Privacy Policy

Who is responsible

Stresix is operated by Matei Toma, an individual based in Moldova, as a product of devmatei.com. Matei Toma is the controller of the personal data described here. Contact: [email protected].

What we collect

Account: your email address, a hash of your password, whether your email is verified, and your credit balance and history.

Tests: the Docker images or repositories you test, your run settings, the pages and requests you choose, and the results each run produces.

Run secrets: environment variable values, request headers and request bodies you enter for a run. They are encrypted, used only to start the run, and deleted shortly after it ends. Variable names are kept so your report can list them.

GitHub: if you connect GitHub, your GitHub username and an encrypted access token for the repositories you allowed.

Payments: Lemon Squeezy collects your payment details. Stresix receives only the order, the amount and the email used at checkout.

Your IP address is used to protect the service from abuse, for example to rate limit sign-in attempts. It is not stored with your account.

Cookies

Stresix uses one cookie, which keeps you signed in. It is strictly necessary, so no consent banner is needed. Your theme choice is saved in your browser and never sent to us.

Page views are counted with Umami, run by devmatei.com on its own server. It sets no cookies, keeps no IP addresses and builds no profile of you. Inside the workspace it records which screen was opened and a few steps, such as starting a sign up, starting a run (with its tier) or opening checkout. It never records report ids, links, emails or anything you enter. There is no advertising or cross-site tracking.

Why we use it

To provide the service you sign up for: your account, your runs, your reports and your credits. This is necessary to perform our contract with you.

To keep the service safe and prevent abuse, such as testing systems you do not own. This is our legitimate interest.

To keep payment records for as long as the law requires. This is a legal obligation.

Who processes it

Hetzner (Germany) hosts the application, the database and the servers each run uses.

Cloudflare provides DNS and protects the site from attacks, so it handles the traffic to stresix.com.

Resend delivers account emails such as email verification and password resets, so it receives your email address.

Lemon Squeezy is the merchant of record for purchases and handles payments, tax, receipts and refunds.

GitHub, if you connect it, for access to the repositories you choose.

We do not sell personal data and we do not share it for advertising.

How long we keep it

Account, test and report data is kept until you delete your account. Run secrets are deleted shortly after each run ends.

Deleting your account from Settings permanently removes your account, tests, reports and credit history. Payment records held by Lemon Squeezy are kept as tax law requires.

Your rights

You can access, correct, export and delete your data, and object to or restrict how it is used.

In Settings, Download my data gives you a copy of everything stored about your account, and Delete my account erases it.

For anything else, email [email protected]. You will get an answer within 30 days. If you are in the EU or EEA, you can also complain to your local data protection authority.

Where data is stored

Stresix data is stored in the European Union, in Hetzner datacenters in Germany. Cloudflare, Resend and Lemon Squeezy may process data outside the EU under standard contractual clauses.

Children

Stresix is not meant for anyone under 16. If a child has created an account, email [email protected] and it will be deleted.

Changes

When this policy changes, the date at the top changes with it. Significant changes are also noted on this page.