Guides

Privacy Policy

Last updated

Stamp90 counts the days you spend in countries so you can stay within visa and tax-residency rules. This policy explains what we collect, why, who can see it, and how to delete it. Short version: without an account, your trips never leave your browser. With an account, we store your email and your trips so you can use them on any device. We never sell your data or show ads.

Who we are

Stamp90 (stamp90.com) is run by Stamp90. For anything about your data, email privacy@stamp90.com.

Using Stamp90 without an account

The calculator, trip list, planner and calendar work without signing in. Everything you enter (trips, rules, settings, your light or dark theme choice) is saved only in your browser's local storage on your device. It is not sent to us. Clearing your browser data deletes it; use Settings → Save backup to keep a copy.

What we collect when you sign in

  • Your email address, to create your account and sign you in. If you use Continue with Google, Google shares your email address and a Google account ID with us. We never see your Google password.
  • Your trips and settings: countries, dates, notes you add, the rules you track and your counting options, so they are available on every device you sign in on.
  • Copies of reports and CSV files you download: when you download your travel report or CSV, we keep a copy (the data the report was made from, including the name you type on it, if any).
  • Sign-in codes we email you. They expire within minutes.
  • Technical logs: our servers record requests (time, IP address, the page or action) to keep the service secure and working. Logs are deleted after 90 days.

We do not collect your passport details, location from your device, contacts or payment information, and we do not use advertising cookies.

Analytics

We use Google Analytics to understand how many people visit Stamp90 and which pages they use, so we can improve it. It records pages viewed, approximate location (country or city, from your IP address), device and browser type, and how you arrived (for example from a search). We never send your email address, name or trips to Google Analytics.

Outside the EU, UK and Switzerland, Google Analytics sets cookies (named _ga) to recognise repeat visits. In the EU, UK and Switzerland, analytics cookies are off by default: Google receives only anonymous, cookieless signals. You can also block analytics with your browser's privacy settings or Google's opt-out add-on.

Why we use it

  • To provide the service you asked for: sign-in, saving and syncing your trips, and making your reports.
  • Support, security and improvement: Stamp90 administrators can view account emails, saved trips and downloaded reports to help you when you ask, to investigate abuse or errors, and to understand how the product is used so we can improve it.
  • News you agreed to: if you join the list, a short email when the iPhone app launches. You can unsubscribe at any time.

Where the GDPR or UK GDPR applies, we rely on the contract with you (to provide the service), our legitimate interests (security, support and improvement), and your consent (product news).

Who else handles your data

We use a few providers to run Stamp90. They process data only on our instructions:

  • Amazon Web Services (hosting, database, file storage, sign-in and email delivery), in the United States (us-east-1).
  • Google: Google Analytics (see above), Continue with Google if you choose it, and Google Fonts, which loads the site's fonts.

We do not sell or rent your personal information, and we do not share it for advertising. We may disclose it if the law requires us to, or to protect the rights and safety of our users or of Stamp90.

Where your data is stored

Account data is stored in the United States. If you use Stamp90 from elsewhere, including the EU or UK, your data is transferred to the US. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's standard contractual clauses in our providers' terms.

How long we keep it

We keep your account data, trips and downloaded reports until you delete your account. When you delete it, we delete them straight away; copies in our database backups expire within 35 days. Technical logs are kept for 90 days.

Your rights and choices

  • Delete everything: Settings → Account → Delete account and data removes your account, trips and stored downloads.
  • Get a copy: Settings → Save backup downloads all your trips, rules and settings, and your report can be downloaded as a PDF or CSV.
  • Correct: edit or delete any trip at any time.
  • Ask us: email privacy@stamp90.com to access, correct, delete or export your data, or to object to how we use it. We reply within 30 days.

Depending on where you live (for example the EU, UK or California), you may have further rights, including the right to complain to your data protection authority. We do not sell or share personal information as those terms are defined under California law.

Security

Data is encrypted in transit (HTTPS) and at rest. Accounts use one-time codes or Google sign-in, so there are no passwords to steal. Access to user data is limited to Stamp90 administrators. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

Stamp90 is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell signed-in users by email or in the app before it takes effect.