Privacy Policy — Sticki.ly

Sticki.ly is a cross-platform sticky-note app for macOS, Windows, iPhone, Android, and the web. You can use one local sticki for free, or sign in to sync your stickis across your own devices. This Privacy Policy explains what we collect, what we never collect, and how to turn off optional analytics.

When you sign in, we collect your email address, a device identifier, the device name you provide implicitly through the operating system, and the platform identifier (macos, windows, ios, android, or web). We use this information to verify your purchase status, enforce the 10-device limit, and route synced stickis to the right account. If you stay in guest mode, no account is created and your free sticki remains local to that device/browser.

If cloud sync is enabled, we store the stickis you choose to sync: title, note body, timestamps, attachment metadata, and the single file you attach to a sticki. Attachment files and metadata needed to associate those files with your account are stored in Bravely-managed storage. Guest-mode stickis stay on your device/browser unless you later sign in and choose to migrate them.

Sticki.ly uses email-based verification codes instead of passwords. When you request a code, we store a hashed version of that code, your normalized email address, the requesting device ID, the request timestamp, and an expiration timestamp. Verification emails are delivered through our transactional email provider. We never return the code over the API, and expired or consumed codes are invalidated automatically.

For web purchases, our merchant-of-record billing provider processes billing, invoicing, and sales tax/VAT compliance. On iPhone and Android, purchases are processed by Apple and Google through in-app purchase flows. We store the minimum entitlement data needed to tell whether Sticki.ly Pro is active for your Bravely Account. We do not collect or store payment card details.

Sticki.ly uses product analytics across web, desktop, and mobile. Events cover things like onboarding completion, paywall views, purchase restores, sync failures, and update installs. We do not send your sticki contents, attachment file contents, filenames, or free-form text to analytics. You can disable analytics at any time in Settings on every client. Desktop apps may also fetch an update feed from bravely.dev to check for new signed releases; those checks include only version and platform context required to deliver the update.

We do not collect any of the following unless you explicitly attach or sync them yourself: • Your contacts, address book, calendar, or reminders • Your location • Your camera or microphone feed • Advertising identifiers (IDFA, GAID) • Payment card numbers or billing addresses • Data from apps outside Sticki.ly • The contents of files you did not attach to a sticki

We use the limited information above solely to: • Authenticate you with email verification codes • Sync your stickis and attachments across your own devices • Verify Sticki.ly Pro entitlements and restore purchases • Enforce storage and device limits • Deliver product support and investigate account issues • Improve the app through aggregate analytics if you have not opted out

We share only the minimum necessary information with service providers that help us run Sticki.ly: hosting and storage, verification emails, cross-platform entitlement state, web billing, mobile billing, and product analytics. We do not sell your data and we do not share it for advertising.

Synced stickis and attachments remain stored until you delete them, remove your account data, or ask us to delete your account. Purchase and entitlement records are retained as long as needed to honor your subscription history, restore access on reinstall, and process refunds. Analytics events are retained according to our workspace retention policy. To request deletion of your account data, email jeff@bravely.dev.

Sticki.ly is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated when changes take effect. Continued use of Sticki.ly after changes become effective constitutes acceptance of the revised policy.