Legal · Last updated September 26, 2026

Privacy Policy

How FIVE STACK collects, uses and protects your personal information. The quick overview lives in the privacy docs; this page is the binding version.

The short version

· You sign in through Discord. We store your email, display name and profile picture.
· Your projects, prompts and credit history are stored so the service can work.
· Prompts and design inputs go to AI models to generate code. Your personal account data doesn’t.
· Essential cookies only — no advertising or tracking cookies.
· Delete your account and your personal data is removed within 30 days.

1. Introduction

This Privacy Policy describes how FIVE STACK (“we”, “us”, “our”), operating FIVE STACK at fivestacks.dev, collects, uses, and protects your personal information. We are committed to safeguarding your privacy in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data We Collect

Account information: Email address (via Discord OAuth), display name and profile picture, authentication provider ID.
Usage data: Projects and generated code (stored securely in our database), chat messages and prompts sent to AI models, credit usage history (model used, credits consumed, timestamp), subscription and billing status.
Technical data: Browser type and version, IP address, device information, cookies and session data.

3. How We Use Your Data

To provide and maintain the Service
To authenticate your identity and manage your account
To process payments and manage subscriptions (via Paddle)
To track credit usage and enforce plan limits
To send AI generation requests to third-party model providers
To improve the Service and fix bugs
To communicate important updates about the Service
To prevent fraud and abuse

4. Third-Party Services

We share data with the following third-party services:

Discord: Sign-in (Discord ID, username, email, profile picture).
Clerk: Authentication sessions (email, profile data).
Neon: Database hosting (all user data, projects, messages).
Paddle: Payment processing (email, billing information). Paddle acts as our Merchant of Record and has its own Privacy Policy.
AI model providers: Via OpenRouter. Your prompts and design inputs are sent to AI models for code generation.
Personal account data: Not sent to AI providers.
Vercel: Application hosting and file storage.

5. Data Retention

We retain your account data and projects for as long as your account is active. Upon account deletion, we remove your personal data within 30 days. Anonymized usage statistics may be retained for analytical purposes. Payment records are retained as required by applicable tax and accounting laws.

6. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access — Request a copy of your personal data
Rectification — Correct inaccurate personal data
Erasure — Request deletion of your personal data
Portability — Receive your data in a machine-readable format
Restriction — Restrict processing of your data
Objection — Object to processing of your data

To exercise any of these rights, contact us at contact@fivestacks.dev. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Service to function. We do not use advertising or tracking cookies. Third-party services (Clerk, Paddle) may set their own cookies as described in their respective privacy policies.

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (TLS/SSL), secure authentication via OAuth providers, and a database that is only reachable from our own servers. However, no method of transmission over the internet is 100% secure.