Local-first. No telemetry. Postizy stores all your posts, media, and credentials in encrypted SQLite on your own computer. We do not operate a cloud, we do not see your social logins, and the website does not track you.
Postizy is desktop software. The marketing site is static HTML. This policy covers both.
The following stays on your device in ~/Library/Application Support/Postizy/db.sqlite (macOS) or %APPDATA%/Postizy (Windows) / ~/.config/Postizy (Linux):
| Data | Storage | Sent to server? |
|---|---|---|
| Social account details, captions, schedule, device IDs, warmup logs | Encrypted SQLite (sql.js / better-sqlite3), file-based logs only | No |
| Media files you attach to posts | Local filesystem + local DB reference | No - pushed only to your Android device via ADB |
| License key validation | Checked against Polar API | Only license key hash + app version |
We have no access to your TikTok/Instagram/YouTube/Facebook passwords - you log in directly in the official apps on your phone. ADB commands run locally between your computer and your phone.
The site is static and does not use analytics, advertising trackers, or third-party cookies. We do not collect IP logs beyond standard web-server access logs retained by our hosting provider. External fonts are loaded from Google Fonts; refer to Google's privacy policy for that request. We do not embed social pixels.
Payments for Pro are processed by Polar.sh as Merchant of Record. When you purchase, Polar collects name, email, payment details, and VAT info to process the transaction and handle taxes. We receive only your email, license key, and subscription status via Polar's API (licenseStore.ts). See Polar's Privacy Policy for payment data. We do not store full card numbers.
Postizy desktop app uses no cookies. The website uses no marketing cookies. Only Polar checkout (when you click "Download" -> Pro checkout) may set its own necessary cookies to complete payment.
Because data is local, you control retention: delete the app or delete db.sqlite to erase all local data. For payment data, contact Polar or us at support@postizy.xyz to request deletion of your license record. We will respond within 30 days. If you are in the EU/UK, you have rights to access, rectify, erase, and object under GDPR; we act as data controller for license emails only.
Local DB fields with credentials are AES-encrypted at rest. No network sync. We recommend full-disk encryption on your computer and keeping ADB authorization private. No method is 100% secure, but local-first minimizes exposure.
Postizy is not directed to children under 16 and we do not knowingly collect data from children.
Material changes will be posted here with a new date. Continued use after changes means acceptance.
Privacy questions or data requests: support@postizy.xyz. Please include your license email.