Privacy

The short version

Stratatouille collects as little as possible. We store the email you sign up with and the timelines you create. Beyond that, only lightweight, aggregate analytics to understand overall usage — no ad networks, no cross-site tracking, and we never sell your data. You can export everything you make, and delete your account and all its data at any time.

Adults only

Accounts are for adults. We do not knowingly collect personal information from children, and Stratatouille is not designed for student accounts. Where minors engage with the tool, it is through a teacher's projected or printed material — never a login of their own.

What we collect

• Account: your email address and an encrypted password (we never see it in plain text).
• Your content: the boards, lanes, and events you create, plus context you import from public sources like Wikidata.
• Basic technical logs needed to run and secure the service.

Who processes it (sub-processors)

• Supabase — database, authentication, and storage.
• Cloudflare — hosting and content delivery at the edge.
• Resend — transactional email (sign-up confirmation, password reset).
• Lovable — build platform and aggregate site analytics.

These providers are based in the United States. If you use Stratatouille from outside the US, your data is processed there.

Analytics

We use aggregate analytics — provided through our build platform, Lovable — to understand overall traffic: how many people visit, which pages they view, the site that referred them, their device type, and their country (derived from your IP address, not stored against you). It is not tied to your identity, and we do not sell or share it. A small value may be kept in your browser to count repeat visits; we do not use it to track you across other sites.

As the product grows, we plan to move to a more robust, privacy-preserving analytics setup — aggregate and cookieless by design. We'll keep this section current as that changes.

Beyond that, the only cookie on the site is a short-lived security cookie set by our host, Cloudflare, to tell humans from bots. We use no advertising or cross-site cookies.

Keeping and deleting data

We aim to keep as little as possible, for as long as it's useful and no longer. Your account and content stay in our database until you delete your account, which removes them from the live service; the email you signed up with may also remain in our email provider's records for a period.

We're an early-stage team, and our formal backup-purge schedule and deletion workflow are still being built. In the meantime our commitment is plain: minimise what we hold, honour deletion requests, and meet applicable legal requirements as we put the tooling in place. Need something erased on a particular timeline? Email us and we'll handle it directly.

Your rights

• Export: download your boards as JSON at any time from the app.
• Deletion: delete your account and all associated data from your account settings — this is irreversible.
• Access, correction, and other rights under GDPR/CCPA where applicable.

Sharing

Content is private by default. A board becomes viewable only if you create an unlisted share link, which you can revoke at any time.

Changes to this policy

We'll update this page as our practices evolve and note the date at the top. Material changes will be reflected here before they take effect.

Who we are & contact

Stratatouille is operated by Intellitics, Inc., a Delaware corporation, which is the controller of your personal data:

Intellitics, Inc.
c/o Tim Bonnemann
868 South 5th Street, Apt 412
San Jose, CA 95112
hello@stratatouille.com

Questions, or a privacy or deletion request? Email us at the address above.