Privacy at Stack
Stack is operated by Chris Hansen. This page explains how the current beta handles your information. For privacy questions or requests, email chrishansen1984x@gmail.com.
Information you provide
Stack stores your account email, a password hash, display name, and settings. It stores the books you add, reading and listening progress, session history, ratings, goals, challenges, and contributions you choose to make in community features. Library imports send the selected CSV to Stack’s server for processing. Only select files you intend to import.
Information on your device
The app keeps sign-in credentials, cached library information, and pending reading saves on your device. Imported audiobook audio stays on the device; Stack syncs its metadata and listening position, not the audio file. Lock-screen controls can show the current book and session state.
How information is used and shared
Stack uses this information to sign you in, sync your library, calculate reading statistics, run features you use, and diagnose problems. Comments, replies, ratings, and other shared contributions may be visible to other readers where you post them. Ghost Mode does not erase information you have already shared.
Cloudflare hosts Stack’s website, API, database, and cover storage. Network requests may include IP addresses and technical request information used for delivery, security, and operational logs. Book searches and metadata lookups use external catalog services including Open Library, Google Books, Audible, and Hardcover when configured. Search terms, titles, authors, and book identifiers may be sent to those services. These catalog requests run through Stack’s server; Stack does not forward your account email, password, session token, or device IP address to catalog APIs. Loading remote cover images connects your device to the image provider.
Apple handles TestFlight distribution and feedback submitted through TestFlight under its own privacy practices. If you contact support, the email provider processes your message and attachments. Please avoid including passwords or unrelated personal information.
Account emails
Stack sends verification, password-reset, and email-change codes through Google Gmail. Google processes the recipient address, subject, message content, and delivery information. Only Stack’s sending mailbox authorizes the Gmail connection; readers do not connect their own Google accounts. Stack requests sending permission only and does not read the mailbox. The sender’s OAuth credentials are stored as backend secrets and are never included in the app or website.
Community safety
Text you choose to publish in community features, including your public display name, is sent to Cloudflare Workers AI for an automated safety check before publication. Private reading positions and unshared bookmark notes are not sent to this check. If a check fails or rejects a post, the post is not published and you can edit your draft. These checks can make mistakes; contact support if you think a post was rejected incorrectly.
You can report shared content and block other readers. Reports store a copy of the reported content for authorized moderators to review. Reports and block lists are private to your account and the people handling safety requests. Blocking hides contributions between the affected accounts; it does not delete earlier posts or copies someone already saved.
Retention and deletion
Your account and saved reading data are retained while your account is active. You can export your data or delete your account in Settings. Account deletion removes your account and associated private reading data from the active database. Shared spaces may remain for other members, with deleted authors replaced by a deleted-reader label. Cover cleanup runs separately and retries if necessary.
Operational logs and backup copies may outlast removal from the active database. They are not part of the normal app view. Contact support with questions about retained copies or a deletion request. Copies you export or share yourself remain under your control. Unsynced data on another device is not included in a server export.
Your choices
You can edit profile settings, export your information, sign out devices, and delete your account from Settings. If you cannot sign in, contact support about access or deletion. You can request a verification code, reset a forgotten password, or confirm an email-address change through the account screens. Keep these codes private.
Changes
This page will be updated when Stack’s data practices change. The date above identifies the current version.