Privacy Policy

Controller

Daniel Goletz · stashy@letzgo.me

In short

stashy is a client for your own, self-hosted Stash server. There is no sign-up, no user account, no advertising and no analytics or tracking. Your library is loaded directly from your server; the developer never sees it. The only data the developer receives concerns purchases of stashy+, handled through RevenueCat (see below).

Your Stash server

Server address, port and API key are stored only on your device (iOS Keychain, encrypted storage on Android). All scenes, images, metadata and streams travel directly between your device and your server. The developer operates no servers that this traffic passes through.

What stays on your device

• Cached images and metadata, downloaded videos and your settings (tabs, filters, appearance, statistics).
• AI subtitles, translation and AI Motion run on the device. Speech and translation models are downloaded once from Apple, Google (ML Kit) or alphacephei.com (Vosk, Android); these providers technically see your device’s IP address.

This data never leaves your device and is removed when you delete the app.

Optional devices

If you enable The Handy, stashy uploads the funscript of the current scene to Handy’s cloud (handyfeeling.com, Sweet Tech AS) together with your connection key, so the device can play it. Stash URLs and API keys are never sent. Intiface / Buttplug talks to an app in your local network, Love Spouse uses Bluetooth; neither involves the developer.

Purchases (stashy+) and RevenueCat

Payments are processed exclusively by Apple (App Store) or Google (Google Play). The developer receives no payment details and no information about your Apple ID or Google account.

To verify purchases and unlock stashy+ across launches and devices, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat processes:

• a random, anonymous app user ID created on first launch,
• the store receipt or purchase token, product, purchase and expiry dates, price, currency and country,
• app version, operating system and device model, and your IP address (technically required).

This data is not linked to your name or email address and is not used for advertising or tracking. The developer sees aggregated revenue and individual purchase records under the anonymous ID. Legal basis is Art. 6(1)(b) GDPR (performance of the purchase contract). Data transferred to the USA is protected by the EU Standard Contractual Clauses in RevenueCat’s data processing agreement. See revenuecat.com/privacy.

Subscriptions are managed and cancelled in your Apple or Google account settings.

Your rights and data deletion

You have the right to access, rectification, erasure, restriction and objection, and to lodge a complaint with a data protection authority. As purchase records are stored only under an anonymous ID, write to stashy@letzgo.me and use Restore Purchases first if you want your purchase data deleted; we will remove it at RevenueCat.

Changes

If the app’s features change, this policy will be updated. The version published here applies.