Legal

Privacy Policy

Last updated: 11 September 2026

This Policy explains how Derpico, the registered sole trade of Alireza Sarinavaie (“Feather”, “we”, “us”) collects, uses, and protects your personal data when you use feathershots.com and its related apps (the “Service”). We aim to collect as little as possible. We process data in the European Union.

The browser extension is covered by its own, much shorter policy: it has no account and stores nothing, so almost none of what follows applies to it.

1. Data we collect

We collect:

Account data — when you sign in with Google, we receive your name, email address, and profile picture.
Content you submit — the public post (tweet) links you paste and the cards you generate. Generated media is stored so you can download it.
Subscription data — if you subscribe, your plan and billing status. Payments are processed by Stripe; we never see or store your full card details.
Product analytics — if you consent, we record privacy-friendly usage events (which features are used, template/font choices, coarse country from your IP, device type, referral source). We do not sell this data.
Cookies / local storage — a sign-in session cookie, your theme choice, an analytics-consent flag, and (if you consent) an anonymous analytics id. See section 6.

2. How we use your data

To provide the Service — sign you in, fetch the post, render and deliver your card.
To manage subscriptions and payments.
To understand and improve the product (only with your analytics consent).
To keep the Service secure and prevent abuse.
To meet legal obligations.

Our legal bases (where GDPR applies) are: performing our contract with you (providing the Service and billing), your consent (analytics cookies), and our legitimate interests (security and improving the Service).

3. Post content from X (Twitter)

When you paste a post link, we fetch that post’s public content through a third-party data provider so we can render your card. We only fetch public posts. We do not post to your X account or access your private X data.

We share data only with service providers that help us run Feather, under agreements that protect your data:

Google — sign-in.
Stripe — payments and subscriptions. Featheris the seller and merchant of record for purchases; Stripe processes the payment.
Vercel — website hosting.
Neon — database (EU region).
Amazon Web Services (AWS) — video rendering and media storage (EU region).
PostHog (EU) — product analytics, only with your consent.
Vercel Web Analytics and Speed Insights — counts page views, the page you came from, your country and whether you are on a phone or a computer, and measures how fast pages load for you. Both set no cookie and store nothing on your device, and neither ever sees your name or email.
A tweet-data provider — to fetch public post content.

Some providers may process data outside the European Union; where they do, appropriate safeguards (such as EU Standard Contractual Clauses) apply.

5. How long we keep data

We keep account and subscription data while your account is active. Generated cards and render records are kept so you can access them, and cleaned up over time. If you delete your account, we delete or anonymise your personal data, except where we must keep some records for legal or accounting reasons.

We use a small number of cookies/local-storage items that are necessary to run the Service (sign-in session and your theme). We only load product analytics after you accept the analytics banner, and you can decline. If you decline, we do not set analytics cookies. We also honour your browser’s “Do Not Track” signal.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to withdraw consent at any time. You can delete your account and its data from your account settings, or email us. To exercise any right, contact support@feathershots.com. If you are in the EU/UK, you also have the right to complain to your local data protection authority.

8. Children

Feather is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has given us data, contact us and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect your data (encrypted connections, access controls, EU-based storage). No system is perfectly secure, but we work to keep your data safe.

10. Changes to this Policy

We may update this Policy. If we make material changes, we will update the “Last updated” date and, where appropriate, notify you.

11. Contact

For any privacy question or request, email support@feathershots.com.

Questions about this page?

Email support@feathershots.com and we’ll help.