Your data, plainly.

CountDeck exists to show you your numbers. Nothing more.

Servers in the EU. Questions? Write to privacy@countdeck.app. Read the full privacy policy

Full privacy policy

To show your public counts and revenue numbers as widgets we store as little as we can, we never sell it, and you can delete all of it from the app at any time. This section explains what we keep and why, in plain words.

Your account

When you open the app for the first time, it creates an account with a random ID. You do not need to give us a name, email or password to use CountDeck. On iPhone, you can sign in with Apple in Settings so you can restore your account on a new phone. If you do, Apple shares a stable user ID and an email address with us. If you choose Hide My Email, that address is an Apple relay address and we never see your real one. We use it only to sign you in and to answer you if you write to us. We never send marketing to it.

If you turn on a public profile, the name, bio, links and counters you choose appear on your page, and a contact email appears on your media kit only if you add one. Turn the profile off to take it down.

We also store your app preferences, such as language, currency, theme and widget styles.

What we store to show your numbers

• Handles and accounts you add, such as a YouTube channel, an X or Bluesky handle or a GitHub repository. These are public already.
• Read-only API keys for revenue sources, such as a Stripe restricted key. Keys are encrypted in Supabase Vault, are only readable by our server, and are never sent back to your phone. You can delete a key at any time by removing the source; it is also deleted when you delete your account. We recommend keys with read-only permissions.
• Read-only login tokens for Instagram and Threads, when you sign in with them. They allow reading your profile and follower count only: no posting, no messages. They are encrypted in Supabase Vault like keys, and deleted when you remove the source or delete your account. You can also revoke access anytime in Instagram or Threads settings; we then delete or stop using the token.
• Snapshots of your numbers over time (for example follower counts, stars or MRR), so we can show today's change, charts, goals and predictions.
• Goals and widget settings you create in the app.
• Device push tokens, so we can send the notifications you turn on (milestones, daily summary) and refresh your widgets. A token identifies the app on your device, not you.

Counts for public accounts are shared between users: if two people add the same public channel, we read it once. Public counts may also appear on our public web pages (for example a live counter page for a channel or repository), because they are public data. Revenue numbers from your keys are private to you and never appear on public pages.

Waitlist, newsletter and notification emails

If you join the waitlist or ask to be notified when a counter reaches a milestone on our website, we store your email address, what you asked to be notified about, and where you came from (a campaign tag or the referring website, if any). We use it only to send what you asked for. Every email has a way to unsubscribe, or write to us and we will delete it.

The same goes for a race or comparison alert (one email when the account behind takes the lead) for following a creator's profile (one email each time they reach one of the goals on their profile), and for a YouTube channel's new videos (one email each time it posts one; we store the time of the newest video we told you about). For these alerts we also store when we sent the email, and for races which side was behind when you signed up. Each alert email has a one-click unsubscribe link that stops that alert only, and your mail app's unsubscribe button works too.

If you sign up for the newsletter at the bottom of our website, we store the same things: your email address, that you asked for the newsletter, when you signed up and where you came from, if any. We use it only to send the newsletter, and only because you asked: your consent is the legal basis. Signing up uses double opt-in: we first send one email, through Resend, with a link to confirm the address is yours, and you are not subscribed until you click it. If you don't, we send nothing else (asking again resends that email at most once every 10 minutes). We record when you confirmed and, if you leave, when you unsubscribed. Once confirmed you get one welcome email, then we write at most once a month, when something ships. Every newsletter email has a one-click unsubscribe link, and your mail app's unsubscribe button works too; you can also reply "unsubscribe". To have your address deleted, write to privacy@countdeck.app.

If you ask for a leaderboard's weekly movers (for example the top music YouTubers in India), we store your email address, which leaderboard, when you signed up, where you came from, if any, and the week we last emailed you about it. We send at most one email a week per leaderboard, through Resend, listing its biggest climbers, and only once the leaderboard has a full week of gains. There is no confirmation email for this one. Every digest has a one-click unsubscribe link that stops that leaderboard only, and your mail app's unsubscribe button works too. To have your address deleted, write to privacy@countdeck.app.

Website analytics

Our website uses our own self-hosted analytics, running on Cloudflare, to count visits, see which sites send visitors, and measure clicks such as the App Store button. It sets two first-party cookies: a random visitor ID kept for one year and a visit ID that expires after 30 minutes. They are never shared with third parties or used to follow you across other sites. Like any web server, our hosting providers keep short-lived technical logs (such as IP addresses and error reports) to run and secure the service.

What you type in the search box is sent to our server to find matching accounts, leaderboards and tools. We don't store your searches. To stop abuse, we count search requests per IP address in the server's memory for 10 minutes, then forget them.

Subscriptions

CountDeck Pro is billed by Apple through your App Store account on iPhone, or by Google through Google Play on Android. We use RevenueCat to check whether your subscription is active. We never see your payment card details. RevenueCat receives your anonymous app user ID and your App Store or Google Play purchase records; we receive your subscription status.

Who processes data for us

• Supabase: database, authentication and encrypted key storage (Vault).
• Cloudflare: hosts our website and API, and runs our self-hosted website analytics.
• RevenueCat: subscription status.
• Resend: sends our waitlist, newsletter and notification emails.
• Apple: App Store billing, Sign in with Apple and push notifications.
• Google: Google Play billing on Android.
• Upstream platforms we read numbers from, such as YouTube, X, GitHub, Bluesky, Instagram, Threads, Stripe and RevenueCat, and any other source you add. We send them the handle, key or token needed to read your numbers, nothing more.

We do not sell or rent personal data, and we do not share it with advertisers or data brokers. There are no ads in CountDeck.

YouTube

CountDeck uses YouTube API Services to read public channel statistics, such as subscriber counts. By using the YouTube features you also agree to the YouTube Terms of Service, and Google handles the data it receives as described in the Google Privacy Policy. We keep YouTube statistics for at most 30 days. The free YouTube monetization checker on this site stores nothing about the channels you look up; the watch hours and Shorts views you type stay in your browser. The free desk counter keeps a channel’s subscriber count and its latest video’s view count while its page is open, and deletes them a day after the page was last open.

Bluesky follower pages

When someone looks up a public Bluesky account on our website, we keep its public profile (handle, display name, avatar) and save its follower count at least once a day, to show the history on that account's page with its current following count. A list of well-known Bluesky accounts is tracked the same way. We never fill in days from before tracking started. To have a page removed, email privacy@countdeck.app with a link to it: we delete its history and stop tracking the account.

How long we keep it

We keep your data while your account exists. Snapshots of public accounts nobody tracks any more may be kept to power public pages and charts, without any link to you. YouTube statistics are the exception: they are deleted after 30 days. Waitlist emails are kept until launch messaging is done or until you unsubscribe. Newsletter and weekly movers emails are kept until you unsubscribe.

Deleting your data

In the app, go to Settings → Delete account. This permanently deletes your account, your sources, your API keys, your snapshots of private numbers, your goals, widget settings and device tokens. It does not cancel an App Store or Google Play subscription: cancel that in your iPhone's App Store settings or in Google Play. You can also export your data as CSV from Settings before deleting.

Children

CountDeck is not directed at children under 13, and we do not knowingly collect data from them.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Most of this you can do yourself in the app. For anything else, write to privacy@countdeck.app. If you are in the EU or UK, you can also complain to your local data protection authority.

Changes

If we change this policy in a meaningful way, we will update the date above and tell you in the app.

Contact

Questions about privacy: privacy@countdeck.app