Privacy Policy

Last updated: 9 June 2026

Summary

StackLatte is a local-first application. Your project data is stored exclusively in your browser's local storage and never transmitted to any server. We collect anonymous usage analytics to understand how the product is used. No cookies are set, no personal data is collected, and no data is sold or shared with advertisers.

Your project data

All projects, tracks, phases, and steps you create are stored in your browser's local storage. This data never leaves your device. We have no access to it.

Storage key	Purpose	Type
eos_projects	Your project, track, and step data	Strictly necessary
eos_privacy_acknowledged	Records that you have seen this notice	Strictly necessary

Both entries are browser local storage (not HTTP cookies). They never leave your device.

Analytics

We use PostHog to collect anonymous usage analytics. This helps us understand which features are used and where people run into friction. Data is processed on PostHog's EU servers (Frankfurt).

What is collected:

Pages visited and time spent on each page
Feature interactions (e.g. AI session opened, step status changed)
Browser type and approximate location (country level)

What is not collected:

No names, email addresses, or account data (there are no accounts)
No project content titles, steps, or notes you write stay on your device
No cookies PostHog is configured to use in-memory storage only
No cross-site tracking

Because no cookies are set and no persistent identifier is stored, each page load is effectively anonymous. PostHog's privacy policy is available at posthog.com/privacy.

Fonts

StackLatte uses the Geist typeface via Next.js' built-in font optimization. Fonts are downloaded and self-hosted at build time no requests are made to Google Fonts or any other external font service when you visit the site.

Your rights (EU/EEA)

Under GDPR you have the right to access, rectify, and erase any personal data we hold.

Project data: stored only on your device. Use the Export button to download it as JSON, or clear browser local storage to erase it.
Analytics data:because no persistent identifier is stored, we cannot reliably locate a specific person's events. Contact us and we will make a best-effort deletion request to PostHog on your behalf.

Legal basis

Local storage entries are strictly necessary for the application to function (ePrivacy Directive, Article 5(3)). Anonymous analytics are collected on the basis of legitimate interest (GDPR Article 6(1)(f)) understanding product usage to improve the service — balanced against the minimal privacy impact of cookie-free, anonymous data collection.

Changes to this policy

If we make changes that materially affect how data is collected or used, this policy will be updated and the date at the top of the page will change.

Contact

Questions about this policy can be sent to privacy@stacklatte.com.