Privacy Policy — Backlink Stack

This Privacy Policy explains how Backlink Stack ("we", "us", "our") collects, uses, and protects information when you visit our website, view a curated shortlist report, place an order, or contact us via Telegram, email, or our forms.

We aim to collect as little as possible, use it only for what we told you, and never sell it.

1. What we collect

1.1 Information you give us directly

When you place a lead, request a shortlist, or place an order, we collect:

Name
Email address
Telegram handle / WhatsApp number (optional)
Phone number (optional)
Free-text brief: niche, target country, budget, anchor text, target URL, article topic, notes

1.2 Information collected automatically

When you view a public report page (/r/<uuid>), we collect:

A browser fingerprint hash (a 32-character identifier derived from your browser configuration — we don't see your face, location, or account info)
Your country (derived from your IP address via Cloudflare or ipapi.co; we do not store the raw IP long-term)
User-agent string and HTTP referer
The report UUID you viewed, and the page-view timestamp

We use this to deduplicate views (you don't get counted twice if you refresh) and to roll up coarse "where do our visitors come from" analytics in the admin dashboard.

1.3 Cookies and similar technologies

We use a small number of essential cookies and local-storage keys:

NextAuth session cookie — only for our admin staff. Public visitors don't have this cookie.
blstack_fp (localStorage) — your fingerprint hash, so the view counter stays consistent across page reloads.
blstack_cart_<uuid> (localStorage) — the items you've added to your cart on a specific report page. Stays on your device only.
Google Analytics — if enabled by the report owner, gtag tracks anonymized page-views, clicks on the order CTA, and outbound clicks. See Google's privacy policy for what they collect.

2. How we use it

To send you the shortlist or quote you requested
To fulfil and deliver orders you place
To deduplicate report views in our analytics
To reply to your questions via Telegram, email, or WhatsApp
To improve which sites we recommend (aggregate, non-personal analytics only)
To prevent fraud, abuse, and bot scraping

We do NOT use your data to:

Sell, rent, or share it with third-party advertisers
Profile you for targeted advertising
Send unsolicited marketing emails (you'll only hear from us in reply to a brief you submitted)

3. Where we send your data

Your order details may be synced to a private Google Sheet for internal operations and to our payment processors (Stripe, PayPal, and equivalent crypto / bank gateways) when you check out. Each processor handles your payment information under their own privacy policy:

We do not store your full payment card or wallet details — those live with the processor.

4. How long we keep it

Leads and orders — kept for as long as the order is in fulfilment, plus 7 years for accounting + tax compliance.
Report view records — kept for 24 months for trend analysis, then aggregated and the per-visitor rows are purged.
Email / Telegram conversations — kept for as long as your account / contact is active, or until you ask us to delete them.

5. Your rights

Depending on where you live (GDPR for EU/UK, CCPA for California, and equivalent regimes worldwide), you have the right to:

Ask what we hold about you (subject access request)
Ask us to correct or update it
Ask us to delete it (subject to legal retention requirements)
Ask us to export it in a portable format
Opt out of analytics tracking

To exercise any of these, email us at team@backlinkstack.com or message us on Telegram @devmiana1. We aim to reply within 30 days.

6. Children

Backlink Stack is a B2B SEO service. We do not knowingly collect data from anyone under 16. If you believe a minor has submitted information to us, contact us immediately and we'll remove it.

7. Changes to this policy

When we make material changes, we'll update the "Last updated" date at the top of this page. For significant changes (e.g. a new processor or a new data category), we'll post a notice on the homepage for at least 30 days.

8. Contact

Questions about this policy or your data? We're real people:

Email: team@backlinkstack.com
Telegram: @devmiana1