Privacy Policy.

Last updated 2026-09-25. Questions: support@stackd.icu.

2.1 Controller. stackd, based in Belgium (legal entity and address to be added). Privacy contact: privacy@stackd.icu.

2.2 Data we collect.

• Account: email, handle, hashed password (bcrypt — we never see your password), chosen language, profile preferences.
• Security/session: IP address, user-agent (browser/OS/device), login timestamps — to secure accounts and detect abuse (legitimate interest).
• Purchases: order history, product/subscription, amounts. Payment details are handled by Stripe and NOWPayments; we store a payment reference and status, not your card number.
• Analytics: aggregate, privacy-friendly usage via self-hosted Umami (no third-party ad tracking).

2.3 Why (legal bases). Contract (providing the service, purchases), legitimate interest (security, fraud prevention, product analytics), legal obligation (accounting/tax), consent (non-essential cookies).

2.4 Sharing. Processors only: Stripe, NOWPayments (payments); our hosting provider; Backblaze (encrypted backups). We do not sell your data.

2.5 Retention. Account data while your account is active; order/accounting records as required by law; backups rolled off after 14 days.

2.6 Your rights. Access, rectification, erasure (delete your account in settings), restriction, portability, objection. Contact privacy@stackd.icu. You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA).

2.7 Security. Passwords hashed (bcrypt), sessions signed, payment data handled by PCI-compliant processors, encrypted nightly backups, isolated challenge environments.