Stickene RU / EN

Privacy policy

Updated October 27, 2026

This page describes what happens to data in the Stickene apps (Windows, macOS, Android) and on the stickene.info website. The author and the owner of the server is Ilya Gorshkov.

In short

  • No account, no ads, no analytics and no third-party tracking services.
  • Your notes live on your device. They reach a server only if you turn sync on yourself, and only in encrypted form.
  • I do not sell your data or pass it to anyone.

What is stored on your device

Stickers, tags, reminders, attachments and settings. The app does not send them anywhere by itself. Export to .md creates ordinary files in the folder you chose.

Sync (optional)

  • Devices are joined into a “bridge”. There is no registration, and nobody asks for a name or an email.
  • The content is encrypted on the device (AES-256-GCM), and the keys exist only on your devices. The server cannot read your stickers or attachments.
  • The server sees encrypted records and their size, the time of requests, random identifiers of the bridge and the devices, and the device name you gave it (stored in plain text). The device token is stored only as a hash.
  • Everything the app sends to the server goes over a secure connection (HTTPS).
  • The bridge server does not record IP addresses.
  • To delete the bridge data from the server, send me its identifier (Settings, “Sync”, “Copy”).

Bug reports

A report is sent only when you press “Report a bug” and send it yourself. It contains the app version, the operating system (on a phone, also the device model), the language, your description, a contact (if you gave one) and the end of the app log. The log is kept on your device; it holds app launches and failures, and has no text of your stickers. Before sending, you can open and read everything that will go. The report arrives in my email, and a copy stays on the server. I keep it while I look into the bug and then delete it.

Beta application

The email and the text you enter on the application page are seen only by me. They are needed to reply to you, and I delete them after I reply. To filter out spam, the server remembers for an hour how many applications came from one address. This is kept in memory and is never written down.

The website and updates

The website has no cookies and no counters. The web server keeps a request log with IP addresses for 30 days and then deletes it. Download and install numbers are counted from it, without addresses. The Windows and macOS apps and the APK from the website now and then ask the server whether there is a new version, and that request shows up in the log like any other. The Google Play version does not do this.

Android permissions

  • Internet: only for sync, if you turned it on.
  • Camera: only to read a QR code when you connect a new device. The image is neither saved nor sent.
  • Notifications, exact alarms and start after reboot: so reminders arrive on time and survive a reboot.
  • Battery optimization exemption: so the system does not postpone reminders.
  • Do Not Disturb access: only so that a reminder marked “Important” can sound.

Children

The app is not aimed at children and does not collect anything that would reveal an age.

Google Play

If you installed the app from Google Play, Google collects installation data under its own rules. I only get it as general statistics.

Your rights

You can ask what data of yours I have, and ask me to correct or delete it. I delete applications after I reply, and reports once I have dealt with the bug. Bridge data is deleted by the bridge identifier. Data on your device you erase yourself by uninstalling the app.

How to delete your data

  1. Write to support@stickene.info with the subject “Delete Stickene data”.
  2. If you used sync, send the bridge identifier: in the app, Settings, “Sync”, “Copy”. Without it I cannot find your bridge, because it is not linked to anything else.
  3. If you sent a bug report or a beta application, tell me which address or contact they came from.
  4. I will find and erase the data and reply when it is done.

What is deleted and how long it is kept:

  • Bridge data (encrypted records and attachments, the device list, identifiers): kept until you ask me to delete it, and then erased completely.
  • Bug reports: while I look into the bug, then deleted.
  • Beta applications (email and text): deleted after I reply.
  • The website request log (with IP addresses): 30 days, then it deletes itself.
  • Data on your device: removed together with the app.

Contact

Questions, requests to delete data and anything else about privacy — at support@stickene.info.

If this policy changes, I will update this page and the date above.