STIR does not run advertising trackers, analytics cookies, or third-party marketing pixels on stir-agency.netlify.app. What we do collect is limited to:
| Data | When | Why |
|---|---|---|
| Email address | When you subscribe to STIR Premium via Ko-fi | Send your access link, renewal reminders, and support replies |
| Name (optional) | Provided at checkout via Ko-fi | Personalize emails and support |
| Vault ID | When a STIR Vault is created | A one-way hash derived from your key — links your subscription status to your vault without ever storing the key itself |
| Token submission details | If you submit a token via Ko-fi Shop | Process and publish the requested rating review |
We do not collect passwords, private keys, or seed phrases. It is technically impossible for us to, since STIR Vault never transmits them (see Section 2).
Your STIR Vault key and the private keys derived from it are generated and used entirely inside your browser. They are never transmitted to our servers, never logged, and never recoverable by us. If you lose your key, we cannot restore access — there is no "forgot password" option, by design.
What our server does store, if you register your vault (e.g. to link Premium status or keep an encrypted backup): your email, your vault's public identifier (a hash, not your key), and an encrypted backup blob. This backup is encrypted with AES-256-GCM before it ever leaves your device — our server stores ciphertext it cannot read.
| Service | Purpose | What they see |
|---|---|---|
| Ko-fi | Payment processing (subscriptions, ads, shop) | Your payment details — handled entirely by Ko-fi/PayPal/Stripe, never by STIR directly |
| EmailJS | Sending access-link and notification emails | Your email address and message content |
| Netlify | Hosting, serverless functions, encrypted storage | Standard server logs (IP, request metadata) per Netlify's own policy |
| CoinGecko / CoinCap | Live token price data | Nothing about you — these are public, unauthenticated price feeds |
We do not sell, rent, or share your email or personal data with advertisers or data brokers, ever. Advertisers purchasing a slot on STIR receive placement on the site — never access to our subscriber list.
Because vault backups are encrypted client-side, deleting your account record removes our copy of your encrypted backup, but has no effect on funds themselves — those exist on their respective blockchains, entirely independent of STIR.
This policy may be updated as STIR evolves. Material changes will be reflected here with a new effective date. For any privacy question, deletion request, or concern, reach out via the contact details listed on our advertising page or through Ko-fi support messages.