PRIVACY POLICY

Last updated: March 2026 · GDPR compliant · Blueprint §8.1

1. What We Collect

Account data (username, email, optional phone), profile information, posts and votes you create, device and usage data for security purposes.

2. How We Use It

To operate the platform, personalise your feed, enforce our Terms, and comply with legal obligations. We do not sell your data. We do not run ads.

3. Data Retention

Account data is retained until you delete your account, then hard-deleted after 30 days. Security logs are kept for 90 days. Moderation records for 36 months.

4. Your Rights (GDPR)

You have the right to access, correct, export, or erase your data. Use Settings → Privacy to exercise these rights, or contact privacy@stattook.com.

5. Third Parties

We use Cloudinary (media storage), Neon (database), Upstash (cache), Resend (email), and Vercel (hosting). Each has its own privacy policy.

6. Cookies

We use only strictly necessary cookies (authentication). See our Cookie Policy for details.

7. Contact

Data controller: Stattook · privacy@stattook.com