Data Governance: Privacy Architecture & Zero Tracking

When you place a pin on the map during post creation, two coordinate values are stored: latitude and longitude. These are used for exactly one purpose — rendering the approximate area on a map so a nearby person can get a sense of your general neighbourhood. They are never passed to an advertising network. They are never cross-referenced with your device ID or browsing history. They are never sold. They disappear, along with the rest of your post, after one hour.

The location data visible to other users is entirely text-based. Before anyone chooses to unlock a post, they see only a city name and country. Nothing more. The detailed location field — the table number, the bench in the park, the coffee shop on the corner — remains locked behind the unlock interaction until someone actively chooses to engage. This is the specific inversion of how most location-based apps are designed. Most apps share everything by default and let you opt out. Double Stop shares nothing by default and lets you opt in.

There are no tracking cookies on this platform. The only cookie in use is the session token — an httpOnly value that identifies you if you have chosen to create an account. It carries no advertising identifiers and cannot be read by third-party scripts. If you use the app without an account, no cookie is set at all.

The automated data lifecycle is equally straightforward. Posts expire after one hour and vanish from the public feed. The underlying record is moved to a private archive and retained for exactly 90 days under Austrian law for potential law enforcement cooperation, then permanently deleted. A scheduled job runs at 03:00 UTC every night — automatically, without exception, and without manual override.

No analytics fingerprinting. No pixel tracking. No third-party data enrichment. The engineering constraint is simple: collect only what is necessary for the product to function, and delete it on a fixed, non-negotiable schedule.

That is the complete data model. There is nothing hidden in it.