Shipstack

Privacy

What Shipstack keeps about you, why, who else handles it, and how to have it removed. There are no accounts, no ads and no tracking cookies.

Who is responsible

Shipstack (shipstack.lol) is run by Steffen Dybvik. Questions and requests about your data go to contact@shipstack.lol.

What we keep

  • When you pay. Stripe runs the checkout and handles your card. We never see card numbers. Stripe tells us the email address you entered, the amount and the payment's ID. We keep that email with the payment and with the listing it paid for: it decides who manages the listing and where outbid alerts go. If Stripe asks for a billing address, that stays with Stripe.
  • What you list. The URL, pitch, category, homepage, X handle and offer you give are public, and so are the title, description and icon we read from the listed page. Your email address is never shown.
  • Email settings. For addresses we email: whether you want the Monday recap and the weekly owner report, when we last sent a confirmation or owner link, and the random codes in those links.
  • Pool chip-ins. The email Stripe reports and the amount, so a filled pool is charged and a failed one released.
  • Referrals. If you set up payouts for the referral program, Stripe collects your identity and bank details directly; we never see them. We keep your Stripe account ID, your referral code and a record of each referral: which listing, the amount, and whether it was paid.
  • Card fingerprints. For each payment Stripe gives us a fingerprint of the card (not the card number), so a lister can't earn a referral on their own listing with a different email.
  • Clicks. One count per listing per day. We don't record who clicked: no IP address, no cookie.
  • Abuse limits. To stop form spam and checkout abuse, the server holds IP addresses in memory for its rate limits. They are not written to disk or to logs.
  • Light or dark theme. Saved in your own browser, never sent to us.

Why

  • To provide what you paid for: the listing and its rank, outbid alerts, the owner page, the payment record, and referral payouts if you joined the program.
  • With your consent: the Monday recap, only after you confirm from the link we email. Stop it any time.
  • Our legitimate interest: the weekly report on your own listing, which you can turn off, and keeping the site free of spam, abuse and referral fraud.
  • The law: payment records are kept for bookkeeping.

Who else handles it

  • Stripe processes payments, and for referrers, checks identity and sends payouts.
  • Resend sends our emails.
  • The site and its database run on a rented server in the EU.
  • Listing icons load straight from where they live (GitHub, the app stores, package registries or the listed site), so those hosts see your IP address when your browser shows an icon. A listing link takes you to that site, which has its own privacy terms.

Stripe and Resend may process data outside the EEA, under the safeguards they provide, such as the EU's standard contractual clauses. We don't sell personal data or share it with anyone else unless the law requires it.

How long

  • Payment records: as long as bookkeeping law requires. The email on a listing: as long as the listing exists, or until you ask us to remove it, which ends your control of that listing.
  • Email settings: until you ask us to delete them. Turning emails off takes effect straight away.
  • Owner-page links stop working after 14 days.
  • Referral records: as long as the payment records they belong to.

Your rights

You can ask for a copy of what we hold about you, have it corrected or deleted, object to how we use it, or take it elsewhere. Email contact@shipstack.lol from the address it's about. Every email we send links to a page where you can stop it, and your listings are on your owner page. If you think we got it wrong, you can complain to your data protection authority.

Last updated 2026-09-26.