MaxFeeder

Privacy Policy

Last updated: September 29, 2026

This Privacy Policy explains how Gargoyle Labs LLC ("we", "us") collects, uses, and protects information when you use MaxFeeder (the "Service"). We aim to collect as little as possible and we do not sell your data.

1. Information we collect

Data	Why
Email address	Account creation and sign-in (via our auth provider).
Your feed configuration and reading data (feeds, bookmarks, read-later, reading stats)	To provide the app; for subscribers, to sync it across your devices.
IP address and approximate (city-level) location	Security, abuse prevention, and an internal record of recent sign-ins.
Bluesky handle and app password (if you connect Bluesky)	To fetch your Following timeline. The app password is stored encrypted and used only server-side; it is never shown back to you.
Subscription status and a payment-processor customer ID (website purchases), or an App Store transaction ID (iPhone purchases)	To manage your Pro plan. We do not receive or store your card details — payments are handled by Stripe on the website and by Apple in the iPhone app.
Email digest settings (how often, what hour, and your time zone), if you turn the digest on	To send the digest at the time you chose.
API keys you create	To let another app show your headlines. We store only a one-way hash of each key, never the key itself.
Feedback you send (your message, an optional reply email, app version, and device model)	To answer and act on bug reports and feature requests. Delivered to our support inbox by email; not stored in our database.
Device-local preferences (theme, active tab)	Stored on your device only; not sent to us.

2. How we use information

We use the information above to operate and improve the Service, sync your data across devices (Pro), process subscriptions, keep the Service secure, and respond to support requests. Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests (security and improving the Service), and your consent where required.

3. Service providers (sub-processors)

We share data only with providers that help us run the Service, under their own terms:

Supabase — authentication and database (your account and synced data).
Render — application hosting.
Stripe — subscription payments on the website (handles all card data directly).
Apple — Pro purchases in the iPhone app, under Apple's own terms.
Mailjet — transactional email (e.g. confirmation and password-reset messages, and delivering feedback you send to our support inbox).

We may also disclose information if required by law. We do not sell personal information.

4. Cookies and local storage

MaxFeeder uses browser localStorage for your preferences and a sign-in token for your session. We do not use advertising or third-party tracking cookies.

5. Data retention

We keep your account data while your account is active. Specifically:

Sign-in records (time, email and IP address) are deleted automatically after 90 days.
Earlier versions of your feeds and reading data are kept as a safety net against accidental loss — the 20 most recent versions, with older ones deleted.
Everything else is kept until you change it or delete your account.

When you delete your account, everything above is deleted from our database immediately, including sign-in records and earlier versions, and any website subscription is cancelled. Payment records held by Stripe or Apple, and emails you sent us, are not part of our database; see Delete your account for details and how to request deletion if you can't sign in.

6. Your rights

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your account at any time, or contact us at support@maxfeeder.com to exercise these rights.

7. Security

Data is transmitted over encrypted connections (HTTPS). Stored Bluesky app passwords are encrypted with AES-256-GCM and decrypted only server-side at fetch time. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

8. Children

MaxFeeder is not directed to children under 13, and we do not knowingly collect their personal information.

9. International users

We operate in the United States, and your information is processed there. By using the Service you understand your data may be transferred to and processed in the U.S.

10. Changes

We may update this Policy. We will update the date above and, for material changes, provide notice where appropriate.

11. Contact

Gargoyle Labs LLC — support@maxfeeder.com