Home›Legal

Privacy Policy

Last updated : June 30, 2026

This policy describes how StackArt collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

The data controller is Nardella Victor (French sole trader), publisher of the StackArt website.

  • •Address: 15 Passage des Angròlas, 34430, Saint-Jean-de-Védas, France
  • •Email: support@stackart.dev

2. Data collected

We only collect data necessary for the purposes described below:

  • •Account data: email address, name/username, identifier provided by our authentication service.
  • •Order and payment data: products purchased, amount, history. Card details are processed directly by Stripe and are never stored by us.
  • •Technical data: IP address, browser type, connection logs, for security and proper operation.
  • •Browsing data: see the Cookie Policy.
  • •Contact data: information you provide by email.

3. Purposes and legal bases

PurposeLegal basis
Creating and managing your accountPerformance of the contract
Processing orders and paymentsPerformance of the contract
Customer supportPerformance of the contract / legitimate interest
Security and fraud preventionLegitimate interest
Marketing emails / newsletterConsent
Audience measurement (analytics)Consent
Compliance with legal and accounting obligationsLegal obligation

4. Recipients and processors

Your data is accessible to the publisher and its processors, selected for their security guarantees and acting on instruction:

  • •Stripe: Payment processing. Location: United States (Standard Contractual Clauses). Privacy policy
  • •Logto: Authentication and account management. Location: European Union / self-hosted. Privacy policy
  • •OVHcloud (OVH SAS): Website and database hosting. Location: France (European Union). Privacy policy

We never sell your personal data to third parties.

5. Transfers outside the European Union

Some providers (notably Stripe and the host) may process data outside the European Union. These transfers are governed by appropriate safeguards (European Commission Standard Contractual Clauses).

6. Retention periods

  • •Account data: for the lifetime of the account, then up to 3 years after the last contact.
  • •Order / billing data: 10 years, in accordance with accounting obligations.
  • •Prospecting data: 3 years from the last contact or until consent is withdrawn.
  • •Technical logs: up to 12 months.

7. Your rights

Under the GDPR, you have the following rights:

  • •right of access to your data;
  • •right to rectification;
  • •right to erasure ("right to be forgotten");
  • •right to restriction of processing;
  • •right to object;
  • •right to data portability;
  • •right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to support@stackart.dev. Proof of identity may be requested. We respond within one month.

You may also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

8. Security

We implement appropriate technical and organizational measures (encrypted communications, access control, compliant providers) to protect your data against unauthorized access, loss or alteration.

9. Cookies

The use of cookies and trackers is detailed in our Cookie Policy. You can manage your preferences at any time from the consent banner.

10. Changes

This policy may be updated to reflect changes in our practices or regulations. The last update date appears at the top of this page.

11. Contact

For any question regarding your personal data: support@stackart.dev.