Data Usage & Retention Policy
Effective July 16, 2026
This policy lays out, plainly, how long the little data StallScore touches actually sticks around.
| Data | Tied to you? | Retention |
|---|---|---|
| Location (used to show nearby results) | No — no identity to attach it to | Not stored after your search completes |
| Reviews & ratings | No — submitted anonymously | Kept indefinitely as part of the public map, unless removed for a guideline violation or a valid takedown request |
| Community location details (hours, features, etc.) | No | Kept as part of the shared map data, updated or corrected over time |
| Optional product analytics (PostHog) | Random app identifier | Scheduled for deletion within 12 months |
| Optional crash diagnostics (Sentry) | May include device and network details | Scheduled for deletion within 90 days |
| Abuse-prevention identifier | Random identifier stored on the device | Kept while needed to enforce rate limits or a moderation block; not returned in public content responses |
| Hosting & infrastructure logs (IP, browser, timestamps) | Technically, briefly | Retained only as long as needed for security and reliability, then deleted on a rolling basis |
| On-device preferences (saved area, display settings) | Stays on your device | Until you clear it or uninstall |
Reviews and location details are kept because they're the product — the whole point is a growing, trustworthy dataset the next person can rely on. Infrastructure logs are kept briefly because any online service needs some record to catch abuse, debug outages, and keep things running securely.
Since reviews are anonymous, we can't look up "your" content by identity. If you'd like a specific review or submission removed, email help@stallscore.app with enough detail (location, approximate date, content) for us to find and evaluate it.