Privacy Policy

Last updated 15 October 2026.

Data controller

The data controller is Andrea Zinni, reachable at [email protected].

Age

In Italy the age for consenting to an information-society service is 14 (article 2-quinquies of the Privacy Code). Creating an account asks whether you are under 14. If you are under 14, the account is not created. We do not store a date of birth. We store only that an account holder confirmed they are 14 or older.

How data is stored

Account and stage data are stored on the YourStager server, not only in the browser.

• A SQLite database file holds the account (email, name, bcrypt password hash, email confirmation, marketing and privacy choices, the 14-or-older confirmation), the subscription status, stage projects as JSON, public templates, share tokens, withdrawal requests and photo reports.
• Profile photos are files on the same server, in a folder that is not published as a website directory. The database stores the file name. Stage icons are part of the app and are not replaced by uploads.
• The sign-in token is kept in the browser localStorage under the key token. It is not a cookie.
• Card numbers are not stored by YourStager. Payments are handled by Stripe.
• Confirmation and password emails are sent through the mail provider configured for the site.

What we use it for

We use the account to let you sign in, to apply demo limits or Pro access, to save up to five stages for an active subscription, to publish a template if you choose to, and to answer support mail. The legal basis is the contract for the account and the subscription. Marketing email is sent only if you opt in. Support mail is used to reply to you.

Fonts

The site uses the Inter typeface. The font file is included when the site is built and is then served from YourStager’s own address. The browser does not call Google Fonts, so your IP address is not sent to Google for the typeface. That is the point of the judgment of the Regional Court of Munich of 20 January 2022 (3 O 17493/20): loading Google Fonts from Google’s servers disclosed the visitor’s IP address without a valid legal basis.

Profile photos

A profile photo is visible next to a stage you publish. Another signed-in user who believes that photo was stolen can send a report from that template. The report stores who sent it, whose photo it is, the note, and the time. We use it to review the photo and, where the report is founded, to remove it. Write to [email protected] if a photo of you was uploaded without your permission.

Cookies

Optional analytics cookies are not used. The detail is on the cookie policy.

Your rights

Under the GDPR you can ask to access, correct, delete or limit the personal data we hold, and you can complain to the Garante per la protezione dei dati personali. Write to [email protected].