Privacy Policy

Last updated: February 2026

Data We Collect

We collect the following information:

• Account information: your email address and name when you create an account.
• IP address: used for analytics, rate limiting, and abuse prevention.
• Payment information: processed securely by Stripe. We do not store your card details on our servers — all payment data is handled directly by Stripe in accordance with PCI-DSS standards.

How We Use Your Data

Your data is used to: provide and maintain your account, process transactions, send transactional emails (e.g. purchase confirmations), improve the Platform, and prevent abuse or fraud.

Third-Party Data Sharing

We do not sell or share your personal data with third parties, with one exception: payment information is shared with Stripe solely for the purpose of processing transactions. Stripe's privacy policy governs their handling of your data.

Cookies

IndieStack uses a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics. No cookie consent banner is needed because we only use strictly necessary cookies.

Data Retention

Account data is retained for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymised analytics data (page views, aggregated usage statistics) may be retained indefinitely.

Your Rights (GDPR)

If you are in the UK or EU, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct any inaccurate data.
• Erasure — ask us to delete your personal data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Object — object to processing of your data in certain circumstances.

Contact

For any privacy-related questions or to exercise your rights, contact us at privacy@indiestack.dev.