Last updated: March 20, 2026
StackBuilt ("we," "us") is committed to protecting your privacy. This policy explains what data we collect, why, and how you can control it.
| Data | Why We Collect It | How Long We Keep It |
|---|---|---|
| Email address | Account creation, login, transactional emails | Until you delete your account |
| Password (hashed) | Authentication — stored as bcrypt hash, never plaintext | Until changed or account deleted |
| OAuth identifiers (GitHub/Google/Apple) | Sign-in without a password | Until you unlink or delete your account |
| Course progress | Track which lessons you've completed | Until you reset progress or delete your account |
| Subscription status | Determine what content you can access | Until account deleted; billing records kept 7 years for tax purposes |
| IP address (temporary) | Rate limiting to prevent abuse — not stored permanently | In-memory only, cleared every 5 minutes |
We use a small number of trusted third parties to operate the service:
We use one cookie: a secure, httpOnly JWT session token named token. It is set when you sign in and used solely to authenticate your requests. There are no tracking cookies, no third-party cookies, and no advertising cookies.
Your data is stored on a self-hosted server protected by:
You have the right to:
To exercise any right not available in account settings, email [email protected].
StackBuilt is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.
We may update this Privacy Policy. We'll notify you of material changes by email. Continued use after changes take effect constitutes acceptance.
Privacy questions: [email protected]
See also: Terms of Service