Privacy Policy.

We collect three kinds of information:

• Account data — your name, email, university, and password hash. If you sign in with Google or GitHub, we receive your name, email, and profile photo from them.
• Content & usage — notes you upload, courses you follow, votes you cast, and basic analytics about how you use the platform (pages visited, search queries, errors encountered).
• Technical data — IP address, browser, device type, and timestamps. Used for security, rate-limiting, and debugging.

• To run the platform — show you the right notes for your university and courses.
• To verify your identity and keep your account secure.
• To send transactional email (verification, password reset) and, if you opt in, exam-week roundups.
• To detect and prevent abuse, spam, and fraud.
• To improve Stackwise based on aggregated usage patterns.

We don't sell your personal data. We don't run third-party ad networks. We don't share your activity with your university unless you ask us to.

Limited to what's necessary to operate the service:

• Cloud hosting and storage providers (e.g., for files you upload).
• Email delivery providers for transactional messages.
• Analytics tools that help us understand site performance — configured to minimize personal data.
• Authorities, when legally required (court orders, valid subpoenas).

Anything you post publicly on Stackwise — your display name, profile, notes, comments — is visible to other users. Treat that as public.

We use cookies and local storage for sign-in sessions, your preferences (e.g., university), and basic analytics. Essential cookies can't be turned off without breaking sign-in. Analytics cookies can be declined where required by law.

Account data is kept while your account is active. If you delete your account, we remove your profile and personal info within 30 days, though anonymized aggregate stats may be retained. Content you uploaded remains attributed to a deleted username unless you remove it before closing your account.

Backups are pruned on a rolling 60-day cycle.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Export your uploaded content.
• Object to certain processing (e.g., marketing emails).

Most of this is available directly in your profile settings. For anything else, email [email protected].

Passwords are hashed. Sessions are signed and expire automatically. Files are stored on cloud infrastructure with access controls and at-rest encryption. We're a small team and can't promise perfect security, but we treat data carefully and disclose incidents promptly.

Stackwise isn't directed at children under 13. If we learn that we've collected data from a child under 13, we'll delete it.

Stackwise is operated from Bangladesh. By using the platform, you understand your information may be processed in countries other than your own. We apply equivalent protections regardless of where data is processed.

We'll post material updates on the homepage and email registered users at least 7 days before they take effect. The “Last updated” date at the top of this page always reflects the current version.

Privacy questions, data requests, or concerns? Email [email protected]. For everything else, use our contact form.