Privacy Policy

1. Data we collect

We collect:

• Account data — when you sign in with Google, we receive your name, email address, and profile picture.
• Content you submit — the public post (tweet) links you paste and the cards you generate. Generated media is stored so you can download it.
• Subscription data — if you subscribe, your plan and billing status. Payments are handled by Paddle, which acts as the merchant of record; we never see or store your full card details.
• Product analytics — if you consent, we record privacy-friendly usage events (which features are used, template/font choices, coarse country from your IP, device type, referral source). We do not sell this data.
• Cookies / local storage — a sign-in session cookie, your theme choice, an analytics-consent flag, and (if you consent) an anonymous analytics id. See section 6.

2. How we use your data

• To provide the Service — sign you in, fetch the post, render and deliver your card.
• To manage subscriptions and payments.
• To understand and improve the product (only with your analytics consent).
• To keep the Service secure and prevent abuse.
• To meet legal obligations.

Our legal bases (where GDPR applies) are: performing our contract with you (providing the Service and billing), your consent (analytics cookies), and our legitimate interests (security and improving the Service).

3. Post content from X (Twitter)

When you paste a post link, we fetch that post’s public content through a third-party data provider so we can render your card. We only fetch public posts. We do not post to your X account or access your private X data.

4. Who we share data with (sub-processors)

We share data only with service providers that help us run Feather, under agreements that protect your data:

• Google — sign-in.
• Paddle — payments, subscriptions, and sales tax. Paddle is the merchant of record for purchases.
• Vercel — website hosting.
• Neon — database (EU region).
• Amazon Web Services (AWS) — video rendering and media storage (EU region).
• PostHog (EU) — product analytics, only with your consent.
• A tweet-data provider — to fetch public post content.

Some providers may process data outside the European Union; where they do, appropriate safeguards (such as EU Standard Contractual Clauses) apply.

5. How long we keep data

We keep account and subscription data while your account is active. Generated cards and render records are kept so you can access them, and cleaned up over time. If you delete your account, we delete or anonymise your personal data, except where we must keep some records for legal or accounting reasons.

6. Cookies and analytics consent

We use a small number of cookies/local-storage items that are necessary to run the Service (sign-in session and your theme). We only load product analytics after you accept the analytics banner, and you can decline. If you decline, we do not set analytics cookies. We also honour your browser’s “Do Not Track” signal.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to withdraw consent at any time. You can delete your account and its data from your account settings, or email us. To exercise any right, contact support@feathershots.com. If you are in the EU/UK, you also have the right to complain to your local data protection authority.

8. Children

Feather is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has given us data, contact us and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect your data (encrypted connections, access controls, EU-based storage). No system is perfectly secure, but we work to keep your data safe.

10. Changes to this Policy

We may update this Policy. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you.

11. Contact

For any privacy question or request, email support@feathershots.com.