Privacy Policy

Demo accounts  ·  Effective Date: July 27, 2026  ·  Last Updated: July 28, 2026

1. Who We Are

Stokemark (“we,” “us,” or “our”) is a personal performance-journaling service. For privacy questions, contact us via our contact form.

2. What the Demo Collects

There are two demo entry paths, each collecting different data:

(A) Instant demo (anonymous session):

• An anonymous session identifier assigned by Supabase Auth. No email address or password is collected.
• Sample data pre-loaded for the demo, plus any content you enter. Stored under your anonymous session ID and accessible only to you within the session and to Stokemark operators. Deleted at the 2-day purge.
• An anonymous Supabase session cookie to maintain your demo session.

(B) Demo account (email + verification):

• Your email address and a password (hashed; Stokemark never stores plaintext passwords). Email is used solely to send a one-time verification link and to identify your demo account.
• Your display name (optional, if provided at signup).
• A consent record — timestamp and version of the Terms and Privacy Policy you accepted at signup.
• Sample data plus any content you enter, stored in our database (Supabase) under your demo account ID. Accessible only to you when signed in and to Stokemark operators. Deleted at the 2-day purge.
• A Supabase session cookie to maintain your signed-in demo session.

In both paths, IP address and browser/device type are collected by our hosting infrastructure (Vercel) for security and service operation. AI features (Dan’s Verdict) are locked in the demo — no data is sent to Anthropic from demo sessions.

3. How We Use Demo Data

Demo data (including email address for demo-email accounts) is used solely to operate the demo experience: sending the verification email, displaying the pre-loaded sample data, and showing content you enter back to you within the session. We do not use demo data for advertising, we do not sell it, and we do not share it with data brokers.

4. Auto-Deletion

Demo accounts and all associated data — including the email address for demo-email accounts — are automatically purged within approximately 2 daysof account creation (deletion runs daily; actual purge time may be up to 24 hours after the 2-day mark depending on when the daily job runs). No action is required on your part. After deletion, no data linked to your demo account is retained by Stokemark. Note that infrastructure-level logs (Vercel server logs containing IP addresses) are retained per Vercel’s standard retention policy.

5. Sub-Processors

The demo uses the following third-party providers:

• Supabase, Inc.— Authentication, session management, and data storage for both demo entry paths (anonymous and demo-email). Email addresses for demo-email accounts are stored in Supabase Auth. All data is encrypted at rest (AES-256) and in transit (TLS).
• Vercel, Inc.— Web application hosting. Processes server request logs including IP addresses as part of standard hosting operations.
• Stripe, Inc.— Stripe’s hosted checkout is available in the demo (test mode only; no real charge). If you navigate to the billing screen, Stripe’s checkout page loads in your browser under Stripe’s own privacy policy (stripe.com/privacy). We pass an anonymous session reference to Stripe to map the test checkout. No card data is stored by Stokemark.

• Resend, Inc. — Transactional email provider used to send the one-time verification email for demo-email accounts (entry B). Resend receives your email address for this purpose only. See resend.com/privacy-policy.

Anthropic (AI inference) is notused for demo accounts — no AI inference is performed. Stripe is used for demo billing in test mode only — see above. No real charge is made.

6. Your Rights

For anonymous demo accounts (entry A): generally limited personal data is held (anonymous session ID, server logs). Standard data subject rights apply to the extent personal data is held. Accounts are auto-purged within 2 days.

For demo-email accounts (entry B): your email address, display name, and consent record are held until the 2-day auto-purge. You have the right to access, rectify, or delete your data before the auto-purge occurs. To exercise any rights or ask questions, contact us via our contact form.

For the full privacy policy applicable to real (live) accounts, visit our Privacy Policy.

6B. Contact Form Data

If you submit the contact form, we collect your name, email address, and message. This data is retained for up to 30 days and then automatically deleted. It is used only to respond to your inquiry and is not linked to your demo session.

7. Contact