Last updated 2026-11-14. Applies to Capstan for Android, every version.

Capstan collects nothing. There is no Capstan server for it to collect anything to.

That sentence is the whole policy, and the rest of this page exists to make it checkable rather than asking you to take it on trust.

What the app sends, and who receives it

Capstan makes network requests to three kinds of address, all of them yours or your feeds':

1. The feed server you typed in. If you connect a FreshRSS, Miniflux or Nextcloud News account, the app talks to that server at the address you gave it, with the credentials you gave it. That is your server, or one you chose. Nothing about it comes back to us.

2. The feeds you subscribe to. For feeds kept on the device rather than on a server, the app fetches the feed URL directly, on the schedule you set.

3. The sites your articles come from — but only when you ask. Two things reach out to a publisher's own servers:

• Reader view. When you ask for the full text of an article, the app fetches that article's page from the site that published it, and extracts the readable part on your device.
• Images in articles. Images are loaded from wherever the article points at them, usually the publisher's own server or its CDN.

Both of these tell that site your IP address and the app's User-Agent, exactly as a web browser would when you open the same page. Capstan does not add anything to those requests. If you would rather a site did not see you, do not open its articles in reader view.

There is no fourth kind. No analytics, no crash reporting, no advertising, no attribution or install tracking, no "anonymous usage statistics", and no server belonging to Capstan. The app contains no third-party SDK that does any of those things, and you can check: the dependency list is in app/build.gradle.kts.

What stays on your device

The database stores only a reference to a credential, never the credential itself. They are deliberately kept apart so that a database — which gets backed up, copied and inspected — cannot carry a secret out with it.

How long things are kept

Articles you have read are removed after a period you choose: a week, 30 days, three months or a year, counted from when you read them. Articles you have not read are never removed by this, however old they are. Starred articles, and anything you saved for later, are kept regardless of age.

None of this is a transfer. Removal means deleted from the device.

Permissions

• Internet — to fetch feeds and talk to your server. Without it the app does nothing.
• Notifications — asked for only if you turn sync notifications on, and not before.

Capstan asks for no location, no contacts, no camera, no microphone, no files and no identifiers.

Your rights, and why there is nothing to ask us for

Laws such as the GDPR and the CCPA give you the right to see, correct, export and delete the personal data a company holds about you. Capstan holds none, so there is nothing to request. If you want everything gone, uninstall the app; Android removes the database and the stored credentials with it. To disconnect a server but keep reading, remove the account in the app's settings — that deletes its stored credential straight away.

Data you keep on your own feed server is governed by that server, not by this policy.

Children

The app is not directed at children and collects nothing from anyone.

Changes

If this policy ever changes, the date at the top changes with it and the previous versions stay in this file's history. A change that made the first sentence untrue would be announced in the app before it took effect, not posted here quietly.

Contact

Support email: balharbi7038@gmail.com

Mail about this policy, or about anything Capstan does with data, goes to that address and is answered by the person who wrote the app.