Privacy policy

Who is responsible

The data controller is OBSB SRL, a company under Belgian law, rue du Mouligneau (G.) 71, 7011 Mons, Belgium, registered with the Crossroads Bank for Enterprises under number 1039.615.415. For any question about your data: info@itstillmine.com.

This policy covers this site and the Still Mine app (ItStillMine on the App Store and Google Play).

In the app: what stays on your phone

Your Snapchat export, your photos and videos, the rebuilt memories and their GPS positions are processed on your phone. They are never sent to our servers and we hold no copy of them.

There is no account: no name, no password, no login. The app never asks for your Snapchat credentials.

In the app: what our servers receive

On first launch, the app creates an installation: a random identifier tied to this phone, not to you as a person. It sends the platform (iOS or Android), the device model, the system and app versions, the language and the time zone.

When you open an export, the app sends, for each ZIP file, a fingerprint (a SHA-256 digest computed from its size and its table of contents), its size and its number of files. During the rebuild, it sends the processing state: number of memories, progress, completion or failure code. This data links your purchase to your export and lets an interrupted run resume without paying twice.

If a run fails, the app may send a diagnostic report. It contains the ZIP catalogue: each file's path, size, compression method, date and checksum (CRC32), up to 5,000 entries, with the app and system versions and the failure code. File names in a Snapchat export carry the date of each memory, so those dates are part of the report. The report never contains a photo, a video or a GPS position.

Crash reports

When the app crashes or hits an error, it sends a technical report to Better Stack, our error-tracking tool: the error trace, the device model and system, the app version and the last technical steps before the error. The report carries the installation identifier, to link errors from the same phone. File paths and memory names are masked before sending, and no screenshot is attached.

These reports do not depend on the “Usage statistics” setting: without them, we cannot fix failures.

Usage statistics

The app sends usage events to our own server: screens viewed, steps completed, purchase outcome, processing time, errors shown. They are counts, durations and values from a closed list, tied to the installation identifier. They never contain a memory, a file name, a GPS position or an email address. No third-party analytics or advertising tool is built into the app.

These statistics are on by default. You can turn them off at any time in Settings › Usage statistics: nothing more is sent, and events waiting on the phone are deleted at the next launch.

Purchases

Purchases go through Apple's App Store or Google Play, which process your payment: we never see your card details. RevenueCat, our purchase-validation provider, receives the transaction linked to the installation identifier. Our server then receives the purchase status (valid, used, refunded) and links it to an export. Apple and Google also process data on their own behalf, under their own policies.

Place names

To show a city name instead of coordinates, the app asks your phone's system geocoding service (Apple on iPhone, Google on Android) to translate a memory's GPS coordinates. Those coordinates therefore go to Apple or Google, through the system, and not to us. The result stays on the phone. On Android, this feature asks for location permission: if you refuse, the app shows the coordinates and nothing is sent.

Email address in the app

The app lets you note an email address. Today, it stays on your phone and is not sent to our servers.

If you ever give it to us, it will be with two separate consents: one to receive confirmations about your purchases, the other to receive our news. Accepting the first never implies the second. The address does not create an account.

Reminders

Reminders are local notifications, scheduled on your phone. The app creates no push notification token and sends us nothing to schedule them.

Deleting your app data

Settings › Delete my data erases what Still Mine rebuilt on this phone. This button does not touch our servers, on purpose: the installation stays there so that your purchase is not lost. Memories already saved to your gallery stay in place. Uninstalling the app does not delete anything on our servers either.

To delete what our servers keep (installation, imports, purchases, diagnostics, statistics), write to info@itstillmine.com with the device ID shown at the bottom of Settings. This deletion is final: a purchase not yet used is lost.

On this site

Basic technical logs needed to run the site. Aggregate audience statistics via Umami, which we host ourselves: it sets no cookies, stores no identifier, and never builds a profile of you. Google Analytics, which does use cookies, runs only if you accept the banner.

The deletion-alert list

If you ask to be told when Snapchat starts deleting Memories, we store your email address, the language you were reading in, the page you signed up from, and the date. The page is there to tell us which articles are useful; it identifies an article, not you.

The legal basis is your consent, and the promise on the form is the limit of what the address is used for: we write when something official changes and on the day deletions are confirmed. It is not a newsletter, it is never used for advertising, and it is never shared or sold. Every email carries a one-click unsubscribe link that works forever — no account, no login, no reply needed. We keep the record until you unsubscribe, and we delete the whole list once the deletion window has passed and the alert no longer has a subject.

Why, and on what legal basis

Installation, import tracking and purchases: performance of the contract, that is, providing the service you asked for. Crash and diagnostic reports: our legitimate interest in running and fixing the app, limited to what is strictly needed. App usage statistics: our legitimate interest in knowing where the app gets stuck, with an opt-out available at any time. The alert list, and the app email address if you give it to us: your consent. Cookie-based site analytics: your consent, which you can withdraw at any time. Cookieless site statistics: our legitimate interest in knowing whether the site works; they involve no personal data. We rely on data minimisation and limited retention by design.

Encryption

Your media never leaves your phone, so there is no transfer to protect. Everything the app and the site send goes over HTTPS.

How long we keep it

There is nothing of your archive to keep: it stays on your device. Installation, imports and purchase status: as long as the installation exists, so that your purchase stays valid, and until you ask for deletion. Diagnostic reports and app usage statistics: until you ask for deletion. Crash reports and technical logs: as long as needed to fix errors and run the service. We may keep longer what a legal obligation requires us to keep. The alert list is covered in its own section above.

Who else is involved

Hosting of the site and the app's server: OVH SAS, in France. Site statistics: Umami, self-hosted on our own European server — no data leaves to a third party. Google Analytics, loaded only after your consent. Purchases: Apple (App Store) and Google (Google Play), then RevenueCat to validate purchases. Crash reports: Better Stack. Place names: Apple's or Google's geocoding service, called by your phone. Alert emails: Resend (email delivery), which receives only the addresses on that list.

RevenueCat and Better Stack process this data in the United States. These transfers rely on the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses.

We do not sell or share your data, and it is never used for advertising or AI training.

Your rights

Under the GDPR you can access, correct, delete, or export your data, object to processing, and withdraw consent — at any time. Write to info@itstillmine.com and a person will handle it. For the app, include the device ID shown at the bottom of Settings: without an account, it is the only way to find your data.

Cookies

We set no analytics cookies unless you accept them. Our self-hosted Umami statistics set no cookie at all, which is why they need no banner. The consent banner remembers your choice, which you can change at any time. Essential technical storage needed to run the site may still be used.

Complaints

If you believe we've mishandled your data, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, autoriteprotectiondonnees.be) — but we'd rather you tell us first.