Privacy Policy.
本页面目前仅提供英文版本。
Last updated 2026-09-25. Questions: support@stackd.icu.
2.1 Controller. stackd, based in Belgium (legal entity and address to be added). Privacy contact: privacy@stackd.icu.
2.2 Data we collect.
- Account: email, handle, hashed password (bcrypt — we never see your password), chosen language, profile preferences.
- Security/session: IP address, user-agent (browser/OS/device), login timestamps — to secure accounts and detect abuse (legitimate interest).
- Purchases: order history, product/subscription, amounts. Payment details are handled by Stripe and NOWPayments; we store a payment reference and status, not your card number.
- Analytics: aggregate, privacy-friendly usage via self-hosted Umami (no third-party ad tracking).
2.3 Why (legal bases). Contract (providing the service, purchases), legitimate interest (security, fraud prevention, product analytics), legal obligation (accounting/tax), consent (non-essential cookies).
2.4 Sharing. Processors only: Stripe, NOWPayments (payments); our hosting provider; Backblaze (encrypted backups). We do not sell your data.
2.5 Retention. Account data while your account is active; order/accounting records as required by law; backups rolled off after 14 days.
2.6 Your rights. Access, rectification, erasure (delete your account in settings), restriction, portability, objection. Contact privacy@stackd.icu. You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA).
2.7 Security. Passwords hashed (bcrypt), sessions signed, payment data handled by PCI-compliant processors, encrypted nightly backups, isolated challenge environments.