Privacy Policy

Scope

This policy covers all three StandApp products: the www.standapp.es website, the web app (PWA) and the desktop app for Windows and macOS. Where something applies to only one of them, it is stated explicitly.

Controller

Pablo Alcaraz (StandApp), Spain. Contact: hola@standapp.es · 624715421.

Where your data lives

Your material — jokes, blocks, setups and version history — is stored in a local database on your device. StandApp has no server or cloud database of its own: that material is never sent to any server of the project. If you enable sync, copies travel to your own Google Drive account, under your control.

Signing in with Google

Signing in with Google is optional and is used to identify you and to authorise sync. When you use it, Google shares the following with the app:

• Your Google user ID, your email address and whether it is verified.
• Your name and profile picture, shown inside the app itself.
• An access token and, where applicable, a refresh token, which let the app talk to Google Drive on your behalf.

This data is stored on your device, in the operating system secure storage where available, and is never sent to any StandApp server. You can revoke access at any time at myaccount.google.com/permissions: the tokens stop being valid and sync stops working.

Google Drive access

Sync uses the "drive.file" scope, which limits access strictly to files StandApp creates or that you explicitly select. The app cannot see or read the rest of your Drive. Synced files are stored in your account and you remain their owner.

StandApp's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In particular, data obtained through these APIs is not used for advertising, is not sold or transferred to third parties, and is not used to train artificial intelligence models.

Analytics

The www.standapp.es website uses Google Analytics and Microsoft Clarity for analytics. The web app (PWA) may use Google Analytics; Microsoft Clarity is not used in the apps, only on the website. The desktop app includes no analytics. In every case analytics is only enabled if you accept non-essential cookies: the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the cookie settings.

Data processed by analytics

• Usage interactions (clicks, scroll, visited pages and navigation events).
• Technical information about your device and browser (OS, version, resolution, language, user agent).
• Approximate location inferred from IP and session timestamps.

Analytics does not collect identifying data or the content of your material: neither your texts, nor your email, nor your name are sent to Google Analytics or Microsoft Clarity. No analytics tool records sessions inside the apps. Both may use cookies and pseudonymisation to distinguish sessions.

Cookies and similar technologies

Necessary cookies remember your consent choice. Analytics cookies only load if you accept and include Google Analytics and Microsoft Clarity. Cookies such as _ga, _ga_*, _gid, _gat, _clck and _clsk may be created to measure sessions, visits, events and performance. You can change your decision from the cookie settings link in the footer.

Providers and international transfers

Google Ireland Limited / Google LLC (sign-in, Google Drive and Google Analytics) and Microsoft Corporation (Clarity) act as technology providers. International transfers outside the EEA may occur, covered by Standard Contractual Clauses and the applicable adequacy framework. See policies.google.com/privacy, privacy.microsoft.com and learn.microsoft.com/clarity.

Retention

Your Google account data and tokens remain on your device until you sign out, uninstall the app or revoke access from your Google account. Website analytics data is retained according to the Google Analytics and Microsoft Clarity configuration, usually 13 to 14 months.

Your rights

You can exercise access, rectification, erasure, restriction, portability and objection rights, and withdraw your consent at any time, by writing to the contact address. Since StandApp stores no material on its own servers, the most direct way to erase your data is to delete the local app data and revoke its access in your Google account. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Children

StandApp is not directed to children under 14. If you become aware of information from a child, request its deletion via the contact channels.

Security

Communications with Google APIs are encrypted over HTTPS and tokens are stored in the operating system secure storage where available. No system is infallible and, since your material lives on your device, its security — disk encryption, screen lock and backups — also depends on you.

Changes to this policy

This policy may be updated to reflect legal or functional changes. The version in force is always the one published on this page, with its last updated date.

Contact

For any question about this policy or about the processing of your data: hola@standapp.es · 624715421.