Privacy Policy
Privacy Policy
Last updated: 18.07.2026
Welcome to Stick.
We respect your right to privacy and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
By using the website, you agree to this Privacy Policy.
1. Who is the data controller
The data controller is the administration of the Stick website.
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing the support service.
2. What data we collect
Depending on how you use the website, we may collect the following data:
• Registration data
• name;
• email address;
• telephone number;
• password (stored in encrypted form).
• Profile data
• photograph;
• profile description;
• location;
• interface language;
• notification settings.
• Advertisement data
• title;
• description;
• photographs;
• category;
• price;
• item characteristics;
• advertisement change history.
• Payment data
When paid services are used, we may receive:
• payment identifier;
• amount;
• currency;
• payment status;
• payment method.
We do not store bank card details.
All payments are processed by payment service providers, such as Montonio and PayPal.
3. Automatically collected data
When you use the website, the following data may be collected automatically:
• IP address;
• browser type;
• operating system;
• browser language;
• date and time of the visit;
• device information;
• error logs;
• user actions;
• Push Subscription ID;
• Service Worker data;
• technical cookies.
4. How we use the data
Personal data is used solely for the following purposes:
• user registration;
• authentication;
• publication of advertisements;
• communication between users;
• payment processing;
• provision of paid services;
• delivery of notifications;
• fraud prevention;
• security;
• compliance with legal requirements;
• improvement of website quality and performance;
• preparation of statistics.
5. AI features
Where a user uses the AI assistant to create an advertisement:
• the entered text may be transmitted to an AI API provider;
• only the data necessary to generate a response is transmitted;
• the API is used solely to process the user's request;
• the API key is stored only on the server.
We recommend that users do not enter confidential information into the AI assistant.
6. Cookies
The website uses cookies for:
• authentication;
• storing the selected language;
• storing settings;
• operation of the cart and favourites;
• security;
• analytics;
• PWA functionality;
• Push notifications.
Users may disable cookies in their browser settings, but some website functions may then operate incorrectly.
7. Push notifications
With the user's consent, the browser stores a Push subscription.
It is used only to send website notifications concerning:
• messages;
• changes to advertisement status;
• expiry of an advertisement;
• payment confirmation;
• system notifications.
Users may disable Push notifications at any time.
8. Email and Telegram
With the user's consent, we may send:
• service notifications;
• message notifications;
• payment notifications;
• advertisement publication notifications.
Marketing emails are sent only where the user has given consent.
9. Disclosure of data to third parties
We do not sell personal data.
Data may be disclosed only to:
• payment service providers;
• email delivery services;
• the AI service provider;
• public authorities where there is a lawful basis.
10. Data retention period
Data is retained only for as long as necessary for:
• providing services;
• complying with legal obligations;
• resolving disputes;
• protecting the legitimate interests of the website.
After an account is deleted, data is deleted or anonymised unless continued retention is required by law.
11. User rights
Under the GDPR, users have the right to:
• obtain a copy of their data;
• correct their data;
• delete their data (“the right to be forgotten”);
• restrict processing;
• object to processing;
• receive and transfer their data;
• withdraw consent;
• lodge a complaint with the relevant national data protection authority.
12. Security
We implement technical and organisational measures to protect information, including:
• HTTPS;
• password encryption;
• CSRF protection;
• XSS protection;
• protection against SQL injection;
• action logging;
• backups;
• restricted employee access.
13. Children
The website is not intended for persons under 16 years of age.
If we become aware that a child has registered without the consent of a legal representative, the relevant data will be deleted.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The current version is always published on the website.
Continued use of the website constitutes acceptance of the revised Policy.
15. Contact
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing the support service.
Last updated: 18.07.2026
Welcome to Stick.
We respect your right to privacy and are committed to protecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
By using the website, you agree to this Privacy Policy.
1. Who is the data controller
The data controller is the administration of the Stick website.
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing the support service.
2. What data we collect
Depending on how you use the website, we may collect the following data:
• Registration data
• name;
• email address;
• telephone number;
• password (stored in encrypted form).
• Profile data
• photograph;
• profile description;
• location;
• interface language;
• notification settings.
• Advertisement data
• title;
• description;
• photographs;
• category;
• price;
• item characteristics;
• advertisement change history.
• Payment data
When paid services are used, we may receive:
• payment identifier;
• amount;
• currency;
• payment status;
• payment method.
We do not store bank card details.
All payments are processed by payment service providers, such as Montonio and PayPal.
3. Automatically collected data
When you use the website, the following data may be collected automatically:
• IP address;
• browser type;
• operating system;
• browser language;
• date and time of the visit;
• device information;
• error logs;
• user actions;
• Push Subscription ID;
• Service Worker data;
• technical cookies.
4. How we use the data
Personal data is used solely for the following purposes:
• user registration;
• authentication;
• publication of advertisements;
• communication between users;
• payment processing;
• provision of paid services;
• delivery of notifications;
• fraud prevention;
• security;
• compliance with legal requirements;
• improvement of website quality and performance;
• preparation of statistics.
5. AI features
Where a user uses the AI assistant to create an advertisement:
• the entered text may be transmitted to an AI API provider;
• only the data necessary to generate a response is transmitted;
• the API is used solely to process the user's request;
• the API key is stored only on the server.
We recommend that users do not enter confidential information into the AI assistant.
6. Cookies
The website uses cookies for:
• authentication;
• storing the selected language;
• storing settings;
• operation of the cart and favourites;
• security;
• analytics;
• PWA functionality;
• Push notifications.
Users may disable cookies in their browser settings, but some website functions may then operate incorrectly.
7. Push notifications
With the user's consent, the browser stores a Push subscription.
It is used only to send website notifications concerning:
• messages;
• changes to advertisement status;
• expiry of an advertisement;
• payment confirmation;
• system notifications.
Users may disable Push notifications at any time.
8. Email and Telegram
With the user's consent, we may send:
• service notifications;
• message notifications;
• payment notifications;
• advertisement publication notifications.
Marketing emails are sent only where the user has given consent.
9. Disclosure of data to third parties
We do not sell personal data.
Data may be disclosed only to:
• payment service providers;
• email delivery services;
• the AI service provider;
• public authorities where there is a lawful basis.
10. Data retention period
Data is retained only for as long as necessary for:
• providing services;
• complying with legal obligations;
• resolving disputes;
• protecting the legitimate interests of the website.
After an account is deleted, data is deleted or anonymised unless continued retention is required by law.
11. User rights
Under the GDPR, users have the right to:
• obtain a copy of their data;
• correct their data;
• delete their data (“the right to be forgotten”);
• restrict processing;
• object to processing;
• receive and transfer their data;
• withdraw consent;
• lodge a complaint with the relevant national data protection authority.
12. Security
We implement technical and organisational measures to protect information, including:
• HTTPS;
• password encryption;
• CSRF protection;
• XSS protection;
• protection against SQL injection;
• action logging;
• backups;
• restricted employee access.
13. Children
The website is not intended for persons under 16 years of age.
If we become aware that a child has registered without the consent of a legal representative, the relevant data will be deleted.
14. Changes to this Policy
We may update this Privacy Policy from time to time.
The current version is always published on the website.
Continued use of the website constitutes acceptance of the revised Policy.
15. Contact
For questions concerning the processing of personal data, you may contact us through the Contact page or by emailing the support service.