Privacy Policy

The short version

QuestStack works without optional analytics. Google Analytics and the 90-day attribution record are not started until you choose “Allow analytics.” You can decline or withdraw that choice at any time using the persistent Privacy settings control at the bottom of the site.

Some outbound links are affiliate links; see the affiliate disclosure.

Information we handle

• Essential request and security data: hosting and security systems may process IP address, request time, requested path, and browser information to deliver and protect the site.
• Optional analytics: after permission, Google Analytics may receive page views, interaction events, page titles, and general browser or device information. Page URLs are reduced to the path and an approved set of UTM campaign parameters; arbitrary query parameters such as email addresses, tokens, and search values are removed.
• Optional attribution: after permission, we create a random visitor identifier and remember first- and last-touch source, medium, campaign, external referrer host, a sanitized landing path, and time. This record is stored in your browser for up to 90 days.
• Consent preference: the allow or decline choice is stored locally and in a minimal SameSite cookie for up to one year so the browser and outbound redirect route apply the same choice. The preference contains only granted or denied.

Why we use it

We use essential data to operate, secure, and troubleshoot QuestStack. We use optional analytics and attribution only with your permission to understand which pages are useful and improve recommendations.

Service providers and transfers

QuestStack uses hosting and security providers and, when enabled by your choice, Google Analytics. These providers process data for the services they supply and may process it in countries outside yours under their contractual and legal transfer safeguards. We do not sell personal data.

• Google privacy policy
• Vercel privacy policy

Retention and your choices

Browser attribution expires after 90 days and is removed when you withdraw analytics permission on this device. Analytics and operational records are retained only for the configured service period and as needed for security, accounting, or legal obligations.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal data, and to object or complain to a data-protection authority. Use the site’s Privacy settings for analytics, or email privacy@queststack.io for other requests.

Security, children, and changes

We use reasonable technical and organizational safeguards, but no internet service can promise absolute security. QuestStack is intended for business users and is not directed to children. We may update this notice when our practices or providers change; material changes will be reflected by a new effective date.