← Back to StillTabs Illustration of interlinked hands passing keys and a magnifying glass, on a warm peach background — a picture of trust, access, and scrutiny.

Privacy Policy

Effective date: June 11, 2026
Last updated: July 27, 2026

StillTabs is a digital-wellbeing app that lets you use social-media websites without the addictive parts — infinite scroll, Reels, Shorts, autoplay, and algorithmic feeds. We built it to respect your privacy by default. This policy explains exactly what that means, what little data we process, and the choices you have. It covers the StillTabs iOS app and the stilltabs.com website.

1. Who we are

StillTabs ("we", "us") is developed and operated by Albert Major and Cesare Maria Dalbagno, who act as data controllers for the processing described in this policy. You can reach us at support@stilltabs.com. A postal address is available on request and is on file with Apple for trader-status disclosure under the EU Digital Services Act.

2. The short version

The app works entirely on your device. It sends data off your device in exactly three cases, all under your control: anonymous usage analytics if you opt in (off by default), anonymous error reports under the same opt-in, and feedback messages you choose to write and send. The website stores your email if you join the waitlist. Everything we receive is stored on servers in the European Union. We never sell data, never show ads, never track you across apps or websites, and never see what you watch, read, search, or post on the platforms you use inside StillTabs.

3. Data we collect, and why

3.1 Anonymous usage analytics (opt-in, off by default)

If — and only if — you enable analytics (during onboarding or in Settings), the app sends anonymous usage events to PostHog, our analytics provider, hosted in the European Union (Frankfurt, Germany). We use this data solely to understand whether StillTabs works and to improve it.

Each event may include: which platform tab was used (for example "youtube"), the blocking mode in effect, session duration in seconds, whether the mode changed during a session, which app screen was viewed, app open/close events, the local hour and weekday, app version, and a random session identifier.

Events carry a randomly generated identifier created on your device. It is not your name, email, phone number, device serial, or advertising ID, and we never link it to your identity. We do not create user profiles. IP-based location lookup is disabled. We collect no precise or coarse location.

You can turn analytics off at any time in Settings → Privacy. Turning it off stops all transmission immediately and resets the random identifier, unlinking any future data from past data. You can also reset the identifier manually at any time without disabling analytics.

Legal basis: your consent (Art. 6(1)(a) GDPR), withdrawable at any time.

3.2 Error and crash diagnostics (same opt-in)

Under the same analytics opt-in, the app reports technical errors so we can fix bugs: unexpected app errors, embedded-page loading failures (for example, a platform page returning a server error), and failures of the app's own filtering scripts. These reports contain the technical error message, the affected platform tab, and the same anonymous identifier — never the content of pages, your searches, messages, or anything you typed. If analytics is off, no diagnostics are sent.

Legal basis: your consent (Art. 6(1)(a) GDPR).

3.3 In-app feedback (only when you send it)

The feedback form in the app lets you write a message to us. Feedback is delivered through the same EU analytics channel and therefore requires analytics to be enabled: if it is off, the send button is labelled "Enable & send" and pressing it turns analytics on — nothing is ever sent silently. Along with your message we attach non-identifying context: the active platform tab (or "launcher"), blocking mode, app version, and device language. We use feedback exclusively to improve StillTabs.

Please don't include personal details in feedback messages; if you do, we will not use them for any purpose other than reading your feedback, and you can ask us to delete them.

Legal basis: your consent, given by the act of sending (Art. 6(1)(a) GDPR).

3.4 Website waitlist (only if you sign up)

If you enter your email on stilltabs.com to join the waitlist, we store the email address and the signup date on our server in order to notify you about StillTabs availability and launch updates. We use it for nothing else, and we do not share it. You can leave the waitlist at any time by emailing support@stilltabs.com, and we will delete your address.

Legal basis: your consent (Art. 6(1)(a) GDPR).

4. Data that stays on your device

The app stores the following locally, on your device only. None of it is transmitted to us. You can erase all of it at any time via Settings → Privacy → Erase all StillTabs data, or by deleting the app.

The home-screen widget receives a small payload through Apple's App Groups mechanism: the list of platforms you have visible, their display colors, and your theme. This never leaves your device.

Camera, microphone, and photo library. StillTabs asks for these permissions only so you can take or upload photos and videos to the platforms you use inside the app (for example, posting a story). The media goes directly from your device to the platform you are posting to. We never receive, store, or analyze it.

5. Data we do not collect

We never collect or transmit:

There is no fingerprinting, and no data broker is involved, ever.

6. The embedded platforms

StillTabs displays social-media websites inside Apple's WKWebView. When you sign in to YouTube, Instagram, X, Reddit, Facebook, or TikTok inside the app, those sites set cookies and other browser storage on your device — exactly as they would in Safari. That data is managed by iOS WebKit and belongs to your relationship with those platforms, not to us. We do not read, collect, or share it. The Erase function removes every cookie, login token, and cache entry stored by the embedded sites, using Apple's WKWebsiteDataStore API.

By signing in to a platform through StillTabs you are using that platform directly, and you agree with that platform to its terms and conditions, its privacy policy, and its use of cookies and similar storage — exactly as if you had opened it in Safari. That agreement is between you and them; StillTabs is not a party to it and cannot vary it.

Your activity on those platforms is governed by their own privacy policies and terms:

7. Processors and international transfers

We use one processor: PostHog EU (PostHog, Inc., data hosted in Frankfurt, Germany) for the opt-in analytics, diagnostics, and feedback described above, under a data processing agreement. The waitlist is stored on our own EU-hosted web server. We transfer no personal data outside the European Economic Area. Your IP address is technically visible to any server your device contacts; we do not store it, use it to locate you, or attach it to analytics events.

8. Retention

Analytics and diagnostics events are retained for no longer than 12 months, after which they are deleted or reduced to aggregate statistics that contain no event-level data. Feedback messages are kept until processed and no longer than 12 months. Waitlist emails are kept until you unsubscribe or until shortly after launch communication ends, whichever comes first. Data on your device stays until you erase it or delete the app.

9. Your rights

Under the GDPR (and UK GDPR), you have the right to access, rectify, erase, restrict, object to, and port the personal data we hold about you, the right to withdraw consent at any time, and the right to lodge a complaint with your local data protection supervisory authority.

One honest caveat: analytics data is intentionally anonymous. We cannot tell which events came from you, so we are typically unable to find, hand over, or selectively delete "your" analytics events (Art. 11 GDPR). What you can always do is withdraw consent (stopping all collection instantly) and reset your random identifier, which permanently unlinks future data from past data. For waitlist emails and any feedback you sent, contact support@stilltabs.com and we will honor your request within one month.

We do not sell or share personal information within the meaning of the CCPA / CPRA.

10. Children

StillTabs is not directed at children under 13, and where local law sets a higher age of digital consent (up to 16 in some EU member states), it is not directed at children under that age. We do not knowingly collect personal data from children. The platforms accessible through StillTabs have their own age requirements.

11. Security

All transmission to our analytics provider and our server uses TLS encryption. Analytics data is anonymized before collection by design: no identifiers are collected that could link events to a real-world identity. Access to the waitlist and to the PostHog project is restricted to the StillTabs team. In the unlikely event of a breach involving personal data, we will notify the competent supervisory authority within 72 hours and affected users where required.

12. Tracking and advertising

We do not track you across apps or websites as defined by Apple's App Tracking Transparency framework, and we therefore never show the ATT permission prompt — there is nothing to ask about. We show no advertisements and share no data with advertisers or data brokers.

13. The StillTabs browser extension

The StillTabs browser extension (for Chromium browsers) runs entirely locally: it stores your settings in your browser's extension storage and makes no network requests of its own. It collects nothing.

14. Changes to this policy

If we change anything material — especially anything that sends new data off your device — we will update the date above and surface a notice in the app before the change takes effect.

15. Contact

Questions about privacy? Email support@stilltabs.com. See also our Terms of Service, of which this policy forms part.