Contents
1. Local records2. Online information collected3. Use and visibility4. Storage and providers5. Retention and deletion6. Permissions and other practices1. Local records
StackWorks provides Goods-cho. Local collection records, photos, notes and prices stay on your device and optionally your private iCloud. No account is needed for local records, comparison or sharing. There are no advertising, analytics or tracking tools. Only the online trading feature sends the following information to our server.
2. Online information collected
We receive your app-specific Sign in with Apple identifier (not your name or email), nickname, selected country/region and optional local area, trade methods, contact details you enter, notification preferences, and the have/want lists you choose to publish (text catalog designs and quantities). Nothing is public by default. A contact email is saved only if you enter it yourself. We also receive text-only catalog contributions; trade items, quantities, method, status, preset replies, timestamps and ratings; reports including their reason and optional explanation; blocked users; and push device tokens and language. There is no free-text chat. We store hashed session tokens and Apple tokens for revocation on account deletion. Short-term rate limits use an irreversible IP-derived value with operation counts, deleted after two days. We do not receive your photos, item notes, purchase locations or prices, contacts list or advertising identifier, and do not obtain GPS location.
3. Use and visibility
We use this information only for matching, notifications, trade progress, ratings, catalog maintenance, fraud/abuse prevention, moderation and support. Matches see your nickname, selected location, methods, rating totals, trade count and published lists. Contact details are visible only to an accepted trade partner until that trade ends. Catalog names are visible to online users without identifying the contributor. Reports and blocks are not disclosed to the other person.
4. Storage and providers
Online data is stored using our contracted Cloudflare, Inc. Workers and D1 services, created in the Asia Pacific region. Sign in with Apple and Apple Push Notification service handle authentication and delivery. These providers process information for the above purposes. We do not sell or disclose user information to third parties except when required by law. With your consent, private CloudKit sync stores collection data in your own Apple-managed iCloud, which StackWorks cannot view.
5. Retention and deletion
Withdraw all publication to immediately remove published lists, or unpublish individual sets. Delete account in the trading profile to remove profile, contact, lists, blocks, push addresses, received ratings and login information, and cancel active trades. The partner’s history retains only items and timestamps under a deleted-user label, not your nickname/contact. Shared catalog text remains for other users; contributor attribution is removed. Reports may be retained for safety after handling, with the reporting user’s attribution removed on account deletion. Notification logs are deleted after 30 days. Local records are not erased by deleting the online account.
6. Permissions and other practices
Camera access is for item photos and QR codes. Only selected library photos are read; cropping happens on-device. Photos are not sent to online trading. Saving a share image requests add-to-library permission. Share text/images/codes are sent only to the recipients or services you choose. Exchange codes contain your entered nickname, item names and quantities; checklist codes contain design and member names, without photos. Apple processes Plus purchases/restoration; we receive no payment information. Online trading is for ages 16+, with guardian consent under 18; local features have no age restriction. Policy changes appear here and major changes in-app. For access, correction, deletion or questions, contact StackWorks: contact@stack-works.dev. Updated 2026-10-05.