Privacy Notice

1. Who we are

stckfndr is operated by Ø Bureau, which acts as the data controller for personal data processed through this site. Contact: hello@stckfndr.com.

2. What we collect and why

• Account data (email address, login credentials) — to create and secure your account. Legal basis: performance of a contract.
• Tool submissions (your name, business email, tool details) — to review and publish directory listings. Legal basis: performance of a contract and our legitimate interest in running the directory.
• Newsletter subscriptions (email address) — to send the stckfndr newsletter. Legal basis: consent, withdrawable at any time via the unsubscribe link.
• Usage and device data (pages viewed, listing views and outbound clicks, IP address, browser type) — for security, fraud prevention, aggregate analytics and sponsor performance reporting. Legal basis: legitimate interests. Sponsor reporting is aggregated and never identifies individual visitors.
• Support messages — to answer your enquiry. Legal basis: legitimate interests.

Payment card details are never collected or seen by us — they are handled entirely by Stripe.

3. Who we share data with

• Service providers and subprocessors: Supabase (database and authentication), Vercel/Lovable (hosting), Brevo (newsletter delivery), Google Analytics (usage analytics).
• Stripe, our payment processor, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

4. International transfers

Some providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or EU Standard Contractual Clauses with appropriate supplementary safeguards.

5. Retention

Account and listing data are kept while your account or listing is active and for up to 12 months afterwards. Newsletter data is kept until you unsubscribe. Analytics events are kept for up to 14 months. Transaction records are retained as long as accounting law requires. After that, data is deleted or anonymised.

6. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You can withdraw consent at any time. Email hello@stckfndr.com and we will respond within one month. You also have the right to complain to your national supervisory authority (in Denmark, Datatilsynet).

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, and least-privilege access to administrative tooling.

8. Cookies

We use strictly necessary cookies for authentication and session security, and analytics cookies (Google Analytics) to understand aggregate usage. You can block or delete cookies in your browser settings; strictly necessary cookies are required for sign-in to work.