Privacy

FixtureStack, based in Sofia, Bulgaria. You can reach me directly at hello@fixturestack.com. There’s no separate data protection officer — at this size, that’s me too.

Filling in the early-access form is the only way to give me anything. There’s no account, no login, and nothing is collected just from visiting the page.

Data collected by the FixtureStack early-access form

Your email, country and obstacle are processed on the basis of consent — you give it by submitting the form. You can withdraw that consent at any time either by using the unsubscribe link in any email from me, or by asking me to delete your data outright (see below) — unsubscribing stops future emails; deletion also removes the form answers themselves. The IP hash and user-agent are processed on the basis of legitimate interest: keeping the form working for real people and out of a bot’s hands.

Nothing is sold, and nothing is shared with advertisers. A short list of processors keeps the form running:

Third-party processors used by FixtureStack

Supabase, Upstash, Plausible and PostHog all keep this project’s data inside the EU, so nothing is transferred out for those four. Vercel processes data in Frankfurt for this project but is a US company, and Resend’s email sending happens in the US — both are genuine international transfers. Here’s what each says about safeguarding that, in their own words, checked directly against their published policies:

I’m stating this as accurately as I can rather than assuming every provider has the same protections — Resend’s own public policy, as of 2026-09-12, doesn’t name a specific transfer mechanism (no Standard Contractual Clauses or EU–US Data Privacy Framework mentioned), unlike Vercel and Supabase, which do. If this matters to you, you’re welcome to ask me for more detail, or ask Resend directly for their Data Processing Agreement.

Nothing here makes an automated decision about you, and there’s no profiling with a legal or similarly significant effect. The obstacle and country fields sort responses into aggregate counts for roadmap decisions — no individual scoring, and no automated outcome is ever applied back to you.

This site does not use cookies. See the cookie policy for the full detail on how Plausible, Vercel Web Analytics and PostHog are used instead, and why no consent banner is shown.

Under GDPR, you can ask me at any time to:

• show you the data I hold about you (access);
• correct anything that’s wrong (rectification);
• delete it entirely (erasure);
• give you a copy in a portable format, or stop processing it while a request is resolved (portability and restriction);
• let you object to processing based on legitimate interest, or withdraw consent given for anything else — the quickest way to withdraw consent for emails specifically is the unsubscribe link included in every email I send.

Email hello@fixturestack.com for any of the above and I’ll act within 30 days — for a deletion request, every row above is gone within seven. You don’t need to give a reason.

If you think I’ve mishandled your data, you can also complain to Bulgaria’s Commission for Personal Data Protection (cpdp.bg) or the supervisory authority in your own EU country.

FixtureStack isn’t directed at children. You need to be at least 16 to join early access. If you believe a child has given me their email, get in touch and I’ll remove it.

If what I collect changes — most likely once the product itself exists — this page changes with it, and the date at the bottom updates. I won’t quietly widen what I collect without saying so here first.