Privacy Policy

1. Controller

STOK Terminal is the controller for the personal data processed through this website. For privacy questions, contact us at privacy@stokterminal.com.

2. Data We Process

Depending on how you use the site, we process these categories of data:

• Contact and signup data: email address, language, launch-list status and form choices.
• Product research data: optional answers about your current tools, research habits and intended use.
• Technical data: device, browser, page, security challenge and error information needed to operate the site.
• Usage and attribution data: pages, interactions, campaign parameters and referral source, handled according to your consent choices.
• Aggregate measurement: first-party counts and grouped metrics that are designed not to identify you or follow you across sessions.

3. Purposes

• Manage the launch list, invitations and product updates.
• Understand demand for STOK Terminal and improve the website and onboarding funnel.
• Measure campaigns, only where the required consent has been given.
• Protect forms, prevent abuse, debug errors and comply with legal obligations.

4. Legal Basis

• Consent: launch-list signup, product updates and non-essential analytics or advertising cookies.
• Legitimate interest: security, abuse prevention, debugging and aggregate or minimized audience measurement.
• Legal obligation: records needed to comply with applicable law.

5. Analytics and Cookies

Before consent, we may use limited, first-party, aggregate measurement and memory-only analytics configured without persistent storage, autocapture or session recording. This helps us understand broad site performance without setting analytics or advertising cookies.

We may also keep first-party campaign and referral values in session storage for the current visit so a signup can be attributed without creating a cross-session identifier.

If you allow analytics, we use tools such as PostHog and Google Analytics through Google Tag Manager to understand product interest and improve the site. If you allow advertising measurement, Google Tag Manager and Google Ads may measure campaigns and support relevant advertising.

6. Recipients and Providers

We use providers in these categories:

• Hosting, edge infrastructure and security providers, including Cloudflare and Turnstile.
• Database, backend and email delivery providers used to operate the launch list, including Supabase.
• Analytics and campaign measurement providers, including PostHog and Google services, according to your consent choices.
• Legal, accounting or compliance providers where necessary.

7. Retention

Launch-list data is kept for up to 2 years after signup, or until you request deletion. Analytics retention depends on the provider settings and is configured to be proportionate to product and campaign measurement needs.

8. International Transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or equivalent lawful transfer mechanisms.

9. Your Rights

You may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent where applicable. To exercise your rights, email privacy@stokterminal.com.

You may also lodge a complaint with your national data protection authority. In the EU, you can find your authority at edpb.europa.eu.

10. Security and Changes

We use HTTPS, access controls and provider security measures to protect personal data. We may update this policy when the product, providers or legal requirements change.