Privacy
Updated 22 October 2026.
1. Controller
The controller is Bohuslav Poláček, trading as Meadowstack, place of business Dobré 13, 517 93 Dobré, Czech Republic, company ID (IČ) 08831980, registered for VAT. Contact for anything about personal data: hello@meadowstack.com. We have no data protection officer, as the law does not require one.
2. What we process, why and for how long
| When | What data | Why and legal basis | How long |
|---|---|---|---|
| Visiting the site | technical data (IP address, browser, time), anonymous statistics: page, referring site, country, browser, device type | delivering and securing the site, knowing what is read; legitimate interest (Art. 6(1)(f)) | statistics only in aggregate, without identifying you; technical logs as long as the hosting provider keeps them |
| Contact form and e-mail | name, e-mail, message, what you are interested in | replying and preparing a quote; steps before a contract (b) and legitimate interest (f) | while we work together, otherwise 2 years, or until you ask us to delete it |
| Launch notification | a one-off notice you asked for; consent (a) | until sales launch, or until you withdraw consent | |
| Newsletter and marketing e-mails | news and offers, only if you sign up yourself; consent (a), unsubscribe at any time via the link in every e-mail | until you unsubscribe | |
| Buying the Framework | name, e-mail, billing address, company and VAT ID if given, GitHub username, order and licence details (variant, validity, status, language) | concluding and performing the contract, delivery through GitHub, licence management, end-of-updates reminders and release notes; contract (b) | for the licence and 3 years after it ends |
| Invoices and accounting | data on invoices and receipts | legal obligations (c) | 10 years |
| Studio services | contact and billing details of the client and its people | contract (b), invoicing (c) | for the contract and statutory periods |
Payment details (card number) are processed by Stripe; we never see them. We do not use solely automated decision-making or profiling.
3. Who we share data with
These providers process data on our behalf, only as far as they need to:
- Vercel (hosting of the site and server functions, Vercel Web Analytics)
- Resend (sending e-mails from the form and for purchases, EU region, Ireland)
- Google Workspace (the hello@meadowstack.com mailbox)
- Stripe (checkout and sale of Framework licences through Stripe Managed Payments; the merchant of record is Sold through Link, LLC of the Stripe group, which processes payment, invoicing, VAT and fraud-prevention data as an independent controller under its own policy and passes order details to us so we can deliver the licence)
- GitHub (private repository and invitation for Framework buyers)
- Fakturoid (invoices for studio services)
- our external accountant (invoices and receipts)
When we run an app for a client, we are the processor and the client’s privacy policy applies to the data in it. Providers used in client apps (for example databases or AI chat) are listed in the data processing agreement with the client.
4. Transfers outside the EU
Some providers are based in the US or may process data outside the EU. Transfers work as follows (based on the providers’ public data processing terms, as of 22 October 2026):
- Stripe (Stripe, LLC): EU-US Data Privacy Framework certification, with standard contractual clauses as a fallback (Data Transfers Addendum).
- Resend (Plus Five Five, Inc.): standard contractual clauses in its data processing addendum, plus EU-US Data Privacy Framework certification. We send e-mails from the EU region (Ireland).
- Vercel (Vercel Inc.): EU-US Data Privacy Framework certification and standard contractual clauses in its data processing addendum.
- GitHub (GitHub, Inc.): EU-US Data Privacy Framework and standard contractual clauses under the GitHub Data Protection Agreement.
- Google Workspace (Google LLC): EU-US Data Privacy Framework and standard contractual clauses under Google’s data processing addendum.
- Fakturoid and our external accountant process data in the EU.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest. You can withdraw consent at any time. Write to hello@meadowstack.com; we reply within a month. You can complain to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
6. Cookies
meadowstack.com uses no cookies and no third-party analytics or advertising code, so there is no consent banner. We count visits with Vercel Web Analytics, which uses no cookies and does not recognise you on another day or on another site. Your browser keeps only functional settings in local storage: your light or dark mode choice, the demo sidebar state and width, and a flag that you have already seen the intro animation on this visit. None of it is sent anywhere and no consent is needed. Stripe’s checkout runs on Stripe’s domain and uses its own necessary cookies under Stripe’s policy.
7. Changes
We update this policy when the way we handle data changes. The date of the last change is at the top.