MaxFeeder

Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how Gargoyle Labs LLC ("we", "us") collects, uses, and protects information when you use MaxFeeder (the "Service"). We aim to collect as little as possible and we do not sell your data.

1. Information we collect

Data	Why
Email address	Account creation and sign-in (via our auth provider).
Your feed configuration and reading data (feeds, bookmarks, read-later, reading stats)	To provide the app; for subscribers, to sync it across your devices.
IP address and approximate (city-level) location	Security, abuse prevention, and an internal record of recent sign-ins.
Bluesky handle and app password (if you connect Bluesky)	To fetch your Following timeline. The app password is stored encrypted and used only server-side; it is never shown back to you.
Subscription status and a payment-processor customer ID	To manage your Pro subscription. We do not receive or store your card details — payments are handled by Stripe.
Feedback you send (your message, an optional reply email, app version, and device model)	To answer and act on bug reports and feature requests. Delivered to our support inbox by email; not stored in our database.
Device-local preferences (theme, active tab)	Stored on your device only; not sent to us.

2. How we use information

We use the information above to operate and improve the Service, sync your data across devices (Pro), process subscriptions, keep the Service secure, and respond to support requests. Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests (security and improving the Service), and your consent where required.

3. Service providers (sub-processors)

We share data only with providers that help us run the Service, under their own terms:

Supabase — authentication and database (your account and synced data).
Render — application hosting.
Stripe — subscription payments (handles all card data directly).
Mailjet — transactional email (e.g. confirmation and password-reset messages, and delivering feedback you send to our support inbox).

We may also disclose information if required by law. We do not sell personal information.

4. Cookies and local storage

MaxFeeder uses browser localStorage for your preferences and a sign-in token for your session. We do not use advertising or third-party tracking cookies.

5. Data retention

We keep your account data while your account is active. When you delete your account, we delete your associated configuration, synced data, and stored credentials. Security records such as sign-in logs may be retained for a limited period [e.g. 90 days — set your actual period] and then removed.

6. Your rights

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA/CPRA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your account at any time, or contact us at support@maxfeeder.com to exercise these rights.

7. Security

Data is transmitted over encrypted connections (HTTPS). Stored Bluesky app passwords are encrypted with AES-256-GCM and decrypted only server-side at fetch time. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

8. Children

MaxFeeder is not directed to children under 13, and we do not knowingly collect their personal information.

9. International users

We operate in the United States, and your information is processed there. By using the Service you understand your data may be transferred to and processed in the U.S.

10. Changes

We may update this Policy. We will update the date above and, for material changes, provide notice where appropriate.

11. Contact

Gargoyle Labs LLC — support@maxfeeder.com