Privacy, explained clearly.

This page explains the information used by the builder, customer accounts, support, and email signup.

Updated September 14, 2026.

Stacks on your device

The builder stores stack names, tool selections, plans, quantities, and estimates in browser storage. Clearing that storage removes the device copy. Exports are downloaded to your device.

Your account and cloud saves

Supabase provides customer authentication and database storage. When you choose Save to account, your stack document is stored with your account identifier. Other customers cannot read your account save. Loading a save replaces the builder’s device copy after confirmation.

Purchases

Stripe processes payments for digital guides. We store the guide identifier, payment reference, amount, status, and account association needed to provide guide access. Payment-card information is entered with the payment provider.

The Stack Drop

Marketing signup is optional. The signup flow records an email address and consent status, and requires email confirmation before subscription. Resend delivers account and newsletter emails using the email address and message content needed for delivery. Unconfirmed addresses are not subscribed to marketing emails. Marketing messages will include an unsubscribe link.

Support messages

We store the email address, subject, and message you submit to support so we can review your request. Do not include passwords or payment-card details.

Sharing

Shared stacks are encoded after the # symbol in their link. Anyone with the complete link can read and import the stack. Avoid private client details in shared names. Deleting your copy does not remove someone else’s copy.

Optional site analytics

If you allow analytics, we measure public page paths, tool-link and guide-offer clicks, guide-sample views, demo interactions and successful demo-stack creation, broad traffic sources, screen-size groups, and a random browsing-session identifier. We do not include account identifiers, email addresses, search text, full referring URLs, or shared-stack contents in analytics events. The session identifier is stored in this tab and rotates after 30 minutes of inactivity. Your analytics preference is remembered for six months. Do Not Track and Global Privacy Control signals disable optional analytics.

While an opted-in page is visible, a small activity update is sent once per minute to support a live session count. Live records contain the random session identifier, public page path, and last activity time. They expire from reports after five minutes and are cleaned up as new activity arrives. Reports are available only to authorized administrators. Event reporting covers a rolling 90-day window; older events are removed when new activity is processed. Supabase stores these records. A daily keyed network hash is used for rate limiting, separately from analytics events; old analytics rate-limit records are cleaned up as new events arrive. Payment and subscriber totals come from the service records described above and are independent of optional analytics.

You can decline analytics without losing any site features, or change your choice here or in the footer. Withdrawing consent stops future tracking; existing anonymous records are not linked to your account.

Service requests and storage

The hosting and database providers process network requests and may keep operational logs. Request identifiers are hashed for basic abuse controls. External tool websites have their own privacy practices. This version does not include advertising tracking scripts.

Contact

For privacy questions or requests, email team@startupstacked.com.

Removing information

Delete device stacks in My Stack, unsubscribe from marketing, or delete your customer account from Account settings. Account deletion removes its cloud saves and purchase access; necessary purchase records may remain without the deleted account association. Exports and previously shared copies remain wherever they were saved. Contact support for other data requests.

Manage your account · Contact support

How long information stays

Device stacks remain until you remove them or clear browser storage. Account saves remain until replaced or the account is deleted. Support requests, purchase records, abuse-control records, and provider logs can have different retention needs. We retain these records as needed to provide the service, handle requests, prevent abuse, and meet applicable recordkeeping obligations. Deletion from provider backups may take additional time.

Your choices and requests

You can browse and build a device stack without an account. Account saves and marketing signup are optional. Use Contact & support to ask to access, correct, or remove information you submitted. We may need to verify that a request concerns your account. Applicable privacy rights depend on your location and the service’s legal obligations; this policy does not limit those rights.

Changes to this page

We will update this page when information practices change. The date above identifies this version. The operator is Jake Curry, operating as Startup Stacked. Privacy requests can be sent to team@startupstacked.com.