Privacy policy

Last updated 2026-10-25

Sticker Anything turns an object in your photo into a sticker. To do that, a picture has to travel to our server. This page explains what goes where, what we keep and what we never keep.

1. Who we are

Sticker Anything is made by Kerem Bakir, based in the Netherlands. Kerem is responsible for your data under the EU General Data Protection Regulation (GDPR). You can reach us at privacy@sticker-anything.com.

2. Your photos

When you make a sticker, the app sends a picture to our server. When you tap an object, the app first sends a reduced copy of the whole photo (at most 1024 pixels on the long side) so the server can suggest an outline around the spot you tapped. The sticker itself is then cut from a crop around the object, not from the whole photo. When you describe an object in words, the app sends a smaller copy of the whole photo, because the server has to look for the object.

On the server, the picture is held in memory while the model cuts out the object. The server sends back a transparency mask and the picture is discarded. Nothing is written to disk.

• We never store your photos, crops or masks.
• We never put them in logs. Server logs hold a request id, image sizes and timings. That is all.
• We never use them to train or improve any model.
• The finished sticker is put together on your phone and stays there, unless you save or share it.

The app asks for access to your photos only when you pick one, and for the camera only when you open it.

3. Where processing happens

Our server runs on Modal, a cloud computing provider (see also its Data Processing Agreement). The graphics processor that makes your sticker runs in the EU (the eu-west region).

Requests enter Modal's network in the EU as well, so your picture does not pass through the United States on its way to the server or back. Modal is still a US company, which means its own staff and systems could in principle reach data it processes for us. That counts as a possible transfer outside the EU. Modal's Data Processing Agreement incorporates the EU Standard Contractual Clauses, which cover it.

4. The anonymous id

On first launch the app creates a random id. It is not tied to your name, email, phone number or Apple or Google account. We use this one id for two things: counting your sticker credits for purchases (through RevenueCat) and analytics (through PostHog). The server also receives it with each request to stop abuse, for example one device sending thousands of requests.

If you delete and reinstall the app, you get a new id.

5. Analytics

We use PostHog, on its EU cloud, to understand how the app is used and where it breaks. PostHog Cloud EU is hosted in Frankfurt, so analytics data stays in the EU. Events are linked to the anonymous id. We record:

• The sticker steps: app opened, photo picked, how you picked the object, sticker made, saved, shared, sent to WhatsApp.
• Ads and purchases: when an ad was offered, shown or finished, when the premium screen appeared, trials started, purchases and cancellations.
• Server quality: how long each sticker took, whether the server was waking up, and errors.
• Whether people come back after a day, a week and a month.
• Device basics that the PostHog library attaches to every event: phone model and maker, operating system and version, screen size, app version, language and time zone. We have switched off PostHog's location lookup, and the PostHog project is set to discard your IP address on arrival.

Analytics never contain your photos, the words you type to describe an object are the only text we keep (see below), and session recordings are off.

6. What you type

When you describe an object, like "the pink guitar on the wall", we keep that text as part of an analytics event. We use it to see which descriptions work and which fail. The photo is never attached to it. Please do not type personal details into the description box.

7. Ads

The free version shows ads from Google AdMob: a video you can choose to watch to earn a sticker, full-screen ads at natural breaks, and banners on the gallery and editor screens. Ads never appear on top of a fresh sticker.

To show and measure ads, Google's software on your phone collects data such as your device type, a rough location from your IP address, and an advertising identifier. Google handles that data under its own rules. You can read how Google uses data from apps that use its services at policies.google.com/technologies/partner-sites, and you can change ad personalization on your phone and at adssettings.google.com.

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows Google's consent form once, before the first ad. You can change your choice later in the app's settings. Without your consent, we ask Google for non-personalized ads only.

Premium removes every ad.

8. Purchases

Payments go through the Apple App Store or Google Play. We never see your card or bank details. RevenueCat keeps track of which anonymous id has premium, so that you can restore it on a new phone. It receives the anonymous id and the purchase receipt from Apple or Google. RevenueCat, Inc. is based in Florida, USA, and stores this data on Amazon Web Services in the USA, under its Data Processing Addendum with contractual safeguards.

9. What stays on your phone

Your stickers, your sticker packs and your free sticker counter live in the app's storage on your phone. They are not uploaded. Deleting the app deletes them. A reinstall starts the counter fresh.

10. People in your photos

The app cuts out objects, and a person can be one of them. It never tries to recognise who someone is. There is no face search, and the server refuses requests that ask for a person by name. The model we use is not meant for identifying individuals, and we keep it that way.

11. Who we share data with

We do not sell your data. These companies process data for us, each only for the job listed:

Where data leaves the EU, it is protected by contract. Modal's Data Processing Agreement incorporates the EU Standard Contractual Clauses. RevenueCat stores data in the USA under its Data Processing Addendum with contractual safeguards. PostHog keeps analytics data in the EU.

12. Why we are allowed to

• Processing your photo is needed to give you the sticker you asked for (performing our agreement with you).
• Analytics, abuse limits and fixing errors are in our legitimate interest in running a working app.
• Purchases are needed to give you what you paid for.
• Personalized ads rely on your consent. In the European Economic Area, the United Kingdom and Switzerland you give or refuse it in Google's consent form, and you can change it later in the app's settings.

13. How long we keep things

• Photos, crops and masks: only for the seconds it takes to make the sticker.
• Server request logs (request ids, sizes, timings, never images): kept by our hosting provider for a limited period, and not used for anything beyond running the service.
• Analytics events: one year.
• Purchase records: as long as Apple, Google and RevenueCat need them for billing and tax law.

14. Your rights and deleting data

There is nothing about your photos on our server to delete, because nothing is kept. Deleting the app removes everything stored on your phone. Purchase records live with Apple or Google.

Analytics events are linked to your anonymous id. If you want them deleted, email us with that id. We will show it in the app's settings.

Under the GDPR you can ask to see, correct, delete or take a copy of your data, and you can object to how we use it. Email privacy@sticker-anything.com and we will answer within a month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority where you live.

15. Children

Sticker Anything is not for children under 16. We do not ask for your age and we do not knowingly collect data from children. If you think a child has used the app and want something removed, email us.

16. This website

This website sets no cookies, runs no trackers and loads nothing from other companies. It is hosted by Cloudflare, which sees basic connection data, like your IP address, to deliver the page and keep it safe.

17. Changes and contact

If we change how the app handles data, we update the date at the top. We announce changes on this page and in the app.

Questions: privacy@sticker-anything.com.