Privacy Policy

TinyTrash is operated by Ursa Stack. See the seller section of Commercial Terms for the name and address of the operator responsible for handling personal information. Send inquiries and rights requests to contact@ursastack.com. Established: 2026-10-24.
This policy explains how information is handled in TinyTrash and on its official website.

Your region, collection schedules, display settings and completion records are stored on your device to provide features such as schedule displays and notifications. Information needed by the widget is shared with the app on the device. The app has no feature that synchronizes these data to its own server. Up to three search terms are held in memory while the app is running and are not stored persistently.
There is no single automatic deletion period for locally stored information. Manage it through app and device functions. OS backups and restoration follow device and account settings; deleting the app does not necessarily delete all backups.

We use Google AdMob and Google User Messaging Platform for ad delivery and consent management. These services handle advertising identifiers, IP addresses, device and app information, ad impressions and interactions, diagnostic data and similar information for ad delivery and measurement, fraud prevention and service operation. Personalized or other ads are served subject to your region, choices, OS tracking permission and Google's restrictions. The ad content rating cap is G on both operating systems; this does not determine the age at which a person can consent to personal information processing.
Consent or ad choice screens are shown as required by law and service requirements. Where choices need to be changed, guidance is available in the app's privacy settings; iOS tracking permission can be changed in OS settings. Core features remain available if you refuse ad personalization or tracking. Changes apply to subsequent ad requests, and ads not yet displayed are reloaded. An ad already being shown may not end immediately. Withdrawal does not retroactively cancel earlier processing or delete all past records.
Ads are not shown while a valid ad-removal purchase is active. This does not stop communications such as purchase verification. Retention of ad data is determined by Google and other providers according to processing purposes, legal requirements and fraud prevention needs, separately from the Analytics retention settings below. Google: https://policies.google.com/privacy

We use RevenueCat to verify monthly and one-time purchases, provide ad removal and restore purchases. RevenueCat handles a purchaser ID created without registering an email address or similar information, store purchase and transaction information, and purchase-related device and app information. This ID links purchase status; it is not guaranteed to fall outside the definition of personal information. TinyTrash does not receive credit card numbers.
Purchase information is handled for the period needed to verify and restore purchase status and address refunds and disputes. We respond to deletion inquiries after checking purchase status and any need to retain records. Deleting purchase information and cancelling a store subscription are separate procedures. RevenueCat: https://www.revenuecat.com/privacy-policy . Apple or Google's policies also apply to store payments, transaction records, cancellation and refunds.

We use Google Firebase Analytics to improve the app. It is off by default. Only when you explicitly turn it on are app usage, device information and an app instance ID sent. We do not send region settings, collection schedules, entered names, search terms, purchaser IDs or a custom User ID. Analytics is managed separately from ad choices and can be turned off at any time in app settings. Analytics uses settings that deny advertising consent.
The dedicated property's event data retention is set to two months and user data retention to 14 months. The retention period for user identifiers resets with new activity. These settings apply to covered Google data, not to deletion of all standard aggregate reports or other services' records. Turning Analytics off stops future collection; it does not immediately delete information already sent. Contact us about deletion and related requests. Google: https://policies.google.com/privacy

To check whether an app update is required, TinyTrash connects to GitHub Pages (https://aniyomesan.github.io/tinytrash-version-info/version.json). GitHub processes connection information such as IP addresses. Region, collection schedules, search terms and IDs intended to identify users are not sent. This update check operates independently of the Analytics choice. GitHub: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
The official website is delivered through Cloudflare Pages. Cloudflare processes IP addresses and request information to deliver pages, protect communications and prevent unauthorized access. Cloudflare Web Analytics is not enabled. Retention of these delivery and security records follows each provider's purposes, contracts and legal requirements and is separate from the app's update-check interval. Cloudflare: https://www.cloudflare.com/privacypolicy/

When you send an inquiry, the operator receives your email address, message, attachments and similar information. Inquiry emails are managed in Gmail and used to answer inquiries, investigate problems and address rights requests, refunds and disputes. Please do not send unnecessary addresses, schedules or information about others. Records become eligible for deletion one year after a case is closed and are reviewed every six months. Records needed to comply with law or address refunds or a specific dispute may exceptionally be retained after checking the reason and necessity, and deleted when no longer needed. Provider backups and similar records follow each service's policies. Google, provider of Gmail: https://policies.google.com/privacy
Service providers may process information outside Japan. RevenueCat states that it processes customer data on AWS in the United States. Google, GitHub, Cloudflare and others also operate internationally; see each service's explanations of processing locations and safeguards. Processing countries and information protection systems may differ from Japan's. Information and consent required for overseas processing are handled in accordance with applicable law.
The operator handles information for the purposes described above: providing features and purchase contracts, answering inquiries, user-selected analytics, ad delivery, security and legal obligations. Processing requiring consent is based on consent. Processing supported by contract performance, legal obligations or other grounds recognized by applicable law is carried out within that scope. Simply viewing this policy or using the app is not treated as consent to optional analytics or tracking.
Depending on applicable law, you may request notice of purposes, access or disclosure, correction, deletion, suspension of use, restriction of processing, objection, data portability or withdrawal of consent. Tell contact@ursastack.com what data and action your request concerns. We check only the minimum information needed for verification and respond within applicable deadlines. If we cannot identify the data, must retain it or need to protect others' rights, we explain the reason and what we can do. An inquiry email alone does not automatically identify information on your device or SDK identifiers.
Withdrawal does not affect lawful processing before withdrawal. For information independently controlled by providers, we also direct you to the relevant contact. Where you have a right to complain to the competent data protection authority in your place of residence or other jurisdiction, this policy does not prevent it. Questions about security measures are accepted at the same contact.
Material changes to this policy will be announced in advance on the official website, with their content and effective date. We provide any additional notices or consent procedures required by law.

Notifications are delivered by your device's OS and show the waste type. You can turn notifications on or off and change their lock-screen display in device settings.

TinyTrash is intended for a general audience aged 13 and older and is not a dedicated children's service. We do not intend to collect personal information from children under 13. Store age ratings, the app's intended age range and the age at which a person can independently consent to personal information processing are different. Follow local requirements for parental consent or involvement. Stating the app's intended age range does not mean users' ages have been verified. Contact us if you become aware of information about someone below the intended age or information handled without required consent.