The short version: Stillfeed has no accounts, no ads, and no first-party backend, and we never sell your data. Your Instagram, YouTube, X, Reddit, Snapchat, LinkedIn and TikTok activity stays inside the built-in browser: we never record which specific post, video, message, username, link or search you saw, tapped or typed there. We only note which part of each site you're in (for example the feed, messages or search), how long you spend there, whether you're signed in, and simple counts of things like how many sponsored posts or Stories you came across — as counts and categories, never which specific one. Three things do leave your device: (1) anonymous usage stats and screen recordings of Stillfeed's own screens, sent to PostHog; (2) crash reports, sent to Sentry; both are on by default and are switched off together in Settings → Privacy → "Share anonymous usage stats"; and (3) purchase status, checked by RevenueCat.
What Stillfeed is
Stillfeed is an iOS app that loads instagram.com, youtube.com, x.com, reddit.com, snapchat.com, linkedin.com and tiktok.com in a built-in browser and, on your device and at your direction, hides Reels, Shorts, algorithmic feeds and related surfaces before they render.
What we collect
Stillfeed has no sign-up and no user accounts, and we do not run advertising SDKs or track you across other companies' apps and websites. We do not sell or share personal information. What leaves your device falls into three groups.
Anonymous usage analytics (on by default; you can turn it off)
Stillfeed uses PostHog for product analytics and session replay, to understand how the app is used and to find confusing screens. This is on by default. To turn it off, open Settings → Privacy → "Share anonymous usage stats". It takes effect immediately and applies to future launches. Turning it off stops all collection and recording and discards the anonymous ID on your device; if you turn it back on, a new random ID is created.
An anonymous identifier. PostHog's SDK generates a random ID on your device and attaches it to the analytics events so one device's events can be grouped together. It is not your name, email, Apple ID, advertising identifier (IDFA) or vendor identifier, and Stillfeed never links it to who you are — there are no accounts to link it to.
Product events. Examples: the app was opened; which onboarding steps and paywall screens were viewed; that a purchase was started, completed, failed (in a coarse category such as "pending" or "error") or restored, and which store product; which platform (Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok) you opened; how many Reels, Shorts, Explore, trending, algorithmic-feed, Stories, feed or DM items were hidden, as aggregate counts per kind; that the daily time limit was reached; which Stillfeed settings you switched on or off; and that the stats screen was viewed; which part of Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok you were in — such as the feed, messages, search, a profile, Stories, a single post, or a blocked Reels/Shorts/Explore page — and how long you spent there, recorded as a category and never as a web address; whether you are signed in to each platform (yes or no, never which account); how many minutes a day you spent on each platform; your current Stillfeed settings and when you change them; which onboarding screens you completed or left; and your personal activity counters (described under "Personal activity counters" below), as whole numbers per category. These events also carry a few coarse facts about how you use Stillfeed itself: your subscription status (never subscribed, active, lapsed or refunded) and plan length (weekly, monthly, yearly or lifetime); roughly how long ago you installed the app (in ranges such as 2–3 days or 31–90 days) and on how many of the last seven days you opened it; your hidden-item total and streak; which platform you spent the most feed time on; roughly how many times you have seen the Pro screen and which version of it you were shown; whether Stillfeed notifications are allowed; and whether a Stillfeed widget is on your Home Screen or Lock Screen. Events never carry URLs, usernames, search terms, messages or the content of anything you typed or saw on Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — only the counts and categories described here, never which specific post, video, account or page.
Standard device details. Each event also carries standard device and app details added by the PostHog SDK, such as app version, iOS version, device model, language and time zone. PostHog's servers see your IP address when your device connects to them, like any web request. We have switched off PostHog's GeoIP enrichment for our project, so PostHog does not use your IP address to derive your location, and Stillfeed does not collect your location.
Session replay of Stillfeed's own screens. The SDK records a reconstruction of how Stillfeed's own native screens (for example onboarding, the paywall and Settings) looked and were interacted with. The built-in browser area is always masked: nothing you see, tap, scroll or type inside Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — feeds, videos, profiles, messages, logins and passwords — is recorded. All text input fields are also masked, network requests are not captured, and images are masked.
No cross-app tracking. We do not combine this data with data from other companies' apps or websites, do not use it for advertising, and do not use Apple's App Tracking Transparency (so the app never asks to track you).
Crash reports (on by default; same switch)
Stillfeed uses Sentry only to receive crash reports and reports of the app freezing or being terminated by iOS for using too much memory, so we can fix them. It is not used for performance monitoring, profiling or session recording. It is controlled by the same Settings → Privacy → "Share anonymous usage stats" switch as the analytics above, and turning that switch off stops new crash reports immediately. A report captured in the moments just before you switch it off may still be uploaded.
What a report contains. Technical details of the failure, such as the stack trace, app version, iOS version, device model and the app's build environment. It does not contain your name, email or any account information, and screenshots and view hierarchies are not attached.
Nothing from inside the browser. Network and web-page address information is not collected, and any text in a report that refers to a web address is removed or redacted before it is sent, so the pages you visit on Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok do not reach Sentry. The terms in your word filters are not included.
IP address. Like any web request, sending a report reveals your device's IP address to Sentry's servers.
Purchase data
Purchases are verified by RevenueCat, described under "Purchases" below. Stillfeed's anonymous analytics include the coarse subscription status and plan length described above, worked out on your device, but never a transaction, receipt, price, purchase date or RevenueCat identifier. RevenueCat's purchase records are not linked to the anonymous analytics ID: Stillfeed does not give RevenueCat the PostHog ID, and RevenueCat does not send purchase data to PostHog — and we do not combine the two datasets. Some of the same coarse values (your Stillfeed settings, which version of an in-app experiment you saw, and your plan) appear in both, as described on this page, but neither service is given the other's identifier.
What stays on your device
Your Instagram, YouTube, X, Reddit, Snapchat, LinkedIn and TikTok sessions. When you log in inside Stillfeed's browser, your credentials go directly to Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok — or, if you choose a sign-in option one of them offers (such as Google, Apple or Facebook), to that provider, in a sign-in window inside Stillfeed — never to us. Cookies and session data are stored locally by iOS's web view, exactly as in a normal browser, and are governed by those services' own privacy policies.
Your preferences. Your onboarding answers and your settings are stored locally on your device. This includes the terms in your word filters, which stay on your device and are never sent to us or to any analytics or crash-reporting service (only whether any filter is switched on can appear in the anonymous analytics above). If you were given a gifted free week before Stillfeed stopped offering it, its start date is kept in the iOS Keychain, so it survives deleting and reinstalling the app; it never leaves your device.
Weekly blocking stats. Stillfeed counts, on your device, how many Reels, Explore, Shorts, trending and algorithmic-feed items it hid, so it can show you a weekly summary and your streak, including on the optional Home Screen / Lock Screen widget, which reads them from storage shared only between the app and its own widget. The counts are stored in the app's local container (shared only with Stillfeed itself). The weekly summary itself is never transmitted; however, aggregate per-kind counts of hidden items are included in the anonymous analytics described above unless you turn them off.
Personal activity counters. Stillfeed counts, on your device, simple whole-number tallies of what you came across and did while browsing — for example how many sponsored posts were shown, Stories opened, posts shown with like or view counts, notifications and comment sections opened, videos in X and Reddit feeds, YouTube autoplay or Up next plays, and how long you scroll in total, late at night and in your longest session. They are shown back to you in the app (for example on the Pro screen) and stored in the app's local container. Each tally is a count of a category of item; Stillfeed does not store which post, video, account, advertiser, link or page it was. Totals of these counters are also included, as whole numbers per category, on the anonymous analytics events described above, and are not sent if you turn off "Share anonymous usage stats". They are not a complete or exact measure of what a site showed you.
Optional daily time limit. If you turn on the daily limit (it is off by default), Stillfeed measures on your device how long you spend browsing inside Stillfeed, only to enforce the limit you chose. It does not see your activity in any other app, and the measured time is never transmitted; the only related analytics signals are that the limit was switched on or off and that it was reached.
A last-known entitlement snapshot. So Pro keeps working briefly offline, the app caches a small record of your subscription status (active or not, product, expiration date) locally. It's read only to decide whether to unlock Pro when RevenueCat can't be reached, and expires after a bounded grace window.
Purchases
Stillfeed Pro subscriptions (and the Lifetime purchase, which is no longer sold but still honoured for people who bought it) are processed by Apple through the App Store. We never see your payment details — Apple never shares your card information with us or with anyone else.
To know which plan you own, Stillfeed uses RevenueCat, a third-party subscription-management service, as our purchase and entitlement processor. RevenueCat receives an anonymous device/app-instance identifier along with your purchase and transaction history (which product, when, whether it's active) so it can confirm your entitlement. It also receives a few closed-vocabulary product signals tied to that same anonymous identifier — which screen opened the paywall, which version of an in-app experiment you saw, which platforms and optional extras you have turned on, and (for anyone who arrived via an Apple Search Ads link) the ad campaign, ad group and keyword that led to the install. None of this is your name, email, or anything you typed or saw inside Instagram, YouTube, X, Reddit, Snapchat, LinkedIn or TikTok, and it is never your PostHog analytics ID — the two remain unlinked, as described above. It does not receive the PostHog anonymous ID, and the two are not joined. The RevenueCat identifier is random and device-scoped; RevenueCat does not receive your name, email, or payment card data, and we do not send them. Purchase verification is separate from the analytics switch in Settings and continues so Pro keeps working. Entitlement is resolved by RevenueCat's servers, with a bounded local cache (above) so Pro keeps working for a short time if you're offline. See RevenueCat's privacy policy for how they handle this data.
Apple Search Ads attribution. If you installed Stillfeed by tapping an Apple Search Ads result, Apple's AdServices framework lets us learn which ad campaign, ad group and keyword led to that install, via a one-time attribution token Apple itself provides — we never see your Apple ID, your search terms, or an advertising identifier. This does not require the "Allow Tracking" permission prompt because it is Apple's own first-party measurement of our own ad campaigns, not tracking across other companies' apps or websites. It is handled through RevenueCat the same way purchase verification is, and continues regardless of the "Share anonymous usage stats" setting, since it isn't usage analytics — it's a one-time install-attribution signal.
Network requests the app makes
Instagram, YouTube, X, Reddit, Snapchat, LinkedIn and TikTok content is fetched directly from those services when you browse, like any browser.
Filtering-rule updates. Periodically (at most every few hours while you use the app) Stillfeed downloads a signed rules file from our static site, stillfeed.pages.dev, which is hosted by Cloudflare Pages. The request carries no account information, no identifiers and no personal data. Like any web request, however, it reveals your device's IP address (and standard request details such as your device's user agent) to the hosting provider, Cloudflare; we have no analytics or logging of our own on that site and do not use or store IP addresses. The file is cryptographically signed and the app rejects it if the signature does not verify. See Cloudflare's privacy policy.
Analytics and session replay are sent to PostHog's European (EU) cloud, eu.i.posthog.com, unless you have turned off "Share anonymous usage stats" in Settings. See "Analytics processor" below.
Crash reports are sent to Sentry, hosted in the European Union, unless you have turned off "Share anonymous usage stats" in Settings. See "Crash-report processor" below.
Purchase, entitlement and attribution checks are sent to RevenueCat's API so the app can confirm your Pro status, as described under "Purchases" above.
Analytics processor
PostHog acts as our analytics processor. Stillfeed sends to PostHog Cloud EU the anonymous events, SDK data and native-screen session replays described above, and PostHog stores them for us on servers in the European Union. See PostHog's privacy policy for how they handle data.
Switching off "Share anonymous usage stats" stops all future collection and recording by the app and discards the anonymous ID on your device; a new random ID is created if you turn it back on. Purchase checks with RevenueCat continue so Pro keeps working. Session recordings are kept for 30 days and events for one year, after which PostHog deletes them. If you have a question or request about analytics data, email us at the address below; we may need the anonymous ID from your device to locate it.
Crash-report processor
Sentry acts as our crash-reporting processor. Stillfeed sends it only the crash and freeze reports described above, to the Sentry project we use in the European Union. See Sentry's privacy policy for how they handle data. Switching off "Share anonymous usage stats" stops new reports from being sent. For questions or requests about crash data, email us at the address below.
Children
Stillfeed is not directed at children under 13, and we do not knowingly collect personal information from children. There is no account, profile, or sign-in of any kind; the only information that leaves the device is the anonymous analytics and crash reports (which you can turn off) and the purchase and transaction data described above.
Changes
If this policy changes, the updated version will be posted at this address with a new effective date.