Privacy Policy

Who we are

GovernStack (governstack.co.uk) is a free professional tools website providing calculators and reference utilities for UK finance, cybersecurity compliance, and business operations. The site is operated as a sole trader / individual publisher based in the United Kingdom.

For privacy enquiries, contact us at: privacy@governstack.co.uk

What data we collect

Data you enter into our tools

All calculator inputs — including salaries, passwords, financial figures, and risk information — are processed entirely within your browser using JavaScript. This data is never transmitted to our servers, stored in any database, or shared with any third party. When you close or refresh the page, it is gone.

The password strength checker in particular performs all analysis locally. Your password is never sent anywhere.

Analytics data

We use analytics tools to understand how visitors use the site — including which pages are visited, how long sessions last, and which tools are most used. This data is aggregated and anonymised. We do not collect names, email addresses, or any personally identifiable information through analytics.

Log data

Like all websites, our hosting provider (Vercel) automatically records standard server log data when you visit, including your IP address, browser type, referring page, and the date and time of your visit. This data is retained by Vercel for a limited period for security and operational purposes and is subject to Vercel's own privacy policy.

Advertising and cookies

GovernStack displays advertisements served by Google AdSense. Google may use cookies and similar technologies to serve ads based on your prior visits to this site or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet.

You may opt out of personalised advertising by visiting Google's Ads Settings. Alternatively, you may opt out of a third-party vendor's use of cookies by visiting the Network Advertising Initiative opt-out page.

We do not control the cookies placed by Google AdSense. For full details of how Google uses data from sites that use Google services, see Google's Privacy & Terms.

Legal basis for processing (UK GDPR)

Under UK GDPR, we process data on the following legal bases:

• Legitimate interests — server log data retained for security and operational purposes.
• Consent — advertising cookies placed by Google AdSense, where consent is obtained.
• No processing — tool input data is never processed by us; it stays in your browser.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk

To exercise any of these rights, email privacy@governstack.co.uk. Given the minimal data we collect, most requests will be straightforward to fulfil.

Data retention

Tool input data: not retained (processed locally only). Server logs: retained by Vercel per their policy (typically 30 days). Analytics data: aggregated and anonymised, retained indefinitely. AdSense cookie data: managed by Google per their retention policies.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of GovernStack after changes constitutes acceptance of the revised policy.