Legal
Privacy notice
1. Who we are
Stet is an independent project. "We" means the operator of Stet, reachable at the support address at the foot of this page.
2. What we store
Without an account, nothing you enter is sent to us: the workspace is kept only in your browser. With an account we store three things. Your account: email address, display name, sign-in method, and the times you signed up and last signed in. Your workspace: everything you enter in Stet, from openings, applications, events, resume sentences and versions to research, freelance and network records and your preferences. And a short directory entry about the account, with any support requests you send, as "What the operator sees" describes.
3. What we do not collect
No advertising identifiers, no third-party trackers, no analytics cookies, no location, no contacts, no files.
4. Why
To run the service you asked for: show your workspace on your devices, compute your patterns, and answer your messages. We do not sell, rent or share your data, and we do not use it to train models.
5. Where it is processed
Workspace data: Google Cloud Firestore, Europe multi-region (eur3). Account data: Firebase Authentication, a global Google service. Web hosting and two small server functions: Vercel. These providers process data on our behalf under their own terms.
6. Who can see it
Only your account can read or write your workspace; security rules enforce this. We can technically access stored data through the provider consoles; we do so only to answer your request or to keep the service running.
7. What the operator sees
Stet's operator runs the service from a console inside Stet. For each account it shows a directory entry that the account's own app writes: a fingerprint of the email address (its SHA-256 hash, so the operator can find the account when you write in from that address) and a hint such as a***@e***.com; whether the address is confirmed; the sign-in methods; the day you joined and the last day you used Stet; whether setup is finished; which modules are switched on; how many records of each kind the workspace holds, as counts only; and the app version. It also shows the support requests you send, with your email address, and the operator's own actions on your account (a suspension, feature settings, a password-reset link) with the reason given. You can read those actions under Settings, Profile, Account activity. While sign-ups are by invitation, the operator also keeps each address it invites, and its record of the invitation names that address. The console never shows what your workspace contains, and the security rules refuse it every part of it. As the section above says, the provider consoles can still reach stored data.
8. How long
Your workspace stays until you remove it or delete your account. Deleting the account also deletes its directory entry and its support requests. The operator's record of its actions on the account, and any setting it made for it, are kept under the account ID, so that every change stays on the record. Emails you send to the support address are kept for up to 12 months. Server logs at Vercel are kept for the provider's retention period and contain no workspace content.
9. Your rights
Export everything any time (Settings → Data → Export my data). Correct anything by editing it. Delete every record any time in Settings → Data, and your account there too once you have one. For anything else, write to the support address.
10. Security
Traffic is encrypted with HTTPS; stored data is encrypted at rest by the providers. No system is perfectly secure; tell us at once if you find a problem.
11. Children
Stet is not intended for people under 16.
12. Changes
We will update this page and its date, and announce material changes in the app.