Privacy policy
Who we are
Stackreferee is an independent software comparison publication. The operator of this site is the data controller for the processing described on this page. You can reach us via the corrections form on this site.
What we collect, and why
We designed this site to work with as little personal data as possible. Reading our articles requires no account. We process personal data only in these cases:
- Comments. If you post a comment we store the name you enter, your comment text and the posting time. Comments are protected by Google reCAPTCHA (see below). Legal basis: our legitimate interest in hosting a spam-free discussion.
- Correction reports. If you report a factual error we store the report and, only if you choose to provide it, your email address so we can follow up. Legal basis: legitimate interest in accurate publications.
- Page statistics. We count page views per article. This counter stores only the page path and a total; no IP addresses, identifiers or profiles.
- Web analytics (Google Analytics 4, consent-based). We measure pageviews and aggregate usage of the site so we know which comparisons help readers. Analytics cookies are only set after you accept them via the cookie banner (Google Consent Mode); without consent only cookieless, aggregated pings are sent. See our cookie policy. We use the data for aggregate statistics only, never for advertising or profiling. Legal basis: your consent for the cookies; our legitimate interest for the aggregate, cookieless measurement.
- Hosting logs. Our hosting provider processes technical request data (such as IP addresses) to serve the site securely. We do not use this data to identify visitors.
We do not sell personal data, and we do not use advertising trackers.
Where your data is stored
We use a small number of processors to run this site:
- Vercel (hosting and content delivery), which processes technical request data.
- Supabase (database), where comments, correction reports and page counters are stored on infrastructure in the United States (AWS, us-west-2). Transfers rely on the EU-U.S. Data Privacy Framework and/or standard contractual clauses of these providers.
- Google reCAPTCHA, loaded only when you open the comment form, to prevent spam. Google processes technical data for this purpose under its own privacy policy.
How long we keep data
- Comments: as long as the article is published, or until you ask us to remove yours.
- Correction reports: until the report is resolved, then archived for our editorial audit trail.
- Page statistics: indefinitely, as they contain no personal data.
Outreach to companies we cover (GDPR Art. 14 notice)
We may contact companies that are featured in our comparisons, using publicly available business contact details (for example a name, role and business email found on a company website or professional platform). We process such business contact data on the basis of our legitimate interest in offering our services to featured companies. We record where the data came from, and the first message will tell you. You can object at any time and we will stop contacting you and remove your details from our outreach list.
Your rights
Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us via the corrections form linked above. You also have the right to lodge a complaint with your local data protection authority.
Changes
When we add new processing, we update this page before the processing starts, with a new date at the top. See also our cookie policy and terms of service.