Privacy Policy

Last updated October 28, 2026

What Stillfeed is

Stillfeed is an iOS app that loads instagram.com, youtube.com, x.com, reddit.com, snapchat.com, linkedin.com and tiktok.com in a built-in browser and, on your device and at your direction, hides Reels, Shorts, algorithmic feeds and related surfaces before they render.

What we collect

Stillfeed has no sign-up and no user accounts. We do not track you across other companies' apps and websites (we don't use Apple's App Tracking Transparency, and we don't collect your advertising identifier). We do use Meta's SDK, in a mode that doesn't collect your Apple advertising identifier, so we can measure whether our own Meta ad campaigns led to an install — not to show you ads or track you elsewhere. We do not sell personal information. What leaves your device falls into four groups.

Anonymous usage analytics (on by default; you can turn it off)

Stillfeed uses PostHog for product analytics and session replay, to understand how the app is used and to find confusing screens. This is on by default. To turn it off, open Settings → Privacy → "Share anonymous usage stats". It takes effect immediately and applies to future launches. Turning it off stops all collection and recording and discards the anonymous ID on your device; if you turn it back on, a new random ID is created.

• An anonymous identifier. PostHog's SDK generates a random ID on your device and attaches it to the analytics events so one device's events can be grouped together. It is not your name, email, Apple ID, advertising identifier (IDFA) or vendor identifier, and Stillfeed never links it to who you are — there are no accounts to link it to.
• Product events. Examples: the app was opened; which onboarding steps and paywall screens were viewed; that a purchase was started, completed, failed (in a coarse category such as "pending" or "error") or restored, and which store product; which platform (Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok) you opened; how many Reels, Shorts, Explore, trending, algorithmic-feed, Stories, feed or DM items were hidden, as aggregate counts per kind; that the daily time limit was reached; which Stillfeed settings you switched on or off; and that the stats screen was viewed; which part of Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok you were in — such as the feed, messages, search, a profile, Stories, a single post, or a blocked Reels/Shorts/Explore page — and how long you spent there, recorded as a category and never as a web address; whether you are signed in to each platform (yes or no, never which account); how many minutes a day you spent on each platform; your current Stillfeed settings and when you change them; which onboarding screens you completed or left; and your personal activity counters (described under "Personal activity counters" below), as whole numbers per category. These events also carry a few coarse facts about how you use Stillfeed itself: your subscription status (never subscribed, active, lapsed or refunded) and plan length (weekly, monthly, yearly or lifetime); roughly how long ago you installed the app (in ranges such as 2–3 days or 31–90 days) and on how many of the last seven days you opened it; your hidden-item total and streak; which platform you spent the most feed time on; roughly how many times you have seen the Pro screen and which version of it you were shown; whether Stillfeed notifications are allowed; and whether a Stillfeed widget is on your Home Screen or Lock Screen. Events never carry URLs, usernames, search terms, messages or the content of anything you typed or saw on Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — only the counts and categories described here, never which specific post, video, account or page.
• Standard device details. Each event also carries standard device and app details added by the PostHog SDK, such as app version, iOS version, device model, language and time zone. PostHog's servers see your IP address when your device connects to them, like any web request. We have switched off PostHog's GeoIP enrichment for our project, so PostHog does not use your IP address to derive your location, and Stillfeed does not collect your location.
• Session replay of Stillfeed's own screens. The SDK records a reconstruction of how Stillfeed's own native screens (for example onboarding, the paywall and Settings) looked and were interacted with. The built-in browser area is always masked: nothing you see, tap, scroll or type inside Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — feeds, videos, profiles, messages, logins and passwords — is recorded. All text input fields are also masked, network requests are not captured, and images are masked.
• No cross-app tracking. We don't combine your Stillfeed activity with data from other companies' apps or sites to target ads at you. We do send Meta a one-way signal — that Stillfeed was installed or opened, without your Apple advertising identifier — so we can tell whether our own Meta ad campaigns are working; Meta does not receive your platform browsing activity from us. We do not use Apple's App Tracking Transparency (so the app never asks to track you).

Crash reports (on by default; same switch)

Stillfeed uses Sentry only to receive crash reports and reports of the app freezing or being terminated by iOS for using too much memory, so we can fix them. It is not used for performance monitoring, profiling or session recording. It is controlled by the same Settings → Privacy → "Share anonymous usage stats" switch as the analytics above, and turning that switch off stops new crash reports immediately. A report captured in the moments just before you switch it off may still be uploaded.

• What a report contains. Technical details of the failure, such as the stack trace, app version, iOS version, device model and the app's build environment. It does not contain your name, email or any account information, and screenshots and view hierarchies are not attached.
• Nothing from inside the browser. Network and web-page address information is not collected, and any text in a report that refers to a web address is removed or redacted before it is sent, so the pages you visit on Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok do not reach Sentry. The terms in your word filters are not included.
• IP address. Like any web request, sending a report reveals your device's IP address to Sentry's servers.

Meta ad measurement (on by default; same switch)

Stillfeed includes Meta's software development kit (SDK), Core only, so we can measure whether our own Meta (Facebook and Instagram) ad campaigns led to an install. It automatically reports that the app was installed or opened. It is configured so that it does not collect your Apple advertising identifier (IDFA), we do not use Apple's App Tracking Transparency, and we do not use Meta's Advanced Matching. Meta's SDK also supports Apple's SKAdNetwork install attribution. We do not send Meta which posts, videos, accounts, messages, links or searches you saw or typed inside Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok. Like any web request, this reveals your device's IP address to Meta's servers. This is controlled by the same Settings → Privacy → "Share anonymous usage stats" switch as the analytics and crash reports above: when it is turned off, Stillfeed stops sending these signals to Meta. See Meta's privacy policy for how Meta handles data it receives.

Purchase data

Purchases are verified by RevenueCat, described under "Purchases" below. Stillfeed's anonymous analytics include the coarse subscription status and plan length described above, worked out on your device, but never a transaction, receipt, price, purchase date or RevenueCat identifier. RevenueCat's purchase records are not linked to the anonymous analytics ID: Stillfeed does not give RevenueCat the PostHog ID, and RevenueCat does not send purchase data to PostHog — and we do not combine the two datasets. Some of the same coarse values (your Stillfeed settings, which version of an in-app experiment you saw, and your plan) appear in both, as described on this page, but neither service is given the other's identifier.

What stays on your device

• Your Instagram, YouTube, X, Reddit, Snapchat, LinkedIn and TikTok sessions. When you log in inside Stillfeed's browser, your credentials go directly to Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — or, if you choose a sign-in option one of them offers (such as Google, Apple or Facebook), to that provider, in a sign-in window inside Stillfeed — never to us. Cookies and session data are stored locally by iOS's web view, exactly as in a normal browser, and are governed by those services' own privacy policies.
• Your preferences. Your onboarding answers and your settings are stored locally on your device. This includes the terms in your word filters, which stay on your device and are never sent to us or to any analytics or crash-reporting service (only whether any filter is switched on can appear in the anonymous analytics above). If you were given a gifted free week before Stillfeed stopped offering it, its start date is kept in the iOS Keychain, so it survives deleting and reinstalling the app; it never leaves your device.
• Weekly blocking stats. Stillfeed counts, on your device, how many Reels, Explore, Shorts, trending and algorithmic-feed items it hid, so it can show you a weekly summary and your streak, including on the optional Home Screen / Lock Screen widget, which reads them from storage shared only between the app and its own widget. The counts are stored in the app's local container (shared only with Stillfeed itself). The weekly summary itself is never transmitted; however, aggregate per-kind counts of hidden items are included in the anonymous analytics described above unless you turn them off.
• Personal activity counters. Stillfeed counts, on your device, simple whole-number tallies of what you came across and did while browsing — for example how many sponsored posts were shown, Stories opened, posts shown with like or view counts, notifications and comment sections opened, videos in X and Reddit feeds, YouTube autoplay or Up next plays, and how long you scroll in total, late at night and in your longest session. They are shown back to you in the app (for example on the Pro screen) and stored in the app's local container. Each tally is a count of a category of item; Stillfeed does not store which post, video, account, advertiser, link or page it was. Totals of these counters are also included, as whole numbers per category, on the anonymous analytics events described above, and are not sent if you turn off "Share anonymous usage stats". They are not a complete or exact measure of what a site showed you.
• Optional daily time limit. If you turn on the daily limit (it is off by default), Stillfeed measures on your device how long you spend browsing inside Stillfeed, only to enforce the limit you chose. It does not see your activity in any other app, and the measured time is never transmitted; the only related analytics signals are that the limit was switched on or off and that it was reached.
• A last-known entitlement snapshot. So Pro keeps working briefly offline, the app caches a small record of your subscription status (active or not, product, expiration date) locally. It's read only to decide whether to unlock Pro when RevenueCat can't be reached, and expires after a bounded grace window.

Purchases

Stillfeed Pro subscriptions (and the Lifetime purchase, which is no longer sold but still honoured for people who bought it) are processed by Apple through the App Store. We never see your payment details — Apple never shares your card information with us or with anyone else.

To know which plan you own, Stillfeed uses RevenueCat, a third-party subscription-management service, as our purchase and entitlement processor. RevenueCat receives an anonymous device/app-instance identifier along with your purchase and transaction history (which product, when, whether it's active) so it can confirm your entitlement. It also receives a few closed-vocabulary product signals tied to that same anonymous identifier — which screen opened the paywall, which version of an in-app experiment you saw, which platforms and optional extras you have turned on, and (for anyone who arrived via an Apple Search Ads link) the ad campaign, ad group and keyword that led to the install. None of this is your name, email, or anything you typed or saw inside Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok, and it is never your PostHog analytics ID — the two remain unlinked, as described above. It does not receive the PostHog anonymous ID, and the two are not joined. The RevenueCat identifier is random and device-scoped; RevenueCat does not receive your name, email, or payment card data, and we do not send them. Purchase verification is separate from the analytics switch in Settings and continues so Pro keeps working. Entitlement is resolved by RevenueCat's servers, with a bounded local cache (above) so Pro keeps working for a short time if you're offline. See RevenueCat's privacy policy for how they handle this data.

Apple Search Ads attribution. If you installed Stillfeed by tapping an Apple Search Ads result, Apple's AdServices framework lets us learn which ad campaign, ad group and keyword led to that install, via a one-time attribution token Apple itself provides — we never see your Apple ID, your search terms, or an advertising identifier. This does not require the "Allow Tracking" permission prompt because it is Apple's own first-party measurement of our own ad campaigns, not tracking across other companies' apps or websites. It is handled through RevenueCat the same way purchase verification is, and continues regardless of the "Share anonymous usage stats" setting, since it isn't usage analytics — it's a one-time install-attribution signal.

Network requests the app makes

• Instagram, YouTube, X, Reddit, Snapchat, LinkedIn and TikTok content is fetched directly from those services when you browse, like any browser.
• Filtering-rule updates. Periodically (at most every few hours while you use the app) Stillfeed downloads a signed rules file from our static site, stillfeed.pages.dev, which is hosted by Cloudflare Pages. The request carries no account information, no identifiers and no personal data. Like any web request, however, it reveals your device's IP address (and standard request details such as your device's user agent) to the hosting provider, Cloudflare; the app's rule downloads are not counted by any analytics, and we do not use or store IP addresses. (Pages of the website itself, viewed in a browser, may use Google Analytics if you agree to it; see "This website" below.) The file is cryptographically signed and the app rejects it if the signature does not verify. See Cloudflare's privacy policy.
• Analytics and session replay are sent to PostHog's European (EU) cloud, eu.i.posthog.com, unless you have turned off "Share anonymous usage stats" in Settings. See "Analytics processor" below.
• Crash reports are sent to Sentry, hosted in the European Union, unless you have turned off "Share anonymous usage stats" in Settings. See "Crash-report processor" below.
• Meta ad measurement signals (install and app-open) are sent to Meta's servers unless you have turned off "Share anonymous usage stats" in Settings. See "Meta ad measurement" above.
• Purchase, entitlement and attribution checks are sent to RevenueCat's API so the app can confirm your Pro status, as described under "Purchases" above.

Analytics processor

PostHog acts as our analytics processor. Stillfeed sends to PostHog Cloud EU the anonymous events, SDK data and native-screen session replays described above, and PostHog stores them for us on servers in the European Union. See PostHog's privacy policy for how they handle data.

Switching off "Share anonymous usage stats" stops all future collection and recording by the app and discards the anonymous ID on your device; a new random ID is created if you turn it back on. Purchase checks with RevenueCat continue so Pro keeps working. Session recordings are kept for 30 days and events for one year, after which PostHog deletes them. If you have a question or request about analytics data, email us at the address below; we may need the anonymous ID from your device to locate it.

Crash-report processor

Sentry acts as our crash-reporting processor. Stillfeed sends it only the crash and freeze reports described above, to the Sentry project we use in the European Union. See Sentry's privacy policy for how they handle data. Switching off "Share anonymous usage stats" stops new reports from being sent. For questions or requests about crash data, email us at the address below.

This website

This section covers only this website (stillfeed.pro and stillfeed.pages.dev) viewed in a web browser, not the Stillfeed app. The website uses Google Analytics to count visits and see which pages people read, only if you click "Accept" on the cookie banner. Until you do, the Google Analytics script is not loaded, no request is sent to Google and no analytics cookie is set.

If you accept, Google Analytics sets first-party cookies (named _ga and _ga_…) holding a random identifier, and sends Google the pages you view, how you arrived (for example the referring site or ad campaign), your approximate location derived from your IP address, and your browser, device type and screen size. We use this only in aggregate to understand how the website is used, and we never link it to the app's analytics or to your purchases. Your choice is remembered in your browser's local storage. You can change it at any time with the Cookie settings link at the bottom of every page; declining after accepting stops further collection and deletes the Google Analytics cookies on this site. See Google's privacy policy and how Google uses information from sites that use its services.

Separately, the website sends two kinds of anonymous event to PostHog (EU cloud): a page view when a page loads, and an App Store click when you click one of the App Store buttons (recording which button it was). Each event records the page address without its query string, the referring website's domain and any ad-campaign (utm_) tags in the link you arrived from. They set no cookie and store nothing in your browser. The events from a single page load share a random ID that exists only while that page is open, so we can see which pages lead to App Store clicks; a new ID is created on every page load, with no profile, so separate visits cannot be linked to each other, to you or to the app. As with any web request, PostHog receives your IP address; our PostHog project is set to discard it. This does not depend on the cookie banner, because nothing is stored on your device. The doomscrolling calculator and doomscrolling test work entirely in your browser: nothing you enter or answer is sent anywhere.

Children

Stillfeed is not directed at children under 13, and we do not knowingly collect personal information from children. There is no account, profile, or sign-in of any kind; the only information that leaves the device is the anonymous analytics, crash reports and Meta install/engagement signals (which you can turn off) and the purchase and transaction data described above.

Changes

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

Questions about privacy: [email protected]