Privacy policy

This policy explains what personal data the Stake Dev Tool site and cloud service process, why, and what your rights are. The data controller is Simon Gay (see the legal notice), reachable at contact@stakedevtool.com.

What we collect

• Account data: email address, display name, and a hashed password (or your GitHub identity if you sign in with GitHub).
• Workspace content: the game bundles, math files, saved rounds and settings you upload to your workspaces.
• Billing status: your subscription plan and its state. Payment details (card numbers, billing address) are collected and stored by Stripe, our merchant of record, never by us.
• Technical logs: IP address, user agent and request metadata, kept briefly for security, debugging and rate limiting.
• Usage analytics: product analytics on the site and dashboard, and aggregate statistics on share links (sessions, spins, observed RTP). Share-link visitors are anonymous; we do not build profiles of them.

Why we process it

• To provide the Service you signed up for, including hosting your content and syncing it across your team (performance of a contract).
• To keep the Service secure, prevent abuse, and understand how it is used so we can improve it (legitimate interest).
• To comply with legal obligations such as accounting.

We do not sell personal data and we do not run advertising.

Who processes it for us

• netcup GmbH (Germany): server hosting.
• Cloudflare: DNS and object storage for math blobs and game bundles.
• Stripe, Inc. (United States): payments, as merchant of record.
• Resend: transactional email (invites, account messages).
• PostHog (EU hosting): product analytics.

Data is stored in the European Union wherever possible. Where a processor is outside the EU (such as Stripe), transfers rely on recognised safeguards such as standard contractual clauses.

How long we keep it

• Account data and workspace content: while your account is active.
• After deletion: removed from production immediately and from backups on their normal rotation schedule.
• Technical logs: a few weeks at most.
• Billing records: kept by Stripe and by us as required by tax law.

Cookies

The dashboard uses an essential session cookie to keep you signed in. Analytics on the public site are configured without cross-site tracking. We do not use advertising cookies.

Your rights

Under the GDPR you can request access to your data, its rectification, deletion or portability, and you can restrict or object to certain processing. Write to contact@stakedevtool.com and we will respond within a month. You can also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

Changes

If this policy changes materially, we will notify account holders by email or in the dashboard.