Effective May 16, 2026
Privacy Policy
The short version
We collect only what we need to run the service. We don't sell your data. We use Google Analytics to understand traffic, reputable third-party services for auth and email, and Stripe for payments. Here's the full breakdown.
What we collect
Account data: your email address, created when you sign up.
Payment data: membership payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only your Stripe customer reference and subscription status.
Newsletter: if you subscribe to the weekly email, we store your email address for that purpose. You can unsubscribe at any time.
Usage data: which perks you click through (stored to power the popularity ranking and to help us understand what's useful). Not shared publicly or with third parties.
Site activity: we keep a first-party log of how the site is used (pages visited, searches within the catalog, referral source, and time on page), keyed to a random visitor identifier stored in your browser and, once you sign in, to your account. We use it to understand and improve the product (for example, where people get stuck before subscribing). It contains no IP addresses, is never shared or sold, and is deleted after 90 days.
Analytics & session replay: we use Google Analytics for aggregate traffic measurement, and may use Microsoft Clarity to capture how the site is used, including anonymized interaction recordings (mouse movement, clicks, scrolling). Clarity masks typed input by default and retains recordings for about 30 days. We don't use either service for advertising or sell this data. You can opt out with a browser extension or by blocking analytics scripts.
Third-party services
- Supabase:Database and authentication. Data stored in the EU (Ireland). Privacy policy →
- Resend:Transactional and newsletter email. Privacy policy →
- Google Analytics:Traffic analytics. Sets cookies; collects aggregate usage data. Privacy policy →
- Microsoft Clarity:Usage analytics and anonymized session recordings (typed input masked). ~30-day retention. Privacy policy →
- Railway:Hosting infrastructure. Privacy policy →
What we don't do
- We don't sell your data to anyone
- We don't use your data for advertising
- We don't share your email with partners or sponsors
- We don't use advertising trackers or cross-site tracking
Data retention
We keep your account data while your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your data. To exercise these rights, email hello@perkstack.co.
Changes to this policy
We'll email you if we make material changes. Continued use after notice constitutes acceptance of the revised policy.
Contact
Privacy questions: hello@perkstack.co