Legal
Privacy Policy
1. Who we are
NitStack (“we”, “us”) is the data controller / data fiduciary for personal data processed through this website and our documentation. Contact: privacy@nitstack.com.
2. What we collect
We practise data minimisation. Through this site we may process:
- Preferences — your light/dark theme choice and your cookie consent record, stored in your browser.
- Usage analytics — only if you consent: aggregated, anonymised statistics about how the site is used.
- Technical data — standard server/CDN logs (IP address, user-agent, timestamps) used for security and to keep the service available.
- Information you send us — e.g. the contents of emails or sales/support enquiries.
We do not sell your personal data, and we do not run advertising trackers.
3. Why we process it, and our legal basis
- To run and secure the site — legitimate interests (GDPR Art. 6(1)(f)) / legitimate use (DPDP).
- To remember your preferences — strictly necessary, or your consent for non-essential ones.
- Analytics — your consent (GDPR Art. 6(1)(a); DPDP s.6). You can withdraw it anytime.
- To respond to enquiries — to take steps at your request / our legitimate interests.
4. Cookies & similar technologies
Non-essential cookies are only set with your consent, gathered through our consent banner. You can change or withdraw consent anytime via . Details are in our Cookie Policy.
5. Sharing & processors
We share data only with service providers (data processors) that help us operate the site — for example hosting/CDN — under contracts that require them to protect it. We disclose data to authorities only where legally required.
6. International transfers
Where data is transferred outside your country (e.g. the EEA, the UK or India), we use appropriate safeguards such as Standard Contractual Clauses and provide protections consistent with applicable law.
7. Retention
We keep personal data only as long as needed for the purposes above or as required by law. Browser-stored preferences persist until you clear them or they expire (consent: up to 12 months). Server logs are kept for a limited period for security.
8. Your rights
Subject to applicable law, you can:
- access the personal data we hold about you, and obtain a copy;
- have inaccurate data corrected, and incomplete data completed;
- have your data erased;
- restrict or object to certain processing, and (GDPR) request portability;
- withdraw consent at any time — as easily as you gave it;
- (DPDP) nominate another person to exercise your rights in the event of death or incapacity;
- lodge a grievance with us, and complain to your supervisory authority (e.g. your EU/UK Data Protection Authority, or the Data Protection Board of India).
9. Grievance redressal (India DPDP)
If you are in India, you may raise any grievance about how we handle your personal data with our grievance contact at privacy@nitstack.com. We will respond within the timelines required by the DPDP Act and its rules.
10. Children
This site is not directed at children. Where required (including under the DPDP Act for individuals under 18), we do not knowingly process children’s data without verifiable parental/guardian consent, and we do not engage in tracking or targeted advertising directed at children.
11. Changes
We may update this policy; we’ll revise the “last updated” date and, for material changes affecting consent, ask you to review your choices again.
12. Contact
Privacy & grievances: privacy@nitstack.com.