Privacy
Last updated 25 September 2026
Gestalt is a quiet photo journal. This page describes what it stores about you, what is public, and how to leave.
What we store
- An account ID: a random identifier that ties the rest together. It contains nothing about you.
- Your email address, used to sign you in.
- Your username (the address of your journal) and an optional display name.
- An optional profile photo, a short bio, and up to five links.
- The photos and captions you choose to publish.
- Your subscription and any custom-domain add-on, with their expiry dates, so the app knows whether you can publish.
- A custom domain name, if you connect one.
- The result of an automated check of each published photo for sexual content, kept as a decision record.
- Reports people send us about published entries, with any contact details they include, kept until resolved and for the record afterwards.
What's public
Published entries appear on your journal page, its RSS feed, and your About page. Nothing else is public. An entry held for review is hidden from your journal; the rest stays visible. A suspended journal is not served at all.
Changing your address
You can rename your journal at any time. The old name is held for 30 days so that old links don't land on a stranger's page; after that it is free for anyone.
Content checks and reports
Every published photo is checked automatically for sexual content. An entry over the line is hidden, not deleted, and you are emailed. Anyone can report an entry from its menu; reports go to safety@stillgestalt.com and are acted on within 24 hours.
Subscriptions
Payment is handled by Apple; Gestalt never sees your card. To keep your subscription in step with your account, RevenueCat receives your account ID and your purchase history, not your name, email address or photos.
Custom domains
If you connect a domain you own, its name is stored with your account and passed to Vercel to route your journal and issue its certificate. Disconnecting removes it.
Apart from your sign-in codes, we email you only when an entry is held for review. No newsletters. Hold notices are sent through Resend; sign-in codes come from Supabase.
What we don't do
No ads, no analytics, no trackers, no selling data; the only sharing is with the processors named below. If you sign in with Apple, we receive only the email address (and, once, the name) that Apple shares.
Where it lives
Data is stored with Supabase, the site is served by Vercel, subscriptions are tracked by RevenueCat, published photos are checked by Sightengine, and email is sent through Resend — each acting as a processor for us.
Deleting your account
Delete your account from Settings in the app. If you no longer have the app, email support@stillgestalt.com from the address on the account.
Deleted the same day: your entries and photos, your profile and About page, your journal page, your custom domain connection, and your sign-in. Kept: the 30-day hold on your address, the decision records from content checks, any reports about entries (they are the reporters' records), and the billing records of your purchases. An Apple subscription is cancelled through Apple, not by deleting the account.