Stickerzzz
Privacy Policy
Effective date: 2026-10-18
This policy explains what happens to information when you use Stickerzzz (“the app”).
- The app keeps a small record on our server — see “Information on our server” below.
- To publish sticker packs you can connect your Telegram account. Published packs live on Telegram.
- The free version shows ads from Google AdMob. In the EEA, UK and Switzerland we ask for your consent first. Ads Free and Premium turn off the full-screen ads; rewarded videos only play when you choose to watch one.
- Purchases go through Apple or Google. We never see your payment details.
Who is responsible
Kostiantyn Mospan (individual developer, publishing as EizDev)
Email: support@eizdev.com
Information that stays on your device
The app stores the following only on your device. It is not sent to us, except the finished stickers of a pack you publish (see “Telegram” below):
- Drafts — packs you haven’t published yet, with their sticker images, emojis and titles
- Photos you pick or take. They are cropped and turned into stickers on the phone; the original photos are never uploaded
- Cached images of your published stickers
- Settings (theme, language), recently used emojis and whether you accepted the terms
These data may be included in your device’s own backups (iCloud / Android Backup) if you enabled them. You can erase them at any time via Settings → Clear app data, or by uninstalling the app.
Information on our server
The app signs in anonymously: it gets a random ID from Firebase Authentication. We never ask for your name, email address or phone number. Our server, hosted by Cloudflare, Inc. (Cloudflare Workers, D1), stores:
- A random app ID from Firebase Anonymous Authentication, and when it was first seen
- Which plans you own (Ads Free, Plus, Premium). The purchase token the app sends is used to check the purchase with Google Play; we keep only a one-way hash of it, to limit how many accounts one purchase unlocks
- If you connect Telegram: your Telegram user ID, username and first name, and the one-time connect code
- For each pack you published: its title, link name, creation time and a list of its stickers’ Telegram IDs (the stickers themselves are stored by Telegram)
- Rewarded videos: when you finish one, Google AdMob tells our server so, with your anonymous app ID and a pack ID (no personal data). We keep each reward (time, pack ID, AdMob’s transaction ID) to add the stickers and to count 5 videos per 24 hours
We use these data only to run the app: to link your packs and purchases to your app ID, to publish and manage your packs, and to apply the free limits. We do not sell them or use them for advertising. The hosting provider processes technical data such as IP addresses to deliver and protect the server and keeps short-lived request logs for troubleshooting. We keep the record while you use the app.
Clear app data (see above) disconnects Telegram and starts a new anonymous ID on this phone, but the old record stays on our server. To have it deleted, email us and tell us your Telegram username if you connected one. We delete the record within 30 days. Packs you published stay on Telegram until you delete them in the app (do it before clearing app data), or ask us in the same email to delete them.
Telegram
Connecting Telegram is optional and only needed to publish. When you send the connect code to our bot @StickerzzzApp_bot, our server receives your Telegram user ID, username and first name from Telegram and links them to your app ID. The bot does not keep your messages.
When you publish a pack, or add a sticker to a published pack, the app sends the finished sticker images, their emojis, the pack title and link name to our server, which uploads them to Telegram through the Telegram Bot API. The pack is created under your Telegram account and is public: anyone with its link (t.me/addstickers/…) can see and add it. To show your published packs, our server fetches their images from Telegram. Deleting a pack in the app deletes it on Telegram too.
Telegram processes these data under its own privacy policy. You can disconnect at any time via Settings → Telegram → Disconnect; your packs stay on Telegram.
Advertising
The free version shows ads served by Google AdMob: full-screen ads at some moments, and rewarded videos you can choose to watch for 5 more stickers in a pack. Google’s software on your device may collect device identifiers (such as the Android Advertising ID), your IP address, device and app information and interactions with ads, in order to show, cap, measure and — only with your consent — personalise ads. Google acts as an independent controller.
In the EEA, UK and Switzerland the app first shows Google’s consent message (Google User Messaging Platform) and requests no ad before you answer. If you don’t consent, Google shows only non-personalised or limited ads. Your choice is stored on your device; you can change it at any time in Settings → Ad privacy choices. Ads Free and Premium turn off the full-screen ads; rewarded videos only play when you choose to watch one.
Purchases
Ads Free, Plus and Premium are one-time purchases processed entirely by the Apple App Store or Google Play. The app only receives a confirmation that the purchase was made or restored. To unlock it, the app sends this confirmation (product and purchase token) to our server, which checks it with Google Play and records which plan you own.
Analytics and crash reporting
The app uses Firebase Crashlytics (Google LLC) to find and fix crashes and errors. When the app crashes or hits an unexpected error, it sends a report with the error and where in the code it happened, the last log lines before it (screens opened, requests to our server and their results, with technical IDs — never your photos, stickers, tokens or purchase tokens), your device model and system version, the app version, a Crashlytics installation ID and your anonymous app ID, plus the app language and theme, whether Telegram is connected, how many packs you published and whether you own a plan. We use these reports only to keep the app working (our legitimate interest in a stable app); Crashlytics keeps them for 90 days. There is no analytics: we do not track how you use the app.
Third-party services
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication | Google LLC | Anonymous app ID |
| Firebase Crashlytics | Google LLC | Crash and error reports |
| Firebase Remote Config | Google LLC | App settings |
| Google AdMob | Google Ireland Limited (EEA/UK/CH), Google LLC (elsewhere) | Advertising |
| Google User Messaging Platform | Google Ireland Limited / Google LLC | Ad consent |
| Google Play Billing | Google Ireland Limited / Google LLC | Purchases |
| Google Play in-app updates | Google Ireland Limited / Google LLC | Update prompts |
| Cloudflare (Workers, D1) | Cloudflare, Inc. | Hosting our server |
| Telegram (Bot API) | Telegram FZ-LLC / Telegram Messenger Inc. | Connecting your account and publishing your packs |
Legal bases
Where the GDPR or a similar law applies, we process data on these bases:
- Our contract with you (Art. 6(1)(b) GDPR): the record on our server, connecting Telegram and publishing your packs, and unlocking what you bought.
- Your consent (Art. 6(1)(a) GDPR): personalised ads. Our legitimate interest in funding the free version (Art. 6(1)(f) GDPR): non-personalised ads, limiting how often ads appear and preventing ad fraud.
- Our legitimate interest in a stable app (Art. 6(1)(f) GDPR): crash and error reports.
- Our legitimate interest in answering you (Art. 6(1)(f) GDPR): messages you send us.
Where data is processed
We are based in Ukraine. The services listed above may process data in other countries, including the United States. For data from the EEA, the UK and Switzerland they rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses.
How long we keep data
- On your device: until you delete it in the app or uninstall the app.
- The record on our server: while you use the app, and at most 30 days after you ask us to delete it.
- Our server’s request logs: a few days.
- Crash and error reports: 90 days.
- Emails to us: as long as we need them to answer you.
Security
The app talks to our server only over encrypted connections (HTTPS), and only the developer can access the server and its database.
When you contact us
If you email us, we use your message and address only to answer you and delete them when no longer needed.
Your rights
Depending on where you live, you may access, correct, delete or export your data, restrict or object to its processing, and withdraw your consent at any time (this doesn’t affect processing before the withdrawal). We answer within one month. Data on your device you control directly; for data on our server, email us. You may also complain to a data-protection authority.
Children
The app is not directed at children under 13. We do not knowingly collect personal information from children. If you are under the age of digital consent in your country (up to 16 in the EU), ask a parent or guardian before using the app.
Changes
We will update the effective date above when this policy changes.