Privacy Policy

Last updated: August 4, 2026

What this covers

This policy describes how Imerwise ("we", "us", "our") collects, uses, and handles your information when you use Stacked.Tools and any associated tools (KeyForge, PassForge, QRForge, ScreenLens, ShipCheck, and others).

Information we collect

• Account information: If you sign in, we receive your email address and display name from your chosen identity provider (Google, GitHub, etc.) via Firebase Authentication. We never see your password.
• Billing information: If you purchase a subscription or pay-per-use feature, payment processing is handled entirely by Stripe. We never see or store your credit card details. Stripe shares your customer ID and plan status with us so we can manage entitlements.
• Usage analytics: We collect anonymized, aggregate usage data (page views, feature usage) through Firebase Analytics to improve our tools. This data cannot identify you personally.
• Contact submissions: If you use the contact form, we receive your message and email address solely to respond to your inquiry.

Information we do NOT collect

• Generated content: Keys, passwords, QR codes, and any other content you generate with our tools are created entirely in your browser using the Web Crypto API. Nothing you generate is ever sent to our servers.
• Uploaded files: ScreenLens and other tools that process images or files do so client-side unless you explicitly submit data to a paid processing endpoint.

How we use your information

• To provide and maintain your account across all Stacked.Tools services
• To process billing and manage entitlements (via Stripe)
• To improve our tools based on aggregate usage patterns
• To respond to your questions or support requests
• To send essential service notifications (e.g., billing receipts)

Data sharing

We do not sell your personal information. We share data only with:

• Firebase (Google): Authentication, Firestore database, and analytics (subject to Google's privacy policy)
• Stripe: Payment processing and customer management (subject to Stripe's privacy policy)
• Google AdSense: Ad personalization on free tools (subject to Google's privacy policy)

Cookies and tracking

We use minimal cookies required for authentication (Firebase) and analytics. Google AdSense may use cookies for ad personalization. You can opt out of personalized advertising via Google Ad Settings.

Data retention

Account data is retained until you delete your account. Analytics data is retained in aggregate form indefinitely. Contact form submissions are retained for up to 90 days after resolution.

Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. Use the contact form below to exercise these rights — we will respond within 2 business days.

Security

All data in transit is encrypted via TLS. Authentication is handled by Firebase Auth, which follows industry-standard security practices. Payment data never touches our servers.

Changes to this policy

We may update this policy from time to time. Material changes will be notified via email (if you have an account) or through a notice on the site.