Privacy Policy

SuppsStack is built on a simple principle: we do not sell your personal data. This policy explains what we collect, why, and what your choices are.

What We Collect

• Account information: email address, username, password (stored only as a cryptographic hash), and optional profile details (display name, bio, forum icon).
• Content you create: forum posts, comments, votes, and supplement stacks. Stacks are private by default; you choose whether to make a stack public.
• Technical basics: standard server logs (IP address, browser type, pages requested) used for security and site operation.

What We Don't Do

• We do not sell or rent your personal information (anything that identifies you) to anyone. That promise is unconditional.
• We do not run a mailing list or send marketing email.
• We do not build advertising profiles of you.

Aggregated & De-Identified Data

Separately from your personal information, we may create aggregated andde-identified data from activity on the site — for example, “40% of members who take supplement X also take supplement Y,” or broad statistics about how supplements are combined, dosed, and timed. This data is stripped of anything that identifies you and cannot reasonably be used to identify you; private stack details tied to an individual are never included.

We may publish, share, license, or sell this aggregated, de-identified data to third parties (for example, researchers or companies studying supplement usage trends). Because this data is not personal information, doing so does not conflict with our promise above never to sell your personal information. When we provide de-identified data to others, we commit to keep it in de-identified form and, where applicable, to contractually require recipients not to attempt to re-identify it.

Cookies

We use a single functional cookie to keep you logged in. We do not use tracking or analytics cookies today. If we introduce advertising in the future, ad partners (such as Google AdSense) may use cookies subject to their own policies — this page will be updated, and where required by law you will be asked for consent first.

Email

Your email address is used only for account access (and, if you opt in later, notifications about replies to your posts). Nothing else.

Your Rights

You may access, correct, or delete your account information at any time from your profile page, or by contacting us at contact@suppsstack.com. Depending on where you live (for example, California residents under CCPA/CPRA), you may have additional statutory rights to access or delete personal information — contact us and we will honor them.

Children

SuppsStack is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.

Data Security

Passwords are hashed with bcrypt and never stored in plain text. Stack ownership data is stored with an additional layer of pseudonymization to limit exposure in the event of a breach.

Changes

If this policy changes materially (for example, when advertising launches), we will update this page and note the date above.