Privacy policy

Privacy policy

What we collect, why, and how to get rid of it.

Who we are

PointStack (pointstack.dev) is a real-time planning poker app. Questions about this policy or your data go to devdavedotdev@gmail.com.

What we collect

  • Account details. When you sign in with Google or GitHub: your name, email address and profile picture from that provider.
  • Guest details. As a guest: the display name you pick and an anonymous session. No email.
  • What you put in. Rooms, teams, stories, votes, estimates, chat and discussion messages, team invites, and anything you send through the API.
  • Connected tools. If you connect an integration, the access tokens and account label it returns, so we can act on your behalf.
  • Feedback. Your message, plus the page, room code, screen size and browser it was sent from.
  • Usage. Product analytics (pages viewed, features used) and the technical logs any web service keeps, such as IP address and browser.

Why we use it

To run the service: sign you in, keep your rooms and teams, sync votes in real time, and send emails you asked for, such as team invites. Analytics and feedback help us find bugs and decide what to build. We do not sell your data or use it for advertising.

Cookies and local storage

A session cookie keeps you signed in; it lasts up to 90 days and renews while you use the app. Your browser’s local storage holds preferences such as theme, sound and your guest name. The analytics tool sets its own identifier. There are no advertising cookies.

Who processes it

  • Cloudflare: hosting, database and real-time rooms.
  • Google and GitHub: sign-in, if you choose them.
  • PostHog: product analytics.
  • Resend: transactional email.

These providers may process data outside your country. Each handles it under its own privacy terms.

How long we keep it

Account data stays until you delete your account. Rooms an agent created and nobody claimed are removed automatically. Feedback is kept until it has been dealt with. Logs and analytics follow the retention of the provider that holds them.

Your choices

You can delete your account from the account page. That removes your profile, the rooms you own and their contents, your tokens and integrations. To ask for a copy of your data, a correction, or anything else, email devdavedotdev@gmail.com.

Children

PointStack is not meant for children under 13, and we do not knowingly collect their data.

Changes

We may update this policy. The date below changes when we do, and significant changes will be flagged in the app. See also the terms of service.

Last updated 2 October 2026.