Privacy Policy

This Privacy Policy explains how Buffstack ("Buffstack," "we," "us," or "our") handles personal data when you visit buffstack.pro, create an account, receive our emails, or use the Buffstack community (collectively, the "Service").

Buffstack, operated by Lucas de Vito, is responsible for deciding why and how personal data is processed through the Service. This policy does not cover independent websites, tools, or services linked by Buffstack or its members.

The information we collect depends on how you use Buffstack. It may include:

• Account data: name, email address, username, authentication identifiers, password reset state, invitation details, and account status.
• Profile data: photo, headline, biography, location, role, goals, skills, tools, availability, social links, website, rank, XP, and visibility settings.
• Community activity: posts, comments, likes, feedback, reports, invitations, channel activity, and related timestamps.
• Messages and files: direct-message text, read state, images, documents, and other attachments you choose to send.
• Communications: notification preferences, unsubscribe choices, support or feedback messages, and email delivery records.
• Technical and usage data: IP address, browser and device information, session cookies, requested pages, referring URLs, approximate location derived from network data, interaction events, and diagnostic or security logs.

We do not ask for government identification numbers, precise financial account details, health data, or biometric identifiers as part of ordinary community use. Please do not post sensitive personal information you do not want others to see.

Most data comes directly from you when you register, complete your profile, publish content, send a message, change settings, or contact us.

If you choose Google or GitHub sign-in, the selected provider sends us authentication details and basic account information according to the permissions shown during sign-in. We also create technical and activity records automatically when you use the Service. Other members may provide information about you when they mention, message, invite, or report content involving you.

We use personal data only for defined product, safety, communication, and legal purposes:

• To create and secure accounts, authenticate sessions, complete onboarding, and provide requested community features.
• To display profiles and contributions according to the Service's visibility rules and your available settings.
• To deliver posts, comments, likes, rankings, invitations, direct messages, attachments, and Realtime updates.
• To send account, security, announcement, comment, reply, onboarding, digest, and unread-message emails according to your settings and unsubscribe choices.
• To answer support requests, receive feedback, moderate content, investigate misuse, and protect members and the Service.
• To understand feature use, measure landing-page and signup activity, diagnose errors, and improve performance and design.
• To establish, exercise, or defend legal claims and comply with applicable obligations.

Depending on your location and the activity, we rely on performance of our agreement with you, our legitimate interests in operating and securing the community, your consent, or compliance with law. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing.

Buffstack is a community service, so some information is designed to be shared. Your profile, rank, skills, tools, activity, posts, comments, and likes may be visible to other members or, where a feature is public, to visitors and search engines. Profile settings let you control member-directory inclusion and whether your email is displayed where those controls are available.

Direct messages and their attachments are intended for the participants in the conversation. They are not displayed on public profiles or community feeds. Authorized systems, providers, or personnel may still process them when needed to transmit messages, maintain the feature, investigate a report, prevent harm, or comply with law.

If another member copies or shares information you made available to them, we may not be able to remove every copy outside our systems.

We do not sell or rent personal data. We share data only as needed to run Buffstack, follow your instructions, protect rights and safety, or comply with law. Current provider categories include:

• Supabase for authentication, PostgreSQL database services, file storage, and Realtime features.
• Vercel for application hosting, delivery, and operational logs.
• Resend for transactional and community email delivery.
• Google Analytics if we enable optional website measurement after presenting any consent choice required by law. It is not currently loaded by the Service.
• Google and GitHub when you choose their authentication services.

Providers may process data only to perform services for us under their applicable agreements. We may also disclose information to professional advisers, authorities, or other parties when reasonably necessary to comply with law, respond to valid process, enforce our terms, investigate fraud or abuse, protect safety, or complete a merger, financing, acquisition, or transfer of the Service. If ownership changes, this policy will continue to apply unless you are told otherwise.

Buffstack uses essential cookies and similar browser storage to maintain authentication, protect sessions, remember necessary state, and route invitations. Blocking these technologies may prevent account features from working.

Optional analytics are not currently loaded by the Service. If we enable them, we will present any consent choice required by law before non-essential tracking begins and update this policy when the processing changes.

You can block or delete cookies through your browser settings. Browser controls operate separately on each device.

Buffstack and its service providers may process personal data in Brazil, the United States, and other countries where providers operate. Those countries may have data-protection rules different from the rules where you live.

Where required, we use contractual, organizational, or other safeguards available through our providers for international transfers. You may contact us for more information about the safeguards relevant to your data.

We retain account and community data while your account is active and for as long as needed to provide the Service. Retention varies by record and may continue where necessary for security, abuse prevention, legal obligations, dispute resolution, backup integrity, or the rights of other members.

Account deactivation restricts access but does not automatically erase every record. If you request deletion, we will delete or de-identify eligible personal data unless we need to keep it for a lawful reason. Deleted data may remain in restricted backups until those backups are overwritten in the ordinary course.

We keep email suppression records as needed to honor unsubscribe requests and may retain limited security, transaction, and legal records after other account data is removed.

We use technical and organizational measures designed to protect personal data, including managed authentication, encrypted transport, access controls, database Row Level Security, scoped storage rules, and restricted administrative access.

No online service can guarantee absolute security. Protect your sign-in method, use a secure device, and contact us promptly if you believe your account or information has been compromised.

You can edit many profile fields, visibility choices, notification preferences, and authentication settings inside Buffstack. Email messages that are not strictly required for the Service include an unsubscribe or preference-management path where applicable.

Depending on where you live, you may have rights to ask whether we process your personal data and to request access, correction, deletion, portability, restriction, or objection. You may also withdraw consent and complain to a data-protection authority, including Brazil's National Data Protection Authority (ANPD) where applicable.

• Send the request from the email associated with your account when possible.
• Describe the right you want to exercise and the data or processing involved.
• We may ask for reasonable verification before disclosing, changing, or deleting account data.

Submit a request at lucas@buffstack.pro. We will respond within the period required by applicable law. Some rights are subject to lawful exceptions, and we will explain any limitation that applies.

Buffstack may automatically calculate community indicators such as XP, rank, unread state, or activity counts from actions on the Service. These features organize the community experience; they are not used to make decisions that produce legal or similarly significant effects about you.

Buffstack is intended for people who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

We may update this policy as Buffstack, our providers, or legal requirements change. We will post the current version here and change the date above. If an update materially changes how we use personal data, we will provide additional notice through the Service or by email when reasonable.

Privacy questions or requests can be sent to lucas@buffstack.pro. Buffstack is operated by Lucas de Vito.

Please contact us first if you have a concern so we can try to resolve it. You may also lodge a complaint with the privacy or data-protection authority that has jurisdiction where you live.

The rules for using the Service are available in our Terms of Service.