Privacy policy

Who we are

SeeTheStack scans public websites and reports the technology they run on. It's run by Rorz Network LLC, which decides what data is collected and how it's used, so it's the controller of that data. Questions or requests go to hello@seethestack.com or through the privacy request form.

People named on websites (founder pages)

When a website names the person behind it, we may show that person on the site's page and on a founder page that lists the other sites naming them. We only use what the website publishes about itself on its homepage: founder markup in its structured data, or a “built by” line that links to the person's public profile.

What we keep: the name as the site gives it, the public profile handles it links to (X, GitHub, LinkedIn, Indie Hackers, Product Hunt, a personal website), which sites name the person and in what role, and the short quote the name came from. We don't collect email addresses, phone numbers, photos or home addresses, we don't read the registrant's details from domain registration (WHOIS) records, and we don't buy data about people.

Why: people who put their name on a website have chosen to be publicly associated with it, and showing who builds which sites is useful to readers researching the web. Our legal basis is legitimate interests. We weighed that against the effect on the people listed: the data is limited to what they published themselves, and anyone can have their page removed.

How long: while a site names the person. When a rescan no longer finds them on any site, their record is deleted. If you ask us to remove your page, we delete everything we hold about you and keep only a one-way hash of your profile handles, so that a later scan doesn't recreate the page.

Sites can also appear as run by the same owner when they share an analytics or advertising account ID that their pages publish. We show the shared ID and nothing else about who holds it.

Websites we scan

We fetch public pages the way a browser does and record the technologies we detect, with the evidence for each (script addresses, response headers, cookie names), plus each domain's registrar and registration date. This is data about websites rather than people. Where a site blocks automated visits, we may fetch it through a proxy service.

If you have an account

Your email address and name, your organization and its plan, the sites you watch or track and your alert settings. For signing in we keep a session record with your IP address and browser type, which expires after 30 days. Basis: we need it to provide the service you signed up for. We keep it until you ask us to delete it.

Payments are handled by Stripe. We store the Stripe customer and subscription references and your plan status, never card numbers. Billing records are kept as long as tax law requires.

We email you to sign in, about changes on sites you watch, and about your trial or plan. You can change alert settings in your dashboard.

Newsletter

If you subscribe, we keep your email address with our newsletter provider until you unsubscribe, which you can do from any issue. Basis: your consent.

Analytics, cookies and logs

We count visits with Fathom Analytics, which uses no cookies and doesn't store personal data. The only cookie we set is the session cookie that keeps you signed in. Our host keeps request logs, which include IP addresses, for a limited time to run and secure the service.

Privacy requests

When you contact us about your data we keep your message, your email address and what we did about it for three years, so we can show the request was handled.

Who processes data for us

• Railway: hosting and database
• Resend: sign-in and alert emails
• Stripe: payments
• MailerLite: the newsletter
• Fathom Analytics: visit counts
• ScraperAPI: fetching public pages that block automated visits (no visitor data)

Some of these companies are in the United States. Where data leaves the EU or UK, we rely on the safeguards they provide, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. We don't sell personal data.

Your rights

You can ask for a copy of the data we hold about you, have it corrected or deleted, object to our use of it, or have its use restricted. Use the request form or email hello@seethestack.com. We reply within 30 days. For a copy or a correction we may ask you to show the data is yours, for example by replying from an address on the site that names you. If you're in the EU or UK and unhappy with our answer, you can complain to your data protection authority.

SeeTheStack isn't meant for children under 16, and we don't knowingly hold data about them.

Changes

When this policy changes we update the date at the top.