Privacy Policy

Last updated: May 2026

Li Studios LTD ("Stamped", "we", "us") respects your privacy. This policy explains what personal data we collect when you use the Stamped mobile app or stamped.gg, how we use it, who we share it with, and how to exercise your rights.

Note: this page is the published version that will be linked from the app and the App Store. Before launch, this draft must be reviewed by a UK solicitor.

1. Who we are

Li Studios LTD is the data controller for the personal data we collect about you. Contact: privacy@stamped.gg.

2. What we collect

Account

  • Email address (required for sign-up)
  • Username and optional display name
  • Country (self-declared or inferred from IP at sign-up)
  • Date of birth (to verify you are old enough to play and to gate prize eligibility at 18+)
  • Optional bio and avatar image

Gameplay

  • Your stamp claims, predictions, points, coins and streaks
  • Private stamp memories you create (notes, photos, mood, rating)
  • Friend connections and friend requests
  • Device fingerprint, app version, platform and push token (for anti-cheat and notifications)

Purchases

  • Transaction IDs and product IDs from Apple App Store / Google Play (no card data)

Diagnostics

  • Crash reports (Sentry) — no personally identifying content
  • Product analytics (PostHog) — IPs hashed; no advertising identifiers

3. Lawful bases

We rely on the following lawful bases under the UK GDPR:

  • Contract — to provide the Stamped service you sign up for.
  • Legitimate interests — to detect and prevent cheating, secure the app, and improve the product.
  • Consent — for marketing emails and optional features (you can withdraw at any time).
  • Legal obligation — to comply with tax, accounting and prize-fulfilment laws.

4. Who we share data with

Our processors:

  • Supabase — database, auth and storage (EU region)
  • Vercel — web hosting
  • Apple, Google — sign-in and in-app purchases on their platforms
  • RevenueCat — receipt validation for in-app purchases
  • Sentry — crash reporting (EU region)
  • PostHog — product analytics (EU region)
  • Cloudflare — WAF, image delivery and bot protection
  • Postmark / Resend — transactional email

We do not sell your personal data and we do not share it with advertisers.

5. International transfers

We primarily host in the EU. Some processors (Apple, Google, Sentry, PostHog, Cloudflare, Vercel) may transfer data to the US under appropriate safeguards (UK IDTA / EU SCCs).

6. How long we keep your data

  • Active account: while your account exists.
  • After deletion request: anonymised within 14 days; fully erased within 104 days.
  • Tax and accounting records: 7 years where required.
  • Crash logs: 90 days.
  • Analytics events: 12 months.

7. Your rights

You can ask us to:

  • Access your data — Settings → Export My Data (downloads everything we hold)
  • Delete your data — Settings → Delete Account, or stamped.gg/delete-account
  • Correct inaccurate data
  • Object to processing or withdraw consent
  • Complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we've handled your data unlawfully

8. Children

Stamped is not directed at children under 13. If you are between 13 and 17, you may use the app but you cannot win prizes from the 104 Club until you turn 18.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app and by email if you've consented to marketing.

10. Contact

Questions? Email privacy@stamped.gg.