Privacy Policy

What we collect

• Account data. Your email address and name, and either a password (stored only as a salted hash) or the basic profile details (name, email, avatar) that Google or GitHub share when you choose to sign in with them.
• Sign-in sessions. When you sign in we store a session record with your IP address and browser user agent, so we can keep you signed in, let you revoke sessions, and spot abuse.
• Listings you submit. The tool's name, website, tagline, description, founder note, pricing details, category, tags, logo and screenshots. Listings are public once approved. Do not put personal data in them that you do not want published.
• Upvotes. Which tools you upvoted, tied to your account so that each person counts once.
• Outbound clicks. When someone clicks through to a listed tool we record the tool, the referring site's domain, the visitor's country and an anonymous visitor code. The code is a salted one-way hash of your IP address, browser and the date. We never store your raw IP address in these records, and the code changes every day, so it cannot be used to follow you over time.
• Visitor statistics. We measure page views, referring site, country, device type and browser with Cloudflare Web Analytics. It uses no cookies or local storage, does not build a profile of you and does not follow you across other websites.
• Emails. If you contact us we keep the correspondence. We also send you the emails the service needs: address verification, password reset, and updates about your submissions.

AI-assisted submissions

The submit form can pre-fill your listing from your website. If you use it, we fetch the public page you enter and send its text to an AI provider to draft the fields. Only the public content of that page is sent, never your account details. Check the draft before submitting; you stay responsible for what you publish.

Link checks

To confirm that listed tools link back to Stackboo we fetch the homepage of listed sites about once a week. See StackbooBot for details and how to opt out.

Cookies

We use a session cookie to keep you signed in, and nothing else that identifies you. We do not use advertising cookies, cookie-based analytics or social media pixels; our visitor statistics are cookie-free. Our hosting provider may set strictly necessary security cookies to protect the site from abuse.

Why we use your data

• To provide the service you asked for: your account, your listings, your upvotes (performance of a contract).
• To keep the site secure, prevent spam and abuse, and understand which tools get attention, through the anonymous click counts (our legitimate interests).
• To send the service emails described above. We do not send marketing email without asking you first.
• To comply with legal obligations when they apply.

We do not sell your personal data.

Who processes your data

We use a small number of service providers, each only for the job described:

• Cloudflare: hosting, network security, file storage for logos and screenshots, and cookie-free visitor statistics.
• Neon: the database that holds accounts, listings and upvotes.
• Resend: delivery of our emails.
• Runware: the AI model behind the optional pre-fill feature.
• Google and GitHub: only if you choose to sign in with them.

These providers may process data outside your country, including in the United States. Where the law requires it, that happens under appropriate safeguards such as standard contractual clauses.

How long we keep it

Account and listing data is kept while your account exists. Session records expire on their own. Anonymous click records are kept as aggregate statistics. If you ask us to delete your account we remove your personal data promptly, and listings you submitted are either deleted or, if you ask, anonymised. Backups may hold copies for a short time before they are overwritten.

Your rights

Depending on where you live, you can ask to see the data we hold about you, correct it, export it, delete it, restrict or object to how we use it, or withdraw consent you gave. Email contact@stackboo.com from the address on your account and we will reply, normally within 30 days. If you think we handled your data wrongly you can also complain to your local data protection authority.

Children

Stackboo is for founders and is not aimed at children. You must be at least 16 to create an account. If you believe a child has given us personal data, email us and we will delete it.

Changes

If we change this policy in a meaningful way we will update the date above and, for account holders, tell you by email or on the site.