Back to site

Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains what data Stackt (the “Service”) collects, why, and your rights over it. It is written to align with the EU General Data Protection Regulation (GDPR).

1. Data controller

The data controller is Paul Marchiset. For any privacy request, contact stackt@paulmarchiset.me.

2. Data we collect

  • Your email address — used to create your account and sign you in (one-time email code, or Google sign-in).
  • Content you create — the projects, cards, versions/phases, dates and notes you enter. Please do not enter personal data about other people (see our Terms of Use).
  • Technical data — essential session/authentication cookies required to keep you signed in. We do not use advertising or third-party tracking cookies.

3. Why we use it (legal bases)

  • To provide the Service and your account — performance of our agreement with you.
  • To secure the Service and prevent abuse — our legitimate interest.

4. Processors & where data is stored

We rely on Supabase (Supabase, Inc.) for authentication and database hosting, and on Vercel Inc. to serve the application. These providers process data on our behalf under their own security and data-processing terms. Your account and content data is stored in the European Union (Ireland). No data is sold or shared for marketing.

5. Retention

We keep your account and content for as long as your account is active. When you delete your account (from the app or on request), it is removed from the live Service promptly, and fully purged from our systems and backups within a maximum of 2 years, except where the law requires us to keep certain records.

6. Your rights

Under the GDPR you have the right to:

  • access the data we hold about you;
  • rectify inaccurate data;
  • erase your data (“right to be forgotten”);
  • export your data (portability);
  • object to or restrict certain processing.

To exercise any of these, email stackt@paulmarchiset.me. You may also lodge a complaint with your data protection authority (in France, the CNIL — cnil.fr).

7. Changes

We may update this policy; the “Last updated” date above reflects the latest version.