Privacy Policy

StickyWeek is operated by SIA LAPSA 3D, a company in Latvia. SIA LAPSA 3D is the controller of the personal data described here. Registration number: 40203491582. Address: Ruses iela 8–20, Rīga, LV-1029, Latvia.

Questions about your data, or requests to use your rights, go to support@stickyweek.app.

Account data. The e-mail address and password you register with (your password is passed to our authentication provider, which stores it only in hashed form; we do not store or log it ourselves), your account id and creation date, your account time zone, the date your free trial started and your access status (for example whether you have been given complimentary access), and the settings you save (for example currency, board layout and invoice-tracking preference).

Your work data. Whatever you choose to enter: Clients (including optional contact details you add), Jobs, Board Cards, tracked Sessions, notes, categories, Charges, Expenses, rates and amounts, and invoice or bookkeeping markers. This is your content; we use it to run StickyWeek for you. StickyWeek is a planning and time-tracking tool, not accounting, tax or financial advice software.

Feedback you send. If you use “Send feedback” (Bug, Suggestion or Other) or answer the occasional satisfaction question, we store what you write or select, the general page you were on, and the version of the app. We read feedback to support you and to improve the product.

Limited usage data. See “Product analytics” below.

Technical error reports. See “Error monitoring” below.

To understand how StickyWeek is used and where people get stuck, we record a small amount of first-party product-usage data. It is tied to your account (it is not anonymous), is stored in our own database, and is limited to things like:

• which major areas of the app you open (for example Board, Jobs, Statistics, Wiki Guide);
• interactions with the Quick Tour and whether a few key flows, such as creating a Job or placing a Card, were opened and then abandoned;
• choices such as the Statistics view you pick, whether you open a report menu or generate a report, and preferences like light or dark theme;
• which Guide sections you reach and whether you start or finish a tutorial video.

This is designed not to include your Client names, Job names, Card titles, notes, financial amounts, search text or the contents of any form. Facts that StickyWeek already stores as part of your work (for example how many Jobs or tracked Sessions you have, and on which dates) are counted from that stored data and are visible to us as account-level summaries, never as the content itself.

Apart from the optional services described under “Cookies and browser storage”, which run only if you choose Accept cookies, we do not use third-party advertising or behavioral-analytics services, and we do not sell your data.

When StickyWeek hits an unexpected technical problem, a diagnostic report may be sent to Sentry so we can find and fix it. A report can contain the error itself, the application version, a generic version of the page you were on (without private identifiers or search terms), your account id, your browser and device environment, language and time zone, and an approximate location that Sentry derives from the connection.

StickyWeek is configured not to attach your e-mail address, name, Client or Job content, notes, request bodies, cookies or authorization headers to these reports. As with any internet service, the network address of a connection is necessarily visible to the providers involved in delivering it.

We send essential e-mail to every account: confirming your account, resetting your password and other necessary messages about your account, its security or the service. These do not depend on any marketing choice.

Onboarding & reminders. During your free trial we send a few e-mails that help you get started with StickyWeek: a welcome with the Quick Guide, practical tips, and factual reminders about when your trial ends. These are part of the trial you started and are on by default.

Offers & product news. Now and then we may also send occasional discounts, special offers and updates about StickyWeek. These are on by default as well.

You can turn either category off — and on again — independently at any time in Account → Email, or with the unsubscribe link in any of these e-mails, without signing in. Turning one off does not affect the other, and the essential account e-mails above are always sent. Your choices stay with your account, including when you change your e-mail address.

These e-mails are delivered by Resend. To send them, we share your e-mail address and limited account information with Resend — for example the message itself, when your trial ends, and whether an e-mail applies to you — never your Clients, Jobs, notes or other work content. When you turn a category off we stop sending it; for offers and product news we also ask Resend to mark you as unsubscribed, which can take a few minutes.

Paid StickyWeek subscriptions are sold through Paddle, which acts as the payment processor and merchant of record for those purchases. When you buy a plan, you give your payment and billing details to Paddle in its checkout. Paddle processes that information under its own terms and privacy policy. StickyWeek receives payment and subscription information from Paddle, including transaction amounts, currency, subscription status, billing dates, transaction identifiers, and refund information, so that we can give you the access you paid for. Payment card details are processed by Paddle and are not stored by StickyWeek. If you do not buy a plan, no payment data is collected.

StickyWeek has a Partner Program: partners share StickyWeek links and may earn a commission when someone they referred subscribes. Partners are not shown your name, your e-mail address or anything in your account.

Referral tracking is one of the optional cookies covered by the single cookie choice described under “Cookies and browser storage”: it applies only if you chose Accept cookies. Following a partner's link is not consent. Rejecting optional cookies does not affect creating an account, using StickyWeek, or subscribing, and rejecting, or withdrawing an earlier acceptance, removes the referral cookie and stops the tracking script from loading.

If you accept, Affonso, the service we use to run the program, sets a first-party cookie named affonso_referral for 30 days. It holds a random referral identifier, not your name or e-mail address. Because stickyweek.com and stickyweek.app are different websites and can not share a cookie, the partner's link details (and an identifier Affonso's script adds to the address) are also carried in the page address when you move from one to the other. Once you are signed in with a verified account, we tell Affonso that your account signed up, using only your random StickyWeek account ID (not your name or e-mail address). If you subscribe, the referral identifier and that account ID are attached to your payment record at Paddle, which also copies them to your subscription's renewals, so the right partner is credited for the payments the program covers. This relies on your accepted choice being available in the browser you subscribe from, so attribution is not guaranteed if you subscribe from a different browser or device. Affonso receives payment information from Paddle for these purchases (such as amounts, currency, refunds and cancellations) to calculate commission.

If you reject, or have not chosen, no referral cookie is set and no referral identifier is attached to a payment. If you arrive through a partner's link, Affonso's script is loaded before you choose, in its consent mode: it does not set its referral cookie, but it may send Affonso a limited request about the visit. Affonso describes that mode as collecting no personal data, but it is still a web request, so your network address is necessarily visible to Affonso. Google Analytics and Meta Pixel stay blocked until you accept. We use this data only to credit partners — not for advertising, and we do not sell it. The reason is your consent, which you can withdraw at any time as described above. Withdrawing stops any further tracking from then on; it can not undo what has already been recorded for the program, such as your signup or a referral already attached to a subscription. If you want that removed, write to support@stickyweek.app.

Where the EU/EEA data-protection rules (GDPR) apply, we rely on these reasons:

• To provide the service you asked for — creating your account, storing and showing your work, sending account e-mail, and handling a subscription you buy (performance of our agreement with you).
• To run, secure and fix the service — protecting accounts, diagnosing technical failures with error reports, and understanding limited product usage so we can improve StickyWeek (our legitimate interests, balanced against your privacy; the analytics and error data are deliberately minimal).
• To send onboarding & reminder e-mails during your trial — as part of the service you started, and you can turn them off at any time.
• To send offers & product news about StickyWeek — our legitimate interest in telling you about our own service; this is on by default and you can turn it off at any time.
• To credit partners for referrals — only if you accept optional cookies (your consent, which you can withdraw at any time).
• To measure visits and advertising with Google Analytics and Meta Pixel — only if you accept optional cookies (your consent, which you can withdraw at any time).
• To meet legal obligations where they apply to us.

We do not make decisions about you by automated means that have legal or similarly significant effects.

We use these service providers to run StickyWeek:

• Supabase — database and authentication (your account and your StickyWeek data are stored here, in the EU).
• Vercel — application hosting and deployment.
• Resend — delivery of transactional e-mail (account confirmation and password reset) , onboarding & reminder e-mails, and offers & product news (each can be turned off in Account → Email).
• Sentry — technical error monitoring and diagnostics.
• Paddle — payment processing and merchant of record for paid StickyWeek subscriptions (see “Payments” above).
• Cloudflare — Turnstile bot protection on the sign-up, sign-in and password-reset forms.
• Affonso — partner-program referral tracking and commission calculation, used for you only if you accept optional cookies (see “Referral links and the Partner Program” above).
• Google Analytics — measures visits to our public pages, only after you accept optional cookies (see “Cookies and browser storage”).
• Meta Pixel — advertising measurement on our public pages, only after you accept optional cookies (see “Cookies and browser storage”).

Except for Paddle, which handles payments as the merchant of record under its own terms (see “Payments” above), and Affonso, which runs the referral tracking and partner platform under its own terms and privacy notice (see “Referral links and the Partner Program” above), and Google and Meta, which act under their own terms and privacy notices, they process data on our behalf to provide those services. Where personal data is transferred outside the European Economic Area, StickyWeek uses or relies on appropriate safeguards as required by applicable data-protection law. We do not sell your personal data.

StickyWeek uses functional browser storage — cookies that keep you signed in and remember things like the week you were viewing, and local or session storage for preferences such as your theme, the “keep timer on top” choice, onboarding state, and a random identifier that exists only for the current browser session (used to group product-usage data and discarded when you close it). It also keeps one small cookie, sw_cc, that records your cookie choice (below) for a year; it holds nothing else. Anything beyond that is optional and depends on your choice.

One service, one choice. stickyweek.com (the website) and stickyweek.app (sign-up, sign-in and the app) are one StickyWeek service. The first time you visit a public page of either, a small bar says “We use optional cookies for analytics, advertising and creator referrals” and offers two buttons, Accept cookies and Reject optional. That one choice covers all optional tracking: analytics, advertising measurement and creator referral tracking. Visiting either site, or following a partner's link, is not consent: no optional cookie is set, and Google Analytics and Meta Pixel are not loaded, until you choose Accept cookies. The one thing that can happen earlier is Affonso's script, which on a visit through a partner's link is loaded in its consent mode, without its referral cookie (see “Referral links and the Partner Program”). Rejecting does not affect your access to StickyWeek — sign-up, sign-in, the app and checkout work the same.

From the website to the app. Each site keeps your choice in its own cookie. When you follow a link from one to the other, the site you arrive at asks the other one for your current choice — through your own browser, with a one-time code only your browser holds — before the page loads, and keeps the more recent choice. Nothing is stored on a server for this and a link can not make a choice for you, so you are not asked a second time when you go from the website to sign-up. If you open stickyweek.app directly and have not chosen on either site, the same bar appears there.

Changing your mind. Cookie preferences (here, and in the footer of stickyweek.com) reopens the same bar. Choosing Reject optional, or withdrawing an earlier acceptance, removes the optional cookies and stops the optional services from loading on later pages. When you change an earlier choice, the page passes briefly through the other site and comes straight back, so the change is made on both sites at once. It stops future tracking; it can not call back information already sent to a service.

The optional services. Affonso referral tracking is enabled (see “Referral links and the Partner Program”). Google Analytics is enabled: after you accept, it measures visits to our public pages — page views only, without the page's query string — and sets its own cookies. Meta Pixel is enabled: after you accept, it measures visits to our public pages for advertising and sets its own cookies. Neither measures the signed-in app. The exceptions are two moments, and only if you accepted optional cookies: when a new account is first opened, they are told that an account signed up and that its trial started; and when a new customer's first subscription payment is confirmed, they are told that a purchase happened — its amount after any discount and before tax, in euro, the plan, and Paddle's transaction number. Renewals and plan changes are not reported. That is all they receive: no e-mail address, name, account ID, Client, Job or other work data (Meta's automatic matching of form fields is turned off). None of them receives your Clients, Jobs, amounts or other work data.

You can download your work from Account → Your data as a JSON file. It contains the data you entered and your saved settings (Clients, Jobs, Cards, Sessions, Charges, Expenses, categories and related settings). It does not include operational data such as product feedback, prompt state, analytics events, internal administration data or server logs.

You can delete your account yourself from Account. This permanently removes your account and the data stored with it in StickyWeek, including feedback and usage data linked to your account. Copies may remain for a limited time in the provider's managed backups until those are rotated out in the normal course, and diagnostic reports held by Sentry expire under Sentry's own retention settings. Any contact record kept for you at Resend is unsubscribed and removed after the deletion; Resend may keep records of e-mails already sent under its own retention settings.

We keep your data for as long as you have an account. After deletion we keep only what the law requires or what remains in the backups described above.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to certain processing, and receive a portable copy. Much of this you can do yourself in the app; for anything else write to support@stickyweek.app. You also have the right to complain to your data-protection authority; in Latvia this is the Data State Inspectorate (Datu valsts inspekcija).

We may update this Privacy Policy as StickyWeek changes. We will provide notice of material changes where required by applicable law or where appropriate.

See also our Terms of Service and Support.