Privacy policy

Last updated: October 25, 2026

This is the minimal privacy policy of Newly Stack (newlystack.com). It explains what we collect today, why, and how to reach us. A full set of legal pages follows before any paid feature opens. Newly Stack is run by Ahmad Thariq Syauqi from Yogyakarta, Indonesia. Contact: hello@newlystack.com.

What we collect

  • Browsing without an account. We do not load analytics or advertising cookies unless you accept them in the cookie banner. Your choice is stored in your browser (a first-party cookie and local storage named ns_consent) and as a consent record with a hashed IP address and your browser user agent.
  • Analytics after consent. If you accept, we load Google Analytics 4 to count visits and clicks (for example clicks on WhatsApp buttons). Google signals and ad personalization are turned off. If you reject, Google Analytics is never loaded.
  • Account. When you sign in we store your email address, display name, role, language and sign-in sessions. Sessions use a random token in an httpOnly cookie named ns_session; we keep only a SHA-256 hash of that token. Sign-in identities are handled by a self-hosted authentication service run by the same owner, which also stores your email address.
  • Votes, submissions and requests. When these features open, we store what you send us together with a hashed IP address. IP addresses are never stored in plain form: we hash them with a secret salt that changes every day.
  • Security checks. Forms use Cloudflare Turnstile to stop bots. Cloudflare processes technical signals such as your IP address for that check. Requests are rate limited using a hashed IP address.

Emails

Sign-in links and other emails you ask for are sent through Resend from the sender domain mail.creativismagency.com with replies going to hello@newlystack.com. We do not send marketing emails without a confirmed opt-in.

How long we keep data

  • Sessions expire after 30 days or when you log out.
  • Database backups are kept for 14 days.
  • Account data is kept until you delete your account.

Your choices and rights

You can change your cookie choice by clearing this site's cookies and local storage. You can delete your Newly Stack account at any time from the account page; this removes your membership, sessions and votes from our database. To see, correct or remove other data, or to remove your sign-in identity as well, email hello@newlystack.com and we will answer within the time limits set by the EU GDPR and Indonesia's Personal Data Protection Law (UU 27/2022), which these rights follow.

Who we share data with

Only the service providers named above (Resend for email, Cloudflare for security checks and DNS, Google for analytics after consent). We do not sell personal data and we do not sell backlinks or rankings.