Privacy

Privacy Policy

Last updated: May 4, 2026. Plain English. The TL;DR: we collect what we need to build your site and bill you, store it with reputable processors, and we don't sell anything to anyone.

Who we are

Stackd (“Stackd,” “we,” “us”) is operated by Luke Whaley, a sole proprietor based in St. George, Utah, USA. You can reach us at [email protected] or (435) 272-5293.

What we collect

From you directly, when you become a customer:

  • Contact info: your name, business name, email, phone number.
  • Payment info: captured by our payment processor (Stripe). We never see your full card number.
  • Content for your website: text, photos, hours, menu, services, and anything else you send us to build with.

From your visit to stackd.build:

  • Aggregate analytics: coarse, anonymous traffic data (page views, country, referring site) via Cloudflare Web Analytics. No cookies, no fingerprinting, no individual tracking.

Why we collect it

  • To build, host, and maintain your website.
  • To bill you the monthly subscription fee.
  • To contact you about your account (changes, billing issues, scheduled maintenance).
  • To improve stackd.build based on aggregate visit data.

We do not use your data for ad targeting. We do not sell your data. Period.

Who we share it with

Only the third-party services we strictly need to run Stackd:

We have no other third-party sharing. We don't use Google Analytics, Meta Pixel, Hotjar, Segment, or any other behavioral tracker.

How long we keep it

  • While you're a customer: as long as your subscription is active.
  • After cancellation: billing records for 7 years (US tax requirement). Your site files we hand off to you on cancellation; we keep a backup for 90 days then delete.
  • Site analytics: Cloudflare retains aggregate visit data for 6 months; we don't archive it.

Your rights

Wherever you live, you can:

  • Ask what we have on you: email us, we send you a copy within 30 days.
  • Correct anything wrong: email us, we fix it.
  • Delete it all: email us. We delete what we can within 30 days. Some records (billing, fraud prevention) we're legally required to keep for the periods above.
  • Export your data: same as above; we'll send it as JSON or CSV.

If you're in California, the EU, or the UK, you have additional statutory rights (CCPA / GDPR). We honor those, email us and we'll handle it.

Cookies & tracking

We don't use cookies on stackd.build beyond what Cloudflare uses for security and bot mitigation. No tracking cookies, no advertising cookies, no third-party pixels.

Changes to this policy

If we change this policy meaningfully, we'll email active subscribers and update the “Last updated” date at the top. Trivial fixes (typos, link cleanups) we just push.

Contact

Email [email protected] or text (435) 272-5293. We answer within a business day.