Privacy Policy
Effective: 15 August 2026
Peelbook is a stamp journal: you turn your moments into perforated stamps, collect them in a book, and — if you want — send them to someone. We care about you understanding what data we handle. Peelbook is operated by Webbystep; contact: hello@webbystep.hu.
Your photos stay on your device by default
Your stamps and journal are stored on your own device (in the app/browser local storage). There are three cases where content reaches our servers, and you start all three: when you turn on cloud backup, when you send or share a stamp, and when backup runs automatically as a Peelbook Plus subscriber.
Cloud backup and your recovery code
Cloud backup is optional. When you turn it on, the app generates a secret recovery code on your device, and your stamps and film frames are stored with our storage provider (Supabase). We ask for no email and no password: nothing but that code ties a backup to you — and we only keep a fingerprint (hash) of the code, never the code itself.
The price of that is real: if you lose the code, WE cannot get your backup back either. With Peelbook Plus, backup runs automatically in the background for as long as the subscription is active. In Settings you can PERMANENTLY delete the backup at any time — that removes the cloud copy as well.
Camera, microphone, photo library
We request camera access to create stamps. A live stamp (a short video) also uses your microphone so the sound is kept. If you pick an image from your gallery, we request access to your photo library.
The captured image and sound are created on your device and stay there; they reach our servers only if you turned on backup or you send them to someone.
Sending and shared books
When you send a stamp or add one to a shared book, that stamp image (or video, for a live stamp) and its data — your note, the date, and the nickname you enter for shared books — are stored with our storage provider (Supabase) so the recipient or participants can open it.
Anyone with the link can access that content — only send what you mean to share. If someone puts something into a shared book that does not belong there, write to hello@webbystep.hu and we will remove it.
Payments
Peelbook Plus and event packages can only be purchased through the Apple App Store or Google Play. We NEVER see your card details: the store handles those. All we keep is what verifying the subscription requires — the store transaction identifier and which backup it belongs to.
Email address
If you join the waitlist or express interest in a planned feature, we store your email (Supabase) to notify you. We use it only for that, and you can request deletion any time at hello@webbystep.hu.
Anonymous usage statistics
We measure anonymous, aggregated usage events (Vercel Analytics) to see which features are useful. This cannot identify you, and we do not track you across other apps or websites.
Abuse protection
For costly operations — creating a backup, sending, verifying a store purchase — we count how many requests arrive from the same internet address, to slow down automated abuse. The counter lives in the server memory for at most a day, and we do not link it to you in any way. (Stamps added to a shared book are counted per book, not per internet address.)
Who helps us run it
Storage and database: Supabase. Hosting and anonymous statistics: Vercel. Payments: Apple and Google. We do not share your data with anyone else.
What we do NOT do
No account, no password. We do not sell or rent your data. No ads. We do not build a profile of you, and we do not track you in other apps.
Deleting your data
In the app Settings a single button deletes the journal stored on your phone; if cloud backup is on, the same button permanently deletes the cloud copy as well. The two go together: neither copy is left behind.
To delete stamps you sent or put in a shared book, or the email you gave us, write to hello@webbystep.hu and we will take care of it. Until you ask for deletion we keep this content so shared links keep working.
Children
Peelbook is not intended for children, and we do not knowingly collect data from children. If you make a stamp of your own child, that is your recording, and we handle it as described above.
Changes
If we materially change this policy, we update it here and note the date at the top.