Privacy Policy

Who is responsible

Csaba Farkas, Münchner Bundesstraße 121b, 5020 Salzburg, Austria, info(at)syleniainc.com. Under the GDPR I am the controller of the personal data that reaches me: the server logs of this website, snitchboard.org (through Netlify), the emails you send me, and the diagnostics Apple shares with me if you opt in. Your report never leaves your device. What your device sends to Apple, for purchases or for app names and icons, Apple processes under its own privacy policy.

In short

The app has no account, no server of mine and no analytics, and it contains no tracking or advertising code. Your report stays on your device. The app talks only to Apple: for purchases, and for app names and icons, which stay off until you switch them on or tap Look up on the letter screen. This website sets no cookies and loads nothing from other sites.

The app

Your report

The App Privacy Report file you share with Snitchboard is read on your device, and the imported data is stored only in the app's own storage on that device. There is no developer server, account or cloud. The data stays until you delete a report, choose Delete all data, or delete the app.

Like all app data, it is included in your device backups (iCloud or computer), under your backup settings. The app sets no backup exclusion.

App names and icons (optional, off by default)

If you turn this on, or tap Look up on the letter screen, the app sends app bundle IDs from your report, plus your device's two-letter region ("us" if the region isn't a two-letter code), to Apple's public App Store lookup (itunes.apple.com). It then loads app icons from Apple's image servers. Apple receives your device's IP address, as with any request, and Apple's privacy policy applies. Results are cached on your device.

This happens only with your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning the setting off in Settings; that stops new lookups and icon loading at once, and lookups already made stay lawful. Names already found stay on your device until you choose Delete all data; while the setting is off, the app shows them without contacting Apple.

Purchases

Purchases are handled entirely by Apple through the App Store. I receive no personal data, only Apple's aggregated sales reports.

Reminder

The app can schedule one optional local notification, on your device. There are no push notifications and no server.

Data-request letters and exports

Letters and exports are created on your device. The name and email you type into a letter are not stored with your reports. Nothing leaves your device unless you share it. To share a letter or an export, the app writes it to a temporary file on your device for the share sheet; a letter's file holds the name and email you typed.

Diagnostics

If you let iOS share analytics with app developers (Settings › Privacy & Security › Analytics & Improvements), Apple may give me crash reports and aggregated usage statistics. I use them only to fix faults (my legitimate interest, Art. 6(1)(f) GDPR). The app contains no analytics or crash-reporting code of its own.

No tracking

The app uses no third-party SDKs, no advertising and no tracking. Company names come from a dataset built into the app (WhoTracks.me), with no lookups.

The website

Hosting

The site is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA (Netlify's privacy statement). Netlify processes server log data to deliver the site and keep it secure: IP address, date and time, requested page, referrer, browser and device type. My legal basis is my legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Netlify processes this data on my behalf, under its data processing agreement (Art. 28 GDPR), and may do so outside the EU, including in the US. Netlify states that it is certified under the EU–U.S. Data Privacy Framework (participant list). The agreement relies on that framework, with the European Commission's Standard Contractual Clauses (Implementing Decision 2021/914) as the fallback.

These logs are kept under Netlify's retention rules, not mine. Netlify's data processing agreement states that its logs are kept online for 90 days and offline for one year (Exhibit II, headed "Enterprise Services").

No cookies, no analytics, no third-party content

Fonts and images are served from snitchboard.org itself.

Links out

The site links to the App Store and to Apple's license agreement, and this page links to the official pages it cites. Once you follow a link, that site's privacy policy applies.

Contacting me

If you email info(at)syleniainc.com, what you send is used only to answer you, and deleted when it is no longer needed (Art. 6(1)(b) or (f) GDPR). Namecheap, Inc. (USA) hosts my email (Private Email, servers in Phoenix, Arizona, per Namecheap's knowledge base). The transfer is covered by Namecheap's Data Processing Addendum.

Your rights

You have the right to access, rectification, erasure, restriction and portability (Art. 15–20 GDPR). To use them, email me. The app's data never reaches me: it is only on your device, where you can delete it at any time.

Right to object: where I rely on my legitimate interest (the website's server logs, diagnostics, answering your email), you can object at any time, on grounds relating to your situation (Art. 21 GDPR).

Where I rely on your consent (app names and icons), you can withdraw it at any time, as described above.

You don't have to give me any data. The app works without names and icons (it shows app IDs instead), and you never have to email me. The one exception is this website: to load it, your browser has to send the server log data above. I make no automated decisions about you and do no profiling (Art. 22 GDPR).

You can complain to the Austrian data protection authority: Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria, dsb@dsb.gv.at.

Changes

I will update this policy when the app or the website changes. The effective date at the top shows the current version.

Imprint

Information according to § 5 ECG and disclosure according to § 25 MedienG.

Media owner and publisher: Csaba Farkas
Münchner Bundesstraße 121b
5020 Salzburg, Austria

Email: info(at)syleniainc.com
Phone: +43 660 8102593

Purpose: information about the iPhone and iPad app Snitchboard.