Skip to content
stakeacountry.com
Sign up
Your data

Privacy

A short list, because we collect a short list. If something is not named here, we do not have it.

These documents are not finished

The registered name, registration number, address and phone are still blank infeatures/legal/merchant.ts. A payment provider will refuse an application whose site does not identify the seller, and a lawyer should review the wording before this is published.

1. What we hold

Because you gave it to us

  • Email address: to identify the account, confirm it, and reach you about payments.
  • Handle and display name: public by design; they appear on every board you stake.
  • Password: never stored. Only an Argon2id hash, from which the password cannot be recovered.
  • Your card content: the name, pitch, link and logo you publish. Public by definition.
  • Profile details: bio, website, avatar, banner colour, if you fill them in.

Because you used the service

  • Payment records: amount, time, and which country. Kept as accounting records.
  • Board history: your stakes and positions. Public, and permanent, because a board that could be quietly rewritten would be worthless.
  • Sessions: a hashed token, and the time it was issued.
  • Visitor record: a random identifier, two timestamps, and a city name with a two-letter country code. No fingerprint, and no name attached to any of it.
  • That city, specifically. It is copied from a header our hosting platform attaches to the request before it reaches us. We do not look it up, we use no geolocation service, and we do not store or log your IP address on this record: the platform resolves the city from the connection, and the city is all that arrives. It is overwritten every time you visit and is never added to a list, so the record can say where you are and can never be made to say where you have been. It is a city, never an address, and it is often absent.

What we never hold

Card numbers, expiry dates and security codes. These are entered on the payment provider’s systems and never reach ours. See security.

2. Why, and on what basis

  • To provide the service you paid for: performance of our contract with you.
  • To keep accounting records of payments: a legal obligation, and the reason these outlive an account.
  • To keep the service safe: rate limiting and abuse prevention, our legitimate interest in not being overrun.

We do not profile you, and we do not use your data to target advertising at you.

3. Who else sees it

  • Our payment provider: receives what it needs to take a payment and to meet its own obligations.
  • Our email provider: receives your address and the message, to deliver confirmation and password emails.
  • Google: only if you choose to sign in with Google, and only the sign-in itself. We receive your address, name and picture; Google does not receive your activity here.
  • Anyone at all: your handle, display name, card and board positions. That is the product: your advertising is meant to be seen.
  • Anyone looking at the globe: one visitor’s city, shown as “Someone in Kyiv is here”. One at a time and never a list, with no handle, no identifier and nothing else beside it. Nobody can tell from it who was here, how many were in that city, or where anyone else was.

We do not sell your data, and we do not share it for anyone else’s marketing.

4. How long

  • Account details: until you delete the account.
  • Payment records: for as long as accounting law requires, which outlasts the account. This is the one category deleting an account does not remove.
  • Board history: kept, but detached from your identity when an account is deleted.
  • Sessions: until they expire or are revoked.
  • Visitor records: a rolling window; nothing older is needed for a count. The city is replaced on your next visit and is emptied outright the moment the platform stops sending one, so it never outlives the visit it describes.

5. What you can ask for

  • A copy of what we hold about you.
  • Correction of anything wrong. Most of it you can edit yourself in settings.
  • Deletion of your account, subject to the accounting records above.
  • To object to a use you disagree with.

Write to support@stakeacountry.com from the address on the account. We answer within 30 days, usually far sooner.

6. Cookies

We set cookies for three things and nothing else: to keep you signed in, to carry a Google sign-in safely from start to finish, and to count a visitor once rather than repeatedly. There are no advertising or tracking cookies here, which is why there is no consent banner to dismiss.

7. Children

This service is not intended for anyone under 18, and we do not knowingly hold their data.

8. Changes

If this policy changes in a way that affects you, we say so by email before it takes effect rather than editing the page quietly.