STKLY.io

Privacy Policy

Effective Date: 30 Dec 2024

Google Sign-In disclosure added: 20 Jul 2026

STKLY (“we,” “our,” “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our services. Please read this policy carefully to understand our practices.

1. Information We Collect

  • Personal Information: Name, Email address, Account credentials.
  • Usage Data: IP address, Browser type, Pages visited, Date and time of access.
  • Financial Information: Payment details are processed and stored by a third-party payment processor. We do not store or have access to your financial information directly.
  • Cookies and Tracking Technologies: To enhance user experience and gather analytics data.

Google Sign-In

If you choose to register, sign in, or connect your STKLY account using Google, Google provides STKLY with information from your Google Account. This may include your Google Account's stable identifier, primary email address, whether Google has verified that email address, your name, profile picture, and, for some Google Workspace accounts, the hosted-domain indicator. STKLY does not receive or store your Google password.

STKLY stores the stable Google Account identifier, the email address supplied by Google, its verified status, the linked STKLY user identifier, and timestamps and context describing when and how the identity was linked or last used. STKLY does not currently store the name or profile picture supplied in the Google sign-in token. Where an additional email challenge is required, STKLY temporarily stores challenge metadata, a one-way hash of the verification code, the number of attempts, and an expiry time.

For consumer Gmail addresses, STKLY may also derive a mailbox-matching value that ignores dots and text following a plus sign. We use that value only to find existing STKLY accounts that may belong to the same Gmail mailbox and to avoid creating or linking the wrong account. Your STKLY account email remains the literal email address you registered or later verified.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain our services.
  • To send transactional emails and alerts.
  • To improve our platform and services.
  • To ensure legal compliance.

We use Google identity information to authenticate you, create or locate your STKLY account, securely connect Google Sign-In to an existing account, prevent duplicate or conflicting identity links, protect accounts from unauthorised access, and investigate authentication or support issues. A temporary email verification code may be required before Google Sign-In is connected when Google is not authoritative for the email domain or when more than one STKLY account could match the same Gmail mailbox.

3. Sharing Your Information

We do not sell your information. However, we may share your data with:

  • Service Providers: For payment processing, email communication, and analytics.
  • Legal Authorities: When required by law or to protect our rights.

When you choose Google Sign-In, Google acts as the identity provider and processes information under the Google Privacy Policy. STKLY uses the identity response returned by Google only for the purposes described above.

4. Data Security

We take reasonable measures to protect your data, including encryption for sensitive information, secure payment gateways, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure.

Google identity links are stored separately from passwords and are keyed by Google's stable account identifier rather than by email address alone. Temporary verification challenges expire automatically. We retain a Google identity link while it remains connected to your STKLY account. The link is removed when account deletion removes your login identities or when a verified change to a different mailbox requires Google Sign-In to be disconnected. Changing between equivalent Gmail aliases, such as dot or plus-tag variations of the same Gmail mailbox, does not by itself disconnect the link.

5. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Correct inaccuracies in your data.
  • Deletion: Request deletion of your data.
  • Opt-Out: Unsubscribe from marketing communications.

To exercise these rights, please contact us at support@stkly.io.

You can choose not to use Google Sign-In and may use another available STKLY sign-in method. You may also contact us to ask what Google identity information is associated with your account or to request correction or deletion, subject to any legal retention requirements. For your security, STKLY will not connect or move a Google identity based only on an email address supplied in a support request.

6. Third-Party Links

Our platform may include links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Effective Date."

8. Contact Us

If you have any questions about this Privacy Policy or our practices, please contact us at: