Privacy

Stoa keeps as little data as it needs to run your page.

What we store about account holders

Your email address and password hash (handled by our auth provider, Supabase), your username, and everything you add to your page. Images you upload are stored publicly so visitors can see them.

What we store about visitors

For page owners' statistics we count daily views and clicks, and the referring website's domain. To avoid counting the same person twice we compute a one-way hash of the IP address and browser that rotates daily and is deleted after about two days. We never store IP addresses, set tracking cookies, or build visitor profiles. Daily totals are kept for about 13 months.

Embedded content

Pages can embed YouTube (privacy-enhanced mode), Vimeo, Spotify and SoundCloud. Those players load from their providers, which apply their own privacy policies.

Deleting your data

You can delete your account at any time in Settings. This removes your page, uploads, statistics and login immediately.

Service providers

Stoa is hosted on Vercel and stores data with Supabase.