Privacy Policy

Last updated: November 5, 2026

This policy explains how StackTasks ("we", "us") handles personal data when you visit this website, join the waitlist or receive our emails, under the EU General Data Protection Regulation (GDPR). It doesn't cover the StackTasks app, which will have its own policy.

1. Who is responsible

Markus Nitsche
Untere Fuchsmatt 8
77704 Oberkirch
Germany
Email: markus@stacktasks.com

Further details are in our Imprint. Data Protection Officer: [Name and email, or delete this sentence if you don't have one.]

2. Visiting the website

Server logs. When you open a page, our infrastructure technically processes your IP address, the page requested, the time, the referring page and your browser type, in order to deliver the site and keep it secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted after [number] days.

Cloudflare. The website is delivered through Cloudflare, which processes this request data to deliver the site quickly and protect it from attacks. Legal basis: Art. 6(1)(f) GDPR.

Google Fonts. Pages load the Inter typeface from Google's servers (fonts.googleapis.com, fonts.gstatic.com), which sends your IP address to Google. Legal basis: Art. 6(1)(f) GDPR, our interest in a consistent appearance.

Storage in your browser. We don't use advertising cookies. The site keeps a few values in your browser's local storage:

which audience you picked in the "What brings you to StackTasks?" question, and when you dismissed it, to tailor the page and not ask again
which language you picked
your place on the waitlist, if you joined
which version of the page text you were shown, and whether that view was counted

These stay in your browser until you clear them. To compare page versions we receive the version and a count of views, without your IP address being stored with it or any link to your email address. If you sign up, the version you saw is stored with your signup.

3. Joining the waitlist

When you sign up, we store:

your email address
the consent text you agreed to and when you agreed
the page and form you signed up on, the page version you saw, and tags such as the audience and plan you picked and your browser's language, so we can write to you in the right language
the times you signed up and confirmed

We use this to manage the waitlist, tell you about your invite and founding-member offer, and send you the emails you agreed to. Legal basis: your consent (Art. 6(1)(a) GDPR).

Double opt-in. We first send a confirmation email. Your place on the waitlist only counts once you click the link in it.

Withdrawing consent. You can withdraw your consent at any time, without affecting anything done before, through the unsubscribe link in every email or by writing to us.

4. Our emails

Emails are sent through [Email provider name and location]. Links in our emails may be personal to you, so we can record that you clicked them and when, and use that to send you more relevant emails. We don't track whether you open an email. Legal basis: your consent (Art. 6(1)(a) GDPR).

If an email can't be delivered, or you mark one as spam, mail servers report that to us. We record it with your address and stop emailing you, because we have a legitimate interest in not sending unwanted or undeliverable email (Art. 6(1)(f) GDPR). We keep this record so we don't email you again by mistake, even if your other data is deleted.

5. Who receives data

We don't sell your data. It's only passed to the service providers needed to run this website, who process it on our behalf where required:

Cloudflare, Inc. (website delivery and security)
Google Ireland Limited (Google Fonts)
Hetzner GmbH (hosting and database)
Amazon Web Services SES (sending email)
All-Inkl (sending email)

6. Transfers outside the EU

Cloudflare and Google may process data in the United States and other countries outside the EU. These transfers rely on an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) where the provider is certified, and otherwise on Standard Contractual Clauses.

7. How long we keep data

We keep your waitlist data until you unsubscribe, or until it's no longer needed for the waitlist and your founding-member offer. After you unsubscribe we stop emailing you, and keep the record of your consent and unsubscribe for [period] so we can prove them. Unconfirmed signups are deleted after [period].

8. Your rights

You have the right to access your data (Art. 15 GDPR), correct it (Art. 16), have it erased (Art. 17), restrict its processing (Art. 18) and receive it in a portable format (Art. 20). You can also object to processing based on legitimate interest (Art. 21) and withdraw consent at any time (Art. 7(3)).

To use these rights, write to the address in section 1. You can also complain to a data protection authority, for example [Authority of your German federal state].

9. Security

Data is transferred over encrypted HTTPS connections, and access to the waitlist database is limited to authorized people.

10. Children

This website isn't aimed at children under 16, and we don't knowingly collect their data. If you think a child has given us data, please contact us and we'll delete it.

11. Changes

We update this policy when our practices or the law change. The date at the top shows the latest version.