Last updated: November 5, 2026.

This policy explains how Stickers Cloud handles personal data on the website at https://stickers.cloud and in the Stickers Cloud apps for Android and iOS (together, the "Service"). The controller of your data is the developer shown as the trader on the Stickers Cloud listing in Google Play and the App Store. For anything about your data, write to [email protected].

If you create an account:

• Your email address, your username and your password, which we store only as a secure hash.
• If you sign in with Google: your Google account identifier, your email address when Google confirms it, and your name, which we use only to suggest a username. We do not take your profile picture.
• What you choose to add to your public profile: an avatar, a colour and links to your social networks or website.
• The packs and stickers you create, their titles and categories, and the packs you save as favourites.
• Technical records of your account: when it was created, when you last used it, and your active sessions.

Whether or not you have an account:

• Your IP address, which we use only in a form that cannot be read back (a keyed hash), to prevent abuse: to limit sign-in and registration attempts and to stop the same person voting for a pack repeatedly.
• The data collected by cookies and similar technologies, described in our cookie policy.

The apps do not have accounts: they identify themselves to our servers as the app, not as you. If you buy Premium, the app sends us the purchase receipt so we can check it with the store; we do not store it.

• To provide the Service: to create and run your account, to publish your packs, and to show your public profile. The legal basis is the contract between you and us under our terms and conditions.
• To keep the Service safe and free of abuse: limiting attempts, verifying that you are not a bot, and moderating content. The legal basis is our legitimate interest, and our legal obligations, in keeping the Service secure and lawful.
• To send you the emails the account needs: confirming your address, resetting your password, and telling you when your account or email address changes. We do not send newsletters or advertising emails.
• To show advertising and measure how the Service is used, with your consent where the law requires it, as described in our cookie policy.

Your username, your public profile, and the packs and stickers you publish are visible to everyone. When a pack is published on Signal, your username appears as its author. You can make your profile private from your settings.

We do not sell your personal data. We share it only with the providers that help us run the Service, and only what each one needs:

• Cloudflare, which carries all traffic to the Service, protects it from attacks, and verifies that sign-ins and registrations are not made by bots.
• Google, for signing in with Google, checking Premium purchases, showing advertising and measuring visits (Google AdSense and Google Analytics), and serving fonts.
• Content moderation and classification services, such as OpenAI and Anthropic, which receive the titles and images of new packs to check them against our rules and suggest categories. They do not receive your username or email address.
• Telegram and Signal, which receive the packs we publish there: their titles and images and, on Signal, the author's username.
• Our email delivery provider, which receives your email address to send you the account emails.

We may also disclose data when the law requires it, for example to a court or the authorities.

Some of these providers, such as Google, Cloudflare, OpenAI and Anthropic, may process data in the United States or other countries outside the European Economic Area. When they do, the transfer is covered by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or by the Commission's standard contractual clauses.

• Your account and your content, until you delete them. When you delete your account, it is disabled at once and erased thirty days later, together with your packs, stickers, favourites and profile. Until then you can recover it.
• Packs already published on Telegram or Signal stay on those platforms, under their own rules, after they are deleted from Stickers Cloud.
• Sessions, until thirty days after they expire. Links sent by email, until thirty days after they expire.
• The hash of your IP address used for votes, two hours. The one used to limit attempts, until the limit window closes, at most a day.

You can ask us for access to your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Most of this you can do yourself from your settings; for the rest, write to [email protected]. We will answer within one month.

If you think we have not handled your data properly, you can complain to the data protection authority of your country or to the Spanish Data Protection Agency (www.aepd.es).

The Service is not meant for children under 14, and we do not knowingly collect their data. If you believe a child under 14 has given us personal data, write to [email protected] and we will delete it.

We protect your data with appropriate technical and organisational measures: encrypted connections, passwords stored only as hashes, sessions that expire, and access restricted to the people who run the Service. No system is completely secure, but we work to keep yours safe and will tell you if a breach puts your data at risk.

We may update this policy when the Service or the law changes. The current version is always on this page, with the date it was last updated. If a change is significant, we will announce it on the website and in the apps before it takes effect.