Privacy Policy
Effective date: February 19, 2026
1. Introduction
Stacked Cards ("we," "our," or "us") provides a credit card benefit tracking service. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services at stacked.cards.
2. Information We Collect
We collect the following types of information:
- Account information: Your email address and authentication credentials when you create an account.
- Financial data via Plaid: When you connect a bank account through Plaid, we receive account and transaction data to match transactions against your credit card benefits. We never receive your bank login credentials—Plaid acts as a secure intermediary.
- Uploaded statements: If you upload CSV statements, we process the transaction data contained in those files.
- Credit card selections: Which cards you add to your account for benefit tracking.
3. How We Use Plaid
We use Plaid to securely connect to your financial accounts. When you link an account, Plaid handles the authentication directly with your bank. We never see, store, or have access to your bank login credentials. Plaid provides us with account and transaction data, which we use solely to match transactions to your credit card benefits. For more information about Plaid's practices, please review Plaid's Privacy Policy.
4. Data Storage and Security
Your data is stored in Supabase, which provides encryption at rest and in transit. We use industry-standard security measures to protect your information. Access to your data is restricted to authenticated sessions tied to your account.
5. Data Retention and Deletion
You can disconnect linked accounts and delete your data at any time from your account settings. When you delete your account, we remove all associated data, including transaction history and linked account information. Plaid access tokens are revoked upon disconnection.
6. Third-Party Data Sharing
We do not sell, rent, or share your personal or financial data with third parties for marketing purposes. We only share data with service providers necessary to operate the service (e.g., Plaid for financial data access, Supabase for data storage).
7. Cookies
We use minimal cookies strictly for authentication session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised effective date.
9. Contact Us
If you have questions about this Privacy Policy or your data, contact us at privacy@stacked.cards.