the App Store and payments, Apple Maps, and your iCloud backup.

Each is bound by its terms with us to protect your data at least as well as this policy does.

We do not sell or rent your personal information, and we do not share it for advertising. We may disclose it if the law requires us to, or to protect the rights and safety of our users or of Stamp90.

Where your data is stored

Account data is stored in the United States. If you use Stamp90 from elsewhere, including the EU or UK, your data is transferred to the US. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses in our providers' terms.

How long we keep it

In the iPhone app, your data stays on your iPhone until you delete it. RevenueCat keeps purchase records while they're needed to prove your purchase; ask us and we'll have them deleted. On the website, we keep your account data, trips and downloaded reports until you delete your account. When you delete it, we delete them straight away; copies in our database backups expire within 35 days. Waitlist emails are kept until you ask us to remove them, or until we have emailed you about the launch and you no longer need to hear from us. Technical logs are kept for 90 days.

Your rights and choices

  • Delete everything: Settings → Account → Delete account and data removes your account, trips and stored downloads.
  • Get a copy: Settings → Save backup downloads all your trips, rules and settings, and your report can be downloaded as a PDF or CSV.
  • Correct: edit or delete any trip at any time.
  • Ask us: email hello@stamp90.com to access, correct, delete or export your data, or to object to how we use it. We reply within 30 days.

Depending on where you live (for example the EU, UK or California), you may have further rights, including the right to complain to your data protection authority. We do not sell or share personal information as those terms are defined under California law.

Security

Data is encrypted in transit (HTTPS) and at rest. Accounts use one-time codes or Google sign-in, so there are no passwords to steal. Access to user data is limited to Stamp90 administrators. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

Stamp90 is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell signed-in users by email or in the app before it takes effect.