Privacy policy

Who is responsible. StoryFan is a service of Apphive, Inc., a Delaware corporation (USA), 2810 N Church St, PMB 97340, Wilmington, DE 19802. Contact: support@apphive.io.

What we process. (1) Your StoryFan account: Apple or Google identifier and email. (2) Your social network session, which you start on its official page inside the app; we keep only the session credentials (cookies), encrypted with AES-256, to read your stories. What you type in that window (including your password) travels encrypted and is only used to type it into the official page at that moment: we don't store or log it. (3) The viewer lists of your stories, as you see them in your own account (see "People who view your stories" below). (4) Technical data: device token for notifications, language and diagnostics. (5) App usage: which screens you open and actions such as entering the demo, connecting an account or sharing your recap, with a random install identifier (not the advertising identifier) linked to your account if you are signed in. We measure it ourselves and, for the same purpose, with providers acting on our behalf: Google Firebase Analytics (usage statistics) and Microsoft Clarity (recordings of how the app is used, with people lists masked and never recording the screen where you connect your account). Error and crash reports (with no screenshots and none of your social network data) are not sent to any third party: they go to GlitchTip, an error tracking system we host ourselves. We do not use any of this for advertising, and it is deleted with your account. (6) Campaign measurement: if you arrived through one of our ads, Meta (Facebook) receives a few events (that you signed up, connected an account or opened the demo) to measure those campaigns. On iPhone the advertising identifier is only used if you accept the tracking prompt; on Android we do not use it. Your stories, your viewers and your social network account are never sent.

Why. To provide the service: keep your story history, compute your stats and let you know what happens with your account (for example, if you need to reconnect it). We do not sell data or use it for third-party advertising. The app currently shows no ads. It includes Google's ads kit (Google Mobile Ads, AdMob), but it is turned off: we don't start it or use it to show ads or collect data. Before we turn ads on, we will explain here what data they use and ask for your permission (on iPhone, through Apple's tracking prompt). The advertising identifier is only used to measure our campaigns, as described in point (6).

People who view your stories ("viewers"). When you connect your account, we keep the list of who viewed each of your stories, the same list your social network already shows you for 48 hours. For each person we keep their username, name, profile photo (a small copy, because the social network's links expire), which stories they viewed and whether you follow each other. These people don't use StoryFan. We process their data to provide the service to you, the person who posts the story, based on the legitimate interest in seeing who views your own content. That's why we keep as little as possible, for a short time:

• Who viewed each story is deleted after 30 days. After that, only your story and how many people viewed it remain, without names.
• Profiles and photos of people who no longer appear in any view within that period or in your latest follower scan are deleted.
• From your follower list we keep only account numbers, except for people who follow you but don't view your stories, whom the app shows you.
• We don't use viewers' data for advertising, we don't sell it, and we don't show it to anyone but you.

If you viewed a story and don't want to appear: go to storyfan.lol/en/excluirme or email support@apphive.io. We immediately delete what we have about you across all accounts and stop saving it. To recognize you later, we keep only a pseudonymized identifier. You don't need to prove who you are: your parent or guardian can ask too. You can also ask for access to your data or object to its processing, and complain to your data protection authority.

How long. Your account and your data, while your account exists. If you disconnect an account, we delete its session immediately and keep its history for 30 days in case you reconnect it; after that it is deleted. If you delete your StoryFan account, we delete everything immediately. Story thumbnails and images are kept for 30 days on the free plan, 1 year on Pro and for as long as the account exists on Premium (if you stop paying, we keep what your previous plan kept for 30 more days and notify you before deleting it). Viewers' data, for the periods in the previous section.

With whom. Providers needed to operate, all under contract and only for these purposes: hosting of the app and the database (Hetzner) and its backups (Cloudflare R2, Amazon S3 and Backblaze B2); remote browser for sign-in (Browserbase); residential proxy (PacketStream); sign-in with Apple and Google; payments (Apple, Google and RevenueCat); notifications (Google's Firebase Cloud Messaging and Apple's push notification service); usage statistics (Google Firebase Analytics and Microsoft Clarity); email (Mailgun for internal team alerts and Cloudflare for support email); and, on the website, Google, Microsoft and Meta (analytics and ad measurement, only if you accept cookies). To measure our campaigns, Meta receives the events in point (6) and processes them under its own privacy policy.

Cookies and analytics. Our website uses the cookies it needs to work and, only if you accept them in the cookie notice, analytics and ad-measurement cookies: Google Analytics (how many people visit and where they come from), Microsoft Clarity (how the site is used, with session recording and text fields masked) and the Meta pixel (to measure our ads on Facebook and Instagram). If you don't accept them, they don't load. You can change your choice at any time from the "Cookies" link in the footer. These providers are in the United States.

Where. We process data mainly in the United States. Some providers may process it in other countries: the proxy network, and one of the encrypted database backups (Cloudflare R2), which is stored in Europe; for data from the European Economic Area, the United Kingdom and Switzerland we use the European Commission's Standard Contractual Clauses.

Your rights. You can access, correct or delete your data from the app (Settings) or by writing to us. You can disconnect your account at any time. If you think we didn't handle your request, you can complain to the data protection authority in your country.

Children. StoryFan is only for people aged 18 or over.

Changes. We will post any change on this page with its date.