Stacks - Privacy Policy

Last Updated: September 16, 2026

Stacks App LLC (“Stacks,” “we,” “us,” or “our”) provides performance marketing services that connect advertisers with publishers and other distribution partners. This Privacy Policy explains how Stacks collects, uses, discloses, and otherwise processes Personal Data through our websites, platforms, applications, APIs, dashboards, performance marketing network, and related services (collectively, the “Services”).

This Privacy Policy also describes certain privacy rights that may be available to individuals under applicable law.

“Personal Data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an individual or household, as well as other information treated as personal data, personal information, or an equivalent protected category under applicable privacy law.

1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to Personal Data Stacks processes in connection with:

our websites and other online properties;
our relationships with advertisers, publishers, vendors, service providers, and other business partners;
advertiser and publisher accounts;
advertising campaigns distributed through the Stacks network;
tracking, attribution, measurement, and reporting associated with those campaigns;
fraud detection and prevention, security, and compliance;
billing, payment, reconciliation, and business administration;
customer, advertiser, publisher, and business-partner communications; and
other interactions with the Services.

In some circumstances, Stacks determines the purposes and means for which Personal Data is processed and acts as a controller or business under applicable privacy law. In other circumstances, Stacks may process Personal Data on behalf of an advertiser, publisher, or other business pursuant to its instructions. Where Stacks processes Personal Data on behalf of another business, that business’s privacy notice may also apply to the processing.

2. PERSONAL DATA WE COLLECT

A. Campaign and Advertising Data

When an individual views, clicks, interacts with, or completes an action associated with an advertising campaign distributed through the Stacks network, we may receive or process information such as:

IP address;
device identifiers and advertising identifiers;
click, attribution, referral, and campaign identifiers;
transaction, order, event, and conversion identifiers;
hashed or pseudonymous identifiers;
timestamps;
browser type and version;
device type and operating system;
technical information about the device or connection;
campaign impressions, clicks, interactions, and attribution information;
conversion and transaction information associated with a campaign;
information regarding whether a particular campaign action was completed;
approximate location derived from an IP address or campaign information; and
fraud, validation, security, and traffic-quality information.

The specific information available to Stacks varies by campaign, advertiser, publisher, technology integration, and the choices or settings applicable to an individual’s device or browser.

Stacks does not intend for its performance marketing Services to collect sensitive Personal Data or special-category Personal Data unless specifically required for an authorized purpose and appropriate safeguards are established.

B. Advertiser, Publisher, and Business-Partner Information

We may collect information about advertisers, publishers, vendors, service providers, prospective partners, and other business contacts, including:

name;
company and job title;
business email address;
telephone number;
mailing or business address;
account credentials;
account and profile information;
payment and billing information;
tax information;
campaign and account preferences;
communications with Stacks;
support requests; and
information provided during contracting, onboarding, account administration, or other business interactions.

C. Website and Technical Information

When individuals visit a Stacks website or use our Services, we may automatically receive technical information such as:

IP address;
browser type;
operating system;
device information;
pages or features accessed;
referring and destination pages;
date and time of access;
interaction and usage information; and
cookies, pixels, or similar technology information where applicable.

D. Information Provided Directly to Us

We collect information individuals choose to provide when they contact us, request information, submit a privacy request, communicate with support, create or manage an account, or otherwise interact directly with Stacks.

3. SOURCES OF PERSONAL DATA

Depending on the circumstances, Stacks may collect Personal Data:

directly from individuals;
from advertisers;
from publishers and other distribution partners;
from websites, applications, and digital properties participating in campaigns;
from attribution, measurement, analytics, or technology providers;
from service providers;
through tracking links, APIs, postbacks, pixels, cookies, or similar technologies;
automatically through use of the Services; and
from other business partners or sources as permitted by law.

4. HOW WE USE PERSONAL DATA

Stacks may use Personal Data to:

operate, provide, maintain, and improve the Services;
administer advertising campaigns;
deliver and route advertising and campaign interactions;
track and attribute campaign activity;
measure campaign performance;
validate clicks, conversions, transactions, and other campaign actions;
prepare reports and provide campaign analytics;
calculate amounts payable or billable between Stacks, advertisers, and publishers;
perform billing, payment, and reconciliation;
detect, investigate, prevent, and address fraud, invalid activity, abuse, and security threats;
monitor traffic quality and campaign compliance;
troubleshoot technical issues;
secure our systems, accounts, and Services;
communicate with advertisers, publishers, vendors, and other business partners;
provide customer and account support;
manage contracts and business relationships;
perform analytics and optimize campaigns, technology, and network operations;
develop, maintain, and improve our products and Services;
comply with legal, regulatory, tax, accounting, and contractual obligations;
establish, exercise, or defend legal claims;
enforce our agreements and policies; and
protect the rights, property, security, and integrity of Stacks, our business partners, our users, and others.

We may also aggregate or de-identify information and use the resulting information for analytics, benchmarking, product development, network optimization, fraud prevention, business planning, and other lawful purposes. Where information has been lawfully de-identified so that it is no longer Personal Data, we may use it for any lawful purpose.

5. LEGAL BASES FOR PROCESSING

Where applicable law requires a legal basis for processing, Stacks processes Personal Data based on one or more of the following:

Performance of a contract, where processing is necessary to provide the Services or perform an agreement;
Legitimate interests, including operating and improving our Services, tracking and measuring campaign performance, preventing fraud, maintaining security, administering business relationships, performing analytics, and protecting our legal and commercial interests;
Consent, where consent is required by applicable law;
Compliance with legal obligations, including tax, accounting, regulatory, and lawful governmental requirements; and
Establishment, exercise, or defense of legal claims.

Where Stacks relies on legitimate interests, we consider those interests in light of the rights and interests of affected individuals.

Where another business determines the purposes and means of processing and Stacks processes Personal Data on that business’s behalf, the applicable business is responsible for identifying the appropriate legal basis for that processing.

6. HOW WE DISCLOSE PERSONAL DATA

Advertisers

We may provide advertisers with campaign, attribution, conversion, validation, reporting, fraud-prevention, and related information necessary to operate and evaluate campaigns.

Publishers and Distribution Partners

We may provide publishers and other distribution partners with information necessary to operate campaigns, measure performance, validate activity, reconcile payments, investigate discrepancies, and prevent fraud.

Service Providers

We may use third-party service providers that support our infrastructure, hosting, communications, analytics, attribution, security, payment, accounting, professional services, and other business operations.

Attribution and Technology Partners

We may exchange campaign-related information with attribution, measurement, analytics, fraud-prevention, and other technology providers used to operate or evaluate campaigns.

Professional Advisers

We may disclose information to attorneys, accountants, auditors, insurers, financial institutions, consultants, and other professional advisers where reasonably necessary.

Corporate Transactions

Personal Data may be disclosed or transferred in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, change of control, or similar corporate transaction.

Legal and Safety Purposes

We may disclose Personal Data where we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; enforce our agreements; investigate fraud or unlawful activity; protect security; or protect the rights, property, or safety of Stacks or others.

7. COOKIES AND SIMILAR TECHNOLOGIES

Stacks and parties involved in providing the Services may use cookies, pixels, tracking links, APIs, postbacks, and similar technologies for purposes such as operating websites and Services, remembering preferences, maintaining security, measuring interactions, attributing campaign activity, analyzing performance, and detecting fraud.

The particular technologies used may differ depending on the website, campaign, publisher, advertiser, device, and integration involved.

Where applicable law requires notice, consent, or another choice before certain technologies are used, the party controlling the relevant website, application, device interaction, or technology deployment is responsible for providing the legally required mechanism applicable to its activities. Stacks provides information reasonably available to it to support applicable disclosures concerning Stacks-provided technologies.

Browser or device settings may provide additional controls over cookies, advertising identifiers, or similar technologies.

8. U.S. STATE PRIVACY DISCLOSURES AND RIGHTS

Residents of certain U.S. states may have privacy rights under applicable state law. Depending on the individual’s state of residence and the circumstances, these rights may include the right to:

confirm whether we process Personal Data;
access or obtain a copy of Personal Data;
correct inaccurate Personal Data;
delete certain Personal Data;
obtain certain Personal Data in a portable format;
obtain information regarding categories of Personal Data collected, sources, purposes, and categories of recipients;
opt out of certain processing defined by applicable law as a sale of Personal Data, sharing of Personal Data, targeted advertising, or certain profiling; and
appeal a decision we make regarding a privacy request.

The availability and scope of these rights vary by state and may be subject to exceptions.

Stacks participates in a performance marketing ecosystem in which campaign-related identifiers and activity information may be transmitted among Stacks, advertisers, publishers, attribution providers, and other technology or service providers for the purposes described in this Privacy Policy. The legal characterization of particular data transfers may vary depending on the applicable state law, the parties involved, the nature of the campaign, and the purposes for which the information is processed.

Where applicable law provides a right to opt out of a particular type of processing, individuals may submit a request using the methods described in Section 14 below.

We will not discriminate against an individual for exercising a privacy right provided by applicable law.

Where permitted by law, an authorized agent may submit a request on an individual’s behalf. We may require reasonable verification of the individual’s identity, the agent’s authority, or both.

9. EEA, UK, AND OTHER INTERNATIONAL PRIVACY RIGHTS

Individuals located in the European Economic Area, United Kingdom, or other jurisdictions providing similar rights may, subject to applicable law, have the right to:

request access to Personal Data;
request correction of inaccurate Personal Data;
request deletion of Personal Data;
request restriction of processing;
object to certain processing;
request portability of Personal Data;
withdraw consent where processing is based on consent; and
lodge a complaint with an applicable data protection authority.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

Where Stacks processes Personal Data on behalf of another business, we may direct the individual to that business or assist the business in responding to the request, as appropriate.

10. INTERNATIONAL DATA TRANSFERS

Stacks is based in the United States, and Personal Data may be processed in the United States and other countries where Stacks, our service providers, advertisers, publishers, or other business partners operate.

Where required by applicable law, we use appropriate safeguards for international transfers of Personal Data, which may include approved standard contractual clauses, applicable transfer addenda, adequacy decisions, or other legally recognized transfer mechanisms.

11. DATA RETENTION

Stacks retains Personal Data for as long as reasonably necessary for the purposes for which it was collected or processed, including to:

provide and operate the Services;
complete campaign attribution and validation;
prepare reports;
process billing and payments;
reconcile transactions;
detect and investigate fraud;
maintain security;
administer business relationships;
resolve disputes;
enforce agreements;
satisfy tax, accounting, legal, regulatory, and compliance requirements; and
establish, exercise, or defend legal claims.

Retention periods vary depending on the type of information, the nature of the relationship, applicable contractual requirements, legal requirements, and legitimate business needs.

When Personal Data is no longer reasonably necessary for these purposes, we may delete, anonymize, or de-identify it, subject to applicable legal and technical requirements.

12. DATA SECURITY

Stacks maintains reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, acquisition, use, alteration, disclosure, or destruction.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. CHILDREN'S PRIVACY

The Services are intended for business and commercial purposes and are not directed to children.

Stacks does not knowingly collect Personal Data directly from children under 13 through its corporate websites or business-account Services.

Advertising campaigns distributed through the Stacks network may appear on third-party websites, applications, or other properties not controlled by Stacks. Publishers and advertisers are responsible for complying with applicable age-related, children’s privacy, and consent requirements for properties and services they control.

If we become aware that Personal Data has been collected or processed in violation of applicable children’s privacy law, we will take reasonable steps to address the information as required by law.

14. EXERCISING PRIVACY RIGHTS

To submit a privacy request or ask a question about this Privacy Policy or Stacks’ privacy practices, contact us at:

Stacks App LLC
119 S. Western Ave Unit 1 #228
Chicago, IL 60612
Email: [email protected]

Please describe the nature of your request and provide information reasonably necessary for us to identify the relevant records and verify the request where required by law.

We may need to verify identity before completing certain requests. Verification requirements will depend on the nature of the request, the sensitivity of the information involved, and applicable law.

Because much of the campaign information processed by Stacks consists of pseudonymous technical identifiers rather than names or direct contact information, we may not always be able to reasonably associate a particular identifier with an identifiable requesting individual. Applicable law may limit our obligation to identify or re-identify individuals solely for purposes of responding to a privacy request.

If Stacks processes the relevant Personal Data solely on behalf of another business, we may direct the request to that business or coordinate with it as required by applicable law.

15. THIRD-PARTY WEBSITES, APPLICATIONS, AND SERVICES

The Services may contain links to or interact with websites, applications, products, and services operated by advertisers, publishers, and other third parties.

Stacks does not control the independent privacy practices of those third parties. Their collection and processing of Personal Data are governed by their own privacy notices and practices.

We encourage individuals to review the privacy notices of the websites, applications, products, and services with which they interact.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, data practices, legal requirements, or business operations.

When we update this Privacy Policy, we will revise the “Last Updated” date above. Where required by applicable law, we will provide additional notice of material changes or obtain consent before applying changes to Personal Data.

17. CONTACT US

Questions regarding this Privacy Policy or Stacks’ privacy practices may be directed to:

Stacks App LLC
119 S. Western Ave Unit 1 #228
Chicago, IL 60612
[email protected]