Privacy Policy
Last Updated: April 16, 2026
1. INTRODUCTION
Welcome to StackEngine. We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. This policy describes the types of information we may collect from you or that you may provide when you visit the StackEngine website and use our platform, and our practices for collecting, using, maintaining, protecting, and disclosing that information.
2. DATA MINIMIZATION & ZERO-KNOWLEDGE PRINCIPLE
StackEngine is explicitly engineered as a "Zero-Knowledge" platform. Your sensitive data—including source code, cloud configurations (YAML, SQL, JSON), and API Keys—is processed exclusively within your browser's local sandbox. We do not collect, read, store, or transmit your core proprietary data to our own servers.
3. THIRD-PARTY LLM TRANSMISSION
Our service acts as a secure conduit between your local browser and third-party Large Language Model (LLM) providers (e.g., OpenAI, Anthropic).
- Explicit Consent: Data is only transmitted upon your explicit "Approve & Send" command.
- Direct Routing: Sanitized data is transmitted via encrypted HTTPS directly from your browser to the chosen LLM provider.
- No Interception: StackEngine servers never intercept, store, log, or cache these payloads or your API keys. Please review the privacy policies of your selected LLM providers, as your data will be subject to their terms once transmitted.
4. INFRASTRUCTURE & TELEMETRY (INFORMATION WE DO COLLECT)
To ensure platform stability, security, and performance, we utilize industry-standard infrastructure and analytics tools:
- Cloudflare: We use Cloudflare's global edge network for DNS resolution, DDoS protection, and SSL/TLS encryption. Cloudflare may log standard web traffic data (such as IP addresses and request timestamps) strictly for security and performance routing.
- PostHog: We use PostHog for anonymized, aggregated product telemetry to understand how users interact with our UI. This data does not contain Personally Identifiable Information (PII), API keys, or your proprietary code/prompts. PostHog data is processed in the EU/US region with IP anonymization enabled.
5. COOKIES AND TRACKING TECHNOLOGIES
StackEngine uses minimal, essential cookies required for basic platform functionality and security. We do not use third-party advertising or cross-site tracking cookies.
6. DATA SECURITY
We have implemented technical and organizational measures designed to secure your personal information from accidental loss and unauthorized access. By keeping all sensitive processing client-side, we significantly reduce the risk of centralized data breaches. However, the safety and security of your information also depend on you. You are responsible for keeping your API keys confidential.
7. YOUR PRIVACY RIGHTS (GDPR & CCPA)
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict the processing of your data. Because StackEngine does not store your PII, source code, or API keys on our servers, there is no user data for us to delete or export. For queries regarding our telemetry data, please contact us.
8. CHANGES TO OUR PRIVACY POLICY
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
9. CONTACT US
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at: legal@stackengine.dev.