The short version: Stillfeed has no accounts, no ads, and no first-party backend, and we never sell your data. Your Instagram, YouTube, X and Reddit activity stays inside the built-in browser: we never record what you see, tap or type there — no posts, videos, messages, usernames, links or searches. We only note which part of each site you're in (for example the feed, messages or search), how long you spend there, and whether you're signed in. Three things do leave your device: (1) anonymous usage stats and screen recordings of Stillfeed's own screens, sent to PostHog; (2) crash reports, sent to Sentry; both are on by default and are switched off together in Settings → Privacy → "Share anonymous usage stats"; and (3) purchase status, checked by RevenueCat.
What Stillfeed is
Stillfeed is an iOS app that loads instagram.com, youtube.com, x.com and reddit.com in a built-in browser and, on your device and at your direction, hides Reels, Shorts, algorithmic feeds and related surfaces before they render.
What we collect
Stillfeed has no sign-up and no user accounts, and we do not run advertising SDKs or track you across other companies' apps and websites. We do not sell or share personal information. What leaves your device falls into three groups.
Anonymous usage analytics (on by default; you can turn it off)
Stillfeed uses PostHog for product analytics and session replay, to understand how the app is used and to find confusing screens. This is on by default. To turn it off, open Settings → Privacy → "Share anonymous usage stats". It takes effect immediately and applies to future launches. Turning it off stops all collection and recording and discards the anonymous ID on your device; if you turn it back on, a new random ID is created.
An anonymous identifier. PostHog's SDK generates a random ID on your device and attaches it to the analytics events so one device's events can be grouped together. It is not your name, email, Apple ID, advertising identifier (IDFA) or vendor identifier, and Stillfeed never links it to who you are — there are no accounts to link it to.
Product events. Examples: the app was opened; which onboarding steps and paywall screens were viewed; that a purchase was started, completed, failed (in a coarse category such as "pending" or "error") or restored, and which store product; which platform (Instagram, YouTube, X or Reddit) you opened; how many Reels, Shorts, Explore, trending, algorithmic-feed, Stories, feed or DM items were hidden, as aggregate counts per kind; that the daily time limit was reached; which Stillfeed settings you switched on or off; and that the stats screen was viewed; which part of Instagram, YouTube, X or Reddit you were in — such as the feed, messages, search, a profile, Stories, a single post, or a blocked Reels/Shorts/Explore page — and how long you spent there, recorded as a category and never as a web address; whether you are signed in to each platform (yes or no, never which account); how many minutes a day you spent on each platform; your current Stillfeed settings and when you change them; and which onboarding screens you completed or left. Events never carry URLs, usernames, search terms, messages or anything you typed or saw on Instagram, YouTube, X or Reddit.
Standard device details. Each event also carries standard device and app details added by the PostHog SDK, such as app version, iOS version, device model, language and time zone. PostHog's servers see your IP address when your device connects to them, like any web request. We have switched off PostHog's GeoIP enrichment for our project, so PostHog does not use your IP address to derive your location, and Stillfeed does not collect your location.
Session replay of Stillfeed's own screens. The SDK records a reconstruction of how Stillfeed's own native screens (for example onboarding, the paywall and Settings) looked and were interacted with. The built-in browser area is always masked: nothing you see, tap, scroll or type inside Instagram, YouTube, X or Reddit — feeds, videos, profiles, messages, logins and passwords — is recorded. All text input fields are also masked, network requests are not captured, and images are masked.
No cross-app tracking. We do not combine this data with data from other companies' apps or websites, do not use it for advertising, and do not use Apple's App Tracking Transparency (so the app never asks to track you).
Crash reports (on by default; same switch)
Stillfeed uses Sentry only to receive crash reports and reports of the app freezing or being terminated by iOS for using too much memory, so we can fix them. It is not used for performance monitoring, profiling or session recording. It is controlled by the same Settings → Privacy → "Share anonymous usage stats" switch as the analytics above, and turning that switch off stops new crash reports immediately. A report captured in the moments just before you switch it off may still be uploaded.
What a report contains. Technical details of the failure, such as the stack trace, app version, iOS version, device model and the app's build environment. It does not contain your name, email or any account information, and screenshots and view hierarchies are not attached.
Nothing from inside the browser. Network and web-page address information is not collected, and any text in a report that refers to a web address is removed or redacted before it is sent, so the pages you visit on Instagram, YouTube, X or Reddit do not reach Sentry. The terms in your word filters are not included.
IP address. Like any web request, sending a report reveals your device's IP address to Sentry's servers.
Purchase data
Purchases are verified by RevenueCat, described under "Purchases" below. Purchase data is not linked to the anonymous analytics ID: Stillfeed does not give RevenueCat the PostHog ID, and RevenueCat does not send purchase data to PostHog.
What stays on your device
Your Instagram, YouTube, X and Reddit sessions. When you log in inside Stillfeed's browser, your credentials go directly to Instagram, YouTube, X or Reddit — never to us. Cookies and session data are stored locally by iOS's web view, exactly as in a normal browser, and are governed by those services' own privacy policies.
Your preferences. Your onboarding answers and your settings are stored locally on your device. This includes the terms in your word filters, which stay on your device and are never sent to us or to any analytics or crash-reporting service (only whether any filter is switched on can appear in the anonymous analytics above). If you were given a gifted free week before Stillfeed stopped offering it, its start date is kept in the iOS Keychain, so it survives deleting and reinstalling the app; it never leaves your device.
Weekly blocking stats. Stillfeed counts, on your device, how many Reels, Explore, Shorts, trending and algorithmic-feed items it hid, so it can show you a weekly summary and your streak, including on the optional Home Screen / Lock Screen widget, which reads them from storage shared only between the app and its own widget. The counts are stored in the app's local container (shared only with Stillfeed itself). The weekly summary itself is never transmitted; however, aggregate per-kind counts of hidden items are included in the anonymous analytics described above unless you turn them off.
Optional daily time limit. If you turn on the daily limit (it is off by default), Stillfeed measures on your device how long you spend browsing inside Stillfeed, only to enforce the limit you chose. It does not see your activity in any other app, and the measured time is never transmitted; the only related analytics signals are that the limit was switched on or off and that it was reached.
A last-known entitlement snapshot. So Pro keeps working briefly offline, the app caches a small record of your subscription status (active or not, product, expiration date) locally. It's read only to decide whether to unlock Pro when RevenueCat can't be reached, and expires after a bounded grace window.
Purchases
Stillfeed Pro subscriptions (and the Lifetime purchase, which is no longer sold but still honoured for people who bought it) are processed by Apple through the App Store. We never see your payment details — Apple never shares your card information with us or with anyone else.
To know which plan you own, Stillfeed uses RevenueCat, a third-party subscription-management service, as our purchase and entitlement processor. RevenueCat receives an anonymous device/app-instance identifier along with your purchase and transaction history (which product, when, whether it's active) so it can confirm your entitlement. It does not receive the PostHog anonymous ID, and the two are not joined. The RevenueCat identifier is random and device-scoped; RevenueCat does not receive your name, email, or payment card data, and we do not send them. Purchase verification is separate from the analytics switch in Settings and continues so Pro keeps working. Entitlement is resolved by RevenueCat's servers, with a bounded local cache (above) so Pro keeps working for a short time if you're offline. See RevenueCat's privacy policy for how they handle this data.
Network requests the app makes
Instagram, YouTube, X and Reddit content is fetched directly from those services when you browse, like any browser.
Filtering-rule updates. Periodically (at most every few hours while you use the app) Stillfeed downloads a signed rules file from our static site, stillfeed.pages.dev, which is hosted by Cloudflare Pages. The request carries no account information, no identifiers and no personal data. Like any web request, however, it reveals your device's IP address (and standard request details such as your device's user agent) to the hosting provider, Cloudflare; we have no analytics or logging of our own on that site and do not use or store IP addresses. The file is cryptographically signed and the app rejects it if the signature does not verify. See Cloudflare's privacy policy.
Analytics and session replay are sent to PostHog's European (EU) cloud, eu.i.posthog.com, unless you have turned off "Share anonymous usage stats" in Settings. See "Analytics processor" below.
Crash reports are sent to Sentry, hosted in the European Union, unless you have turned off "Share anonymous usage stats" in Settings. See "Crash-report processor" below.
Purchase and entitlement checks are sent to RevenueCat's API so the app can confirm your Pro status, as described under "Purchases" above.
Analytics processor
PostHog acts as our analytics processor. Stillfeed sends to PostHog Cloud EU the anonymous events, SDK data and native-screen session replays described above, and PostHog stores them for us on servers in the European Union. See PostHog's privacy policy for how they handle data.
Switching off "Share anonymous usage stats" stops all future collection and recording by the app and discards the anonymous ID on your device; a new random ID is created if you turn it back on. Purchase checks with RevenueCat continue so Pro keeps working. Session recordings are kept for 30 days and events for one year, after which PostHog deletes them. If you have a question or request about analytics data, email us at the address below; we may need the anonymous ID from your device to locate it.
Crash-report processor
Sentry acts as our crash-reporting processor. Stillfeed sends it only the crash and freeze reports described above, to the Sentry project we use in the European Union. See Sentry's privacy policy for how they handle data. Switching off "Share anonymous usage stats" stops new reports from being sent. For questions or requests about crash data, email us at the address below.
Children
Stillfeed is not directed at children under 13, and we do not knowingly collect personal information from children. There is no account, profile, or sign-in of any kind; the only information that leaves the device is the anonymous analytics and crash reports (which you can turn off) and the purchase and transaction data described above.
Changes
If this policy changes, the updated version will be posted at this address with a new effective date.