This policy explains what information Steelstake handles, and how - written plainly, and specific to what this product actually does, not a generic template.
It's worth separating two very different kinds of information on Steelstake:
To create an account: your name and email address. If you set up a watch: the specific licences, companies, map sheets, or areas you choose to track. We don't ask for payment information while the service is free, and we don't collect anything beyond what's needed to run the product.
Your account information is stored in a database on our own server, hosted by DigitalOcean. It is not sold to anyone, for any reason.
We work with a small number of service providers to run Steelstake - each is named here plainly, not buried in a long list of hypotheticals:
None of these providers use your information for their own purposes - they process it only to help us deliver the service to you.
Steelstake uses exactly one cookie: a session cookie that keeps you logged in. It's strictly necessary for the product to work and contains no tracking or advertising data. We don't use analytics or advertising cookies of any kind.
You can view or update your name, watches, and digest preferences at any time from inside your account, unsubscribe from emails with one click, and request that your account be deleted entirely by reaching out to us.
We take reasonable, honest steps to protect your information: data is encrypted in transit, access to our systems is key-based rather than password-based, and only what's necessary to operate the service is collected in the first place. As a small, growing product, we won't claim a level of security we haven't earned - we treat this as an ongoing responsibility, not a one-time checkbox.
If this policy changes in a way that matters, we'll let existing accounts know by email.
Questions about your data? Reply to any email you've received from Steelstake, or reach out through the account you signed up with.