← Back

Privacy Policy

Last updated: 10/1/2026

1. Controller

The operator of the app “stab.” is responsible for data processing. Contact us via the support channels inside the app.

2. Data we process

Account: email address, hashed password, username, sign-up time. Profile: display name, bio, pronouns, birthday, website, social links, Discord server, avatar, background, music, status. Content: messages, posts, profile views, friend requests. Technical: IP address, browser/device information, session cookies for authentication.

3. Country instead of location

We use no precise location. We only determine your country — from your device or browser language, or the coarse region of your IP address — so the app is shown in the right language. GPS coordinates or an exact address are never collected, stored or shared, and there is no “people nearby” feature. Your country is not displayed to other users.

4. Purposes and legal bases

Providing the Service (Art. 6(1)(b) GDPR). Security and abuse prevention (Art. 6(1)(f) GDPR). Language and translation based on country (Art. 6(1)(b) and (f) GDPR).

5. Recipients

We use processors for hosting, database, authentication and storage. They process data solely on our instructions.

6. Retention

Account and profile data are stored until you delete your account. Messages are stored until deleted by you or your chat partner.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection and to lodge a complaint with a supervisory authority. Consents can be withdrawn at any time.

8. Profile views

When you view a profile, its owner can see how many unique visitors it had. It is not shown who viewed the profile.

9. Security, minors, contact

We use encryption in transit (TLS), server-side access rules (Row Level Security) and secure password hashes. The Service is not intended for children under 13. For privacy questions, contact us via the support channels in the app.