Privacy Policy
Who we are
FennecStack is a sole proprietorship (Eenmanszaak) registered in the Netherlands under KvK number 42087413. We develop and publish software products and provide IT infrastructure consulting services.
This privacy policy covers all FennecStack products and services, including our website (fennecstack.com) and all consumer-facing applications.
This website
Our main website, fennecstack.com, is a static HTML site hosted on our own infrastructure in the Netherlands. No cookies, trackers, or analytics scripts are installed on this page—with one exception: the Meta Pixel (see Third-party services below).
When you submit a contact form on our website, your name, email, and message are sent to our Formspree inbox. Formspree stores your submission temporarily for our review and response. You can read Formspree's privacy policy on their website.
Email contact
If you email us at contact@fennecstack.com or any other FennecStack address, your email is stored in our self-hosted mail server (Dovecot) and is not shared with third parties unless you explicitly ask us to forward it somewhere.
We retain email correspondence while it is active and for up to 12 months afterward. You can request deletion of your email at any time.
Our products
EventFlow — B2B Event Coordination Platform
EventFlow is a secure, self-hosted platform for event attendance tracking and guest management, currently in pilot with government clients.
- Data collected: Guest names, contact information, attendance records, and event metadata provided by administrators or embedded into QR/RSVP links.
- Data location: Stored on our own PostgreSQL database, self-hosted in the Netherlands.
- Retention: Retained for the duration of the client contract and 30 days thereafter, then deleted (unless otherwise specified in a DPA).
- No external sharing: Guest data is never shared with third-party analytics, advertising, or cloud storage providers.
ClipNow — Barber Booking App
ClipNow is a mobile application for booking barber appointments. It targets the Libyan market and is designed to function efficiently on low-bandwidth connections.
- Data collected: Name, phone number, and preferred booking times provided voluntarily by users when making a reservation.
- Hardware integration: Physical seat-status toggles installed at barber stations transmit a simple on/off availability signal to the app's backend. No personal data is transmitted by the hardware.
- Data location: Stored on self-hosted backend infrastructure. Not shared with third parties for marketing or advertising purposes.
- Retention: Booking records are retained for up to 90 days after the appointment date, then deleted.
Dalyly / دليلي — Caller ID & Civic Directory
Dalyly is a free mobile application for caller identification and local business discovery, targeting the Libyan market. It is distributed as a free consumer (B2C) product and is supported by advertising via Google AdMob.
- Phone number lookups: Phone numbers are hashed on-device before any query is transmitted to our servers. Raw phone numbers never leave the user's device over the network.
- Data collected by us: We do not collect GPS location, IMEI, or contact lists. Registered users provide a phone number and optional display name for their account only.
- Advertising (Google AdMob): The app displays advertisements served by Google AdMob. Google may collect and process data in connection with ad delivery, including device identifiers and usage signals, in accordance with Google's Privacy Policy. Where required, the app will present a consent prompt before serving personalised ads.
- Ad personalisation: Users will be able to opt out of personalised advertising within the app settings. Non-personalised ads will be shown to users who decline consent.
- No sale of data: We do not sell user data. AdMob operates independently under Google's terms.
- Data location: All server-side data is stored on infrastructure located in the Netherlands and the European Union.
Third-party services
FennecStack's infrastructure is self-hosted by design. We do not use third-party SaaS analytics, CRM, or cloud storage for operational data. However, the following third-party services are involved at the infrastructure or marketing level:
- Cloudflare — DNS resolution for fennecstack.com. Cloudflare may log DNS query metadata per their own privacy policy. We do not use Cloudflare proxying or analytics features.
- Let's Encrypt — Provides TLS certificates for our web server. No personal data is shared.
- Meta Pixel (Facebook) — A tracking pixel (Pixel ID: 1840371380701808) is installed on fennecstack.com. This pixel sends page view and interaction events to Meta (Facebook Ireland Ltd.) when you visit the site. Meta may use this data to build advertising audiences and measure campaign effectiveness. Meta's data practices are governed by Meta's Privacy Policy. You can opt out via your Facebook ad settings or the Your Online Choices tool.
- Google AdMob — Ad serving in the Dalyly app only (see above).
Note on Google Fonts: This page and the main landing page load fonts from fonts.googleapis.com. This results in a connection to Google's servers from your browser when the page loads. If you prefer to avoid this, you can disable web fonts in your browser settings — the pages are fully legible with system fonts as fallback.
Your rights
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding any personal data we hold about you:
- Access — You can ask us what personal data we hold about you.
- Rectification — You can ask us to correct inaccurate data.
- Erasure — You can ask us to delete your data.
- Restriction — You can ask us to stop processing your data in certain circumstances.
- Portability — You can ask us to provide your data in a portable format.
- Objection — You can object to processing based on legitimate interests.
To exercise any of these rights, email contact@fennecstack.com. We will respond within 30 days. We do not charge a fee for reasonable requests.
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with a data protection supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
Data retention
We keep data only as long as necessary:
- Web server logs — Deleted automatically after 30 days.
- Email correspondence — Retained while the correspondence is active and for up to 12 months after. Deletable on request at any time.
- EventFlow client data — As defined in the individual client contract and DPA.
- ClipNow booking data — 90 days after the appointment date.
- Dalyly — Account data (hashed identifiers only) retained while the account is active. AdMob data retention is governed by Google's policies.
Changes to this policy
We may update this policy when our products launch, when our data practices change, or to reflect changes in applicable law. The "Last updated" date at the top of the page will always reflect the most recent revision.
Material changes will be noted on the main FennecStack website. Continued use of our products after a change is posted constitutes acceptance of the updated policy.
Contact
Questions about this policy or about how we handle your data: