Privacy Policy
Effective date: September 23, 2026 · Updated October 13, 2026
This Privacy Policy explains how StashGrid (“we”, “us”) handles information in connection with the StashGrid website (stashgrid.ai) and the StashGrid Website Analytics reporting tool.
The short version
StashGrid does not ask you for anything. There are no accounts, no logins, no newsletter and no comments. The only thing on the site that collects what you type is the contact form, and only if you choose to use it. Google Analytics measures how the site is used, as described below.
What the site stores in your browser
The labs have step checkboxes and a progress bar. Ticking a step saves that progress in your own browser’s local storage so the lab remembers where you got to. That data never leaves your device, is not readable by us, and is not shared with anyone. Clearing your browser data erases it.
Server logs
The site is hosted by Ionos. Like every web host, their servers keep access logs — typically IP address, timestamp, the page requested, and your browser’s user agent. These are standard hosting records used for security and diagnostics, and they are governed by Ionos’s own policies.
Analytics
StashGrid uses Google Analytics 4 to understand which pages are useful. Google sets cookies and receives usage data including pages visited, approximate location derived from your IP address, referring source, and device and browser details. We use this only in aggregate to improve the site. You can block these cookies in your browser, or use Google’s Analytics opt-out add-on.
Advertising
StashGrid shows ads from Google AdSense (publisher ID pub-3168650983890206). Google and its partners, as third-party vendors, use cookies and similar technologies to serve ads on this site based on your prior visits to this site and to other websites, and to measure how those ads perform. Google’s use of advertising cookies lets it and its partners show you ads based on your visits to StashGrid and other sites on the internet.
You can opt out of personalised advertising from Google in Google Ads Settings, and from many other ad companies at aboutads.info (in Europe, youronlinechoices.eu). Where the law requires it, for example in the EEA, the UK and Switzerland, you are asked for consent before personalised ads are shown. Google explains how it uses this information in How Google uses information from sites that use its services.
Affiliate links
Some links earn a commission if you buy something through them. The current partner is Hack The Box (through the Impact affiliate network), which sets a cookie to track the referral. Every such link is disclosed next to the link itself, and a commission never buys a place in the collection. Details: affiliate disclosure.
Links out
Almost every entry points to somebody else’s site. Once you click through, their privacy policy applies. StashGrid has no control over and takes no responsibility for what other sites collect.
Embedded media
Some pages embed short videos from StashGrid’s YouTube channel using YouTube’s privacy-enhanced mode (youtube-nocookie.com). In that mode YouTube does not set tracking cookies just because the page loaded; if you press play, YouTube (Google) receives information about your visit, may set cookies, and its own privacy policy applies. The animated clip on the homepage is served from this site’s own server and contacts no one else. Web fonts are loaded from Google Fonts, which receives a request from your browser including your IP address.
The contact form
The contact page form is handled by Formspree, a third-party service: when you submit it, what you typed and the email address you gave pass through Formspree’s servers and are emailed to the site owner. Formspree keeps a copy for 30 days, and receives the network information that comes with your request, including your IP address, which it uses to filter spam. Nothing you send is added to a mailing list, used for marketing, or sold or shared. It is used to reply to you and nothing else. Please do not put anything sensitive in it.
Your rights
Unless you have used the contact form, there is usually nothing to request or delete. If you have contacted us and want that correspondence deleted, ask and it will be — both the email and the copy Formspree holds. For data held by Google, Ionos, YouTube or Formspree, their own policies and tools govern access and deletion.
Children
StashGrid is aimed at adults learning security and is not directed at children under 13. No information is knowingly collected from them.
Google API Data
StashGrid Website Analytics uses Google APIs to access reporting data from Google Search Console, Google Analytics, and Google AdSense.
Access is limited to read-only reporting data used to analyze website traffic, search performance, engagement, and advertising performance for websites operated by StashGrid.
Google account credentials and passwords are not collected or stored by StashGrid Website Analytics. OAuth authorization is handled by Google.
Reporting data may be stored in a private Google Sheet controlled by the site owner for historical analysis and weekly performance reporting.
Google user data obtained through these APIs is not sold, provided to advertisers, or used for advertising targeting.
Access may be revoked at any time through the user’s Google Account security settings.
Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To analyze and improve website performance and content.
- To produce weekly SEO, website-performance, and monetization reports for websites we operate.
- We do not sell your personal information.
Data sharing
We do not sell Google user data or share it with advertisers for targeting. Third-party services we rely on — Google Analytics, Google Search Console, Google Fonts, YouTube, Formspree and Ionos, plus Google AdSense reporting if ads are ever enabled — process data under their own privacy policies.
Data retention
Reporting data may be retained in a private Google Sheet controlled by the site owner for historical analysis. You may request its removal using the contact details below.
Your choices
You can revoke the application’s access at any time from your Google Account security settings. You can manage cookies through your browser and adjust personalized advertising in your Google Ad Settings.
Changes to this policy
We may update this policy from time to time. Changes are posted on this page with a new effective date. The things most likely to change it are advertising or affiliate links going live, and both will be described here before they do. (23 September 2026: merged the site-visitor policy into this page; Google Analytics and YouTube embeds are now live.)
Contact
Questions about this policy, or requests regarding your data, can be sent to nova@stashgrid.site or through the StashGrid contact page.